AAR Maker: privacy policy
AAR Maker is a read-only library served as an MCP connector at https://aar.groundedforge.com/mcp, run by Chris Gagné. This page says what it collects, where that goes and how long it's kept.
What it collects
- Your GitHub username and numeric id, when you sign in. GitHub is asked for no permissions, so AAR Maker sees no email address, no repositories and nothing private, and it keeps no GitHub token.
- Sign-in records: the AI client you connected (Claude, ChatGPT, Cursor or another) and the tokens it holds, stored hashed. A cookie on this site remembers your consent for 30 days.
- A log line when you sign in, connect and call a tool: your GitHub username, the AI client (at sign-in), and for a tool call the tool and the library file or section it read, or how many matches a search found. Nothing else about a request is logged.
What it doesn't collect
Your conversation stays with your AI client, under that client's own terms. A tool call carries only short arguments, such as a file name or a few search words. The server uses them to answer and logs none of them, so what you type never reaches the logs.
Who else handles it
Cloudflare hosts the server, its logs and the sign-in records. GitHub handles sign-in. Nothing is sold or shared with anyone else, and there are no analytics, ads or tracking cookies.
How long it's kept
Logs: up to seven days, Cloudflare's retention. Access tokens expire after 30 days and refresh tokens after a year. The consent cookie lasts 30 days.
Your choices
Remove the connector in your AI client to stop using it, and revoke AAR Maker under GitHub → Settings → Applications → Authorized OAuth Apps. To have your sign-in records deleted now, or with any question, open an issue at github.com/chrisgagne/grounded-forge/issues.