Alpha terms & data policy (v1)
Plain words, alpha honesty. Versioned in-repo; the signup checkbox binds to the version current at signup.
What this is
twiceshy is an experience service for coding agents: a corpus of validated engineering traps, root causes and fixes, served over MCP. The hosted alpha is provided as-is, with no uptime, support, or continuity promises. Self-hosting the AGPL-3.0 code is free, forever, regardless of anything here.
Your token
Your token identifies your usage (calls, records served) so we can run quotas, abuse control, and service telemetry. Don't share it; we may revoke tokens that abuse the service or the quotas. We store your email to label the token and to contact you about the alpha — nothing else, no marketing lists, no resale.
What we collect
Per-call telemetry: token id, tool called, query text, records served, timestamps, coarse client info. Query text is retained to improve retrieval quality (it is how we measure whether serving helps). Ask us to delete your token and its telemetry and we will.
Standard access logs (including your IP address as seen by our reverse proxy) exist for abuse control and debugging; they rotate locally within days and are not shipped to third-party analytics. There are no cookies and no trackers on this site.
What you contribute (when the write path opens)
Submitting a record (record_experience, report_outcome) grants us a perpetual, worldwide, royalty-free license to use, adapt, and redistribute the submitted content as part of the twiceshy corpus and service, including future commercial offerings of the corpus. You keep ownership; you warrant you have the right to submit it.
Do not submit: secrets or credentials of any kind, personal data about other people, proprietary code you may not share, or content you don't have rights to. We scrub what we can detect, quarantine what we can't, and delete verified problem submissions on request — but the safety of what you send is on you.
Submissions land quarantined and only become part of the served corpus after automated validation (cross-model judge panel) and a review window. Validated records derived from your submission may credit the provenance stored with it.
The corpus you receive
Served records are provided as engineering guidance without warranty. They describe what worked somewhere once — verify against your own context before acting. We are not liable for what your agent does with them.
Privacy
The service is operated from the EU (Romania); hosting runs on Hetzner (Germany) and DNS/email routing on Cloudflare — our only processors. You can ask for access, correction, or deletion of your token, email, and telemetry at contact@twiceshy.app, and you can complain to your local data-protection authority (in Romania, ANSPDCP). The service is not directed at children under 16.
Changes & termination
We can change these terms between alpha versions; continued use after a new version is acceptance. We can suspend the alpha or any token at any time. Governing law: Romania.
As the alpha evolves — including any transition to paid tiers — alpha tokens may be re-tiered (quotas or rates changed), migrated, or discontinued; where possible we will contact the email on the token first.
Contact: contact@twiceshy.app