# GUI95 privacy information

Publisher: Stephen Lavelle. Updated 18 October 2026.

GUI95 has a standalone bundled skill and reference collection, plus an optional hosted MCP service. Installing or using the standalone skill does not connect to the publisher, add analytics, or send prompts, project files, generated code, or personal information to the publisher. Neither version uses advertising or requires a GUI95 account.

The host assistant reads the instructions and may work with project files that you authorize it to access. That processing is governed by your assistant provider's privacy policies and your account settings. The hosted version additionally connects to the GUI95 MCP endpoint only when you install or configure that connection.

The hosted service receives reference-search queries and tool requests to answer them. Search text and other ordinary tool arguments are processed in memory and are not retained by the application. It stores daily aggregate counts by tool, errors, and requested public reference path. It does not persist client IPs, client identifiers, account details, or conversation identifiers. Rate limiting temporarily uses a salted client-address hash in memory; it is not written to disk and resets when the service restarts. Hosting infrastructure may separately produce ordinary HTTP operational logs. The supplied proxy configuration disables access logging for the GUI95 route; this is also verified for the deployed Caddy configuration.

Build-kit generators process bounded layout labels, sample values, application names and component-version manifests in memory. Generated ZIP files and their file manifests are held in a bounded cache for up to 15 minutes, may be evicted sooner, and disappear on service restart. Anyone with a generated artifact URL can retrieve that output while it remains cached. These inputs and outputs are not written to disk, recorded as feedback, or included in aggregate counters. Use the standalone local CLI for private specifications. The local verification runner writes reports and screenshots only to the directory you choose; it does not upload those reports to GUI95.

If you authorize an agent or choose yourself to send feedback, the service stores that report privately for the publisher to improve GUI95. The report contains its UUID, timestamp, agent-or-human source label, category, summary, verification label, optional evidence and public GUI95 reference path, and the reference-content revision. Do not include private source code, conversations, credentials, personal information, or private machine paths. Basic validation rejects some obvious secret and path patterns but cannot guarantee that a report is free of private information. The service does not automatically change guidance or publish reports.

Feedback and daily counters are retained for 90 calendar days and removed at the next running cleanup or startup after that window. Only someone with access to the publisher's server files can read the private inbox; no public feedback-reading endpoint is provided. The service does not automatically receive the rest of a conversation, the generated interface, or whether the user's project succeeded.

The optional browser demos run their application logic in your browser. They do not upload drawings or selected files, and do not save desktop preferences between reloads. Save commands request downloads to your device. The MCP service can serve the same public examples and exact reference-file downloads; these ordinary HTTP requests are processed to deliver the files and rate-limit requests, without application-level visit histories. The GitHub-hosted demo and repository are subject to GitHub's own data practices. Links to external reading material open those providers' websites.

If you voluntarily open a public GitHub issue or pull request, the information you include (such as your GitHub username, description, and attachments) is visible to the publisher and other GitHub visitors and is used to discuss and maintain the project. It remains in that public discussion until removed through GitHub's controls or moderation. Do not include private project files, credentials, or sensitive personal information in a public issue. You can edit or remove your contributions using GitHub's available controls.

You can stop using GUI95 by uninstalling the skill or disconnecting the hosted plugin. For questions or removal of an accidentally submitted feedback report, contact Stephen Lavelle through the [project's issue tracker](https://github.com/increpare/gui95/issues) and provide only the report receipt UUID; do not repeat sensitive report contents in a public issue. Aggregate counters are not linked to individual users and cannot be identified as a particular person's activity.