Privacy Policy

Last updated: August 1, 2026

Roget ("Roget," "we," "us") helps teams store, version, and share agent skills, and connect their AI agents to them over MCP. This policy explains what we collect, how we use it, and the choices you have.

Information we collect

Account information. When you create an account we collect your email address and a hashed password (managed by our authentication provider). You may optionally set a display name.

Content you create. The skills, descriptions, tags, and version history you add to Roget, plus the sharing settings you choose.

Agent keys. When you create an API key for an agent, we store only a cryptographic hash of it, never the raw key, along with basic metadata such as a name and the time it was last used.

Cookies & analytics. We use a session cookie to keep you signed in. With your consent, we use Google Analytics to understand how Roget is used so we can improve it — you can decline in the banner, and analytics stays off unless you accept. We never use advertising cookies and never sell your data.

How we use your information

We use your information to provide and secure the service: to authenticate you, store and version your skills, enforce the sharing and access controls you set, serve your skills to agents you connect, and maintain the reliability and security of the platform.

Sharing and disclosure

We do not sell your personal data. Your private skills are visible only to you and the specific people you share them with. Skills you mark public are visible to anyone in the directory — that is their purpose, so only make public what you intend to.

We rely on infrastructure providers to run Roget — including Supabase (database, authentication) and Vercel (hosting). They process data on our behalf under their own security and privacy commitments. We may also disclose information if required by law.

Your content and ownership

You own the skills and content you create. You control their visibility (private, shared, or public) and can edit or delete them at any time.

Security

Access to skills is enforced at the database layer, agent keys are stored only as hashes, and traffic is encrypted in transit. No system is perfectly secure, but we take reasonable measures to protect your data.

Data retention and deletion

We keep your data while your account is active. You can delete individual skills at any time, and you can request deletion of your account and associated data by contacting us at hello@roget.cc.

Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us at hello@roget.cc.

Children

Roget is not directed to children under 16 and we do not knowingly collect their personal data.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date above.

Contact

Questions about this policy? Email us at hello@roget.cc.