Privacy

Last updated 28 October 2026. symbola.sh is run by SL Spiking Labs UG ("Spiking Labs").

Browsing, downloading and the connector

Reading the site, downloading a pack, using the symbola CLI, and using the Symbola connector (symbola.sh/mcp, in ChatGPT, Claude or any other AI tool) need no account. The connector only reads the public packs on symbola.sh. It does not receive your conversation, only the words and pack names your assistant sends it with each request, and it stores none of them.

• What is collected. Standard request logs kept by our host, Cloudflare: IP address, time, requested address and browser or client name. For each pack we keep one download count, with nothing about who downloaded it.
• Why. To serve the site and protect it from abuse, and to show publishers how often their pack is downloaded.
• Who sees it. Spiking Labs and Cloudflare, which runs the site for us. We sell nothing and share nothing with advertisers. There are no ads, trackers or analytics scripts.
• How long. Cloudflare keeps request logs for a short time (days, not months). Download counts are kept as long as the pack is listed.

Publishers who sign in

Publishing a pack or editing a publisher profile means signing in with GitHub.

• What is collected. Your GitHub account id, login, name and avatar, the organisations that installed the Symbola GitHub App, a session cookie, any CLI tokens you create (stored only as a hash), the packs you upload, and the profile you write.
• Why. To check which namespaces you may publish to, and to turn your upload into a pull request on the public registry.
• Who sees it. Packs, profiles and the pull requests that publish them are public on symbola.sh and GitHub. Everything else stays with Spiking Labs, Cloudflare and GitHub.
• How long. Sessions 7 days, uploads 7 days, publish requests 90 days, CLI tokens until you delete them. Published packs stay until you ask for their removal.

Your choices

You can use everything except publishing without telling us who you are. Signed-in publishers can sign out, delete CLI tokens and request a pack's removal from the account page. To ask what we hold about you, or to have it deleted, open an issue.