Privacy

What Skill Builder keeps, what it never keeps, and how to reach me. Last updated 30 September 2026. Back to Skill Builder

Skill Builder is run by me, Tadej Bokan, in Slovenia. I am the data controller for everything on this page. Write to tadej@tadejbokan.com for anything about your data.

What I never store

Your answers and your skill. They stay in your browser's storage, on your device. To write the skill, your answers are sent once to Anthropic's API, which returns the document; I keep no copy of either. Each refinement sends the current skill and your instruction the same way. If you ask me to email the skill, it travels as an attachment through Resend and is not stored on my side.

What I store when you use the app

A hashed version of your network address, never the address itself, together with usage counts: how many skills you have generated, how many refinements per skill, and how many today. This runs the free first skill and the daily ceilings that keep the app affordable. The hash is made with a secret key, so your network address cannot be read from it.

What I store when you give your email

• Your email address.
• Whether you ticked the newsletter box, and when. The box starts unticked and the unlock works without it.
• Where you gave your email (the unlock, the waitlist, or a notify-me card), which skill blueprint you were using, which coming-soon skills you asked to hear about, and which email sequence step you are on.
• A cookie in your browser, valid for one year, that keeps you unlocked on that device. It holds your email address and a signature that proves I set it, and nothing else. Scripts on the page cannot read it.

The same email becomes a contact at Resend, my email provider, labelled with the brand, the app, the source and the category. It joins the newsletter list only if you ticked the box and then confirmed it.

The newsletter

The System Layer is separate from the unlock. You join only by ticking the box and clicking the link in the one confirmation email I then send; until you click, nothing else arrives. Every email carries a one-click unsubscribe link that removes you from the list and keeps your unlock working. Transactional emails you request, like your skill file, can still arrive.

Analytics

I use PostHog on EU servers, without cookies. Nothing is written to your device for analytics, there is no session recording and no profile of you. Your network address is discarded on arrival. Events carry the page, the blueprint id, counts and basic browser details, never your answers or your email.

Who processes data for me

• Anthropic, to write the skill from your answers.
• Supabase, in the EU, for the database.
• Resend, for email.
• PostHog, in the EU, for analytics.
• Vercel, for hosting.

Each processes data under its own terms and only for the purpose named here. Anthropic, Resend and Vercel are US companies, so data can be processed outside the EU under their data processing terms. Nothing is sold or shared for advertising.

How long I keep it

Your email and its settings stay until you ask me to delete them. Unsubscribing keeps the row with an unsubscribed flag, so I never mail you again by mistake. The hashed network address and usage counts stay as long as the app runs; they are not linked to you unless you unlocked with an email.

Your rights

You can ask what I hold about you, have it corrected or deleted, object to its use, or take your data with you. Write to tadej@tadejbokan.com. You can also complain to the Slovenian Information Commissioner (Informacijski pooblaščenec).

Legal basis, in short

Running the app and the unlock you asked for: performance of what you requested, and my legitimate interest in keeping a free tool from being abused. The newsletter: your consent, which you can withdraw at any time.