Privacy Policy

Version 2026-07-17

Performance MCP stores the minimum account, OAuth, user API-key, billing, credit, and bounded usage data needed to operate the service. Passwords and OAuth tokens are not stored in plaintext. User API keys are stored only as one-way hashes with bounded metadata; the plaintext value is shown once.

Stripe and Patreon process provider-side payment details. Performance MCP stores provider identifiers needed to reconcile purchases, memberships, and credits; Patreon OAuth tokens are not retained.