Public beta privacy notice · Effective 4 September 2026

Know which data stays local and which data reaches the evaluator.

This notice explains the public beta’s current behavior. The service is operated by Alan Riley. Contact xeolite.app@gmail.com with privacy questions or applicable rights requests.

Stays in your browser

  • Pasted or uploaded MCP metadata and its incomplete review workbench.
  • Draft text before you press “Run ten checks.”
  • Downloaded MCP workbenches, canonical reports, and preview preparation packs.

The mapper does not fetch a URL or connect to an MCP server. The preview preparation button creates a local file and does not submit interest.

Sent for evaluation

When you run the checker, the exact manifest JSON and buyer-request JSON are sent to the bounded compatibility evaluator. The application evaluates them in memory and is not designed to persist or log their contents. Hosting and security infrastructure may still process ordinary request metadata.

Never include credentials.

The Lab rejects several recognized secret-bearing field names, but no browser check can reliably detect every secret value. Remove API keys, tokens, passwords, client secrets, and private keys yourself.

Accounts, analytics, and hosting

The current build has no accounts, contact form, interest-list submission, advertising tracker, analytics, session replay, or cross-site user identifier. The fixed RunSAVE referral marker contains no graph or report payload.

The application has no submission database and its code does not log request bodies. The hosting and security providers may retain ordinary request metadata under their own operational and security policies. Any future analytics or preview intake will require a separate notice and consent review.

Retention, deletion, and contact

The application does not create an account or saved-submission record to delete. Drafts remain in browser memory; downloaded files remain under your control. Do not submit confidential business information you are not authorized to use.

For privacy, retention, correction, or deletion questions about records under the operator’s control, email xeolite.app@gmail.com without attaching sensitive manifest contents. The operator will address applicable requests and coordinate with the hosting provider where necessary.

Behavior reviewed against this build on .