Draft of 8 October 2026 · not yet in effect
Privacy
Draft for review. Counsel reviews this text before Aptarium launches; until then it is not in effect.
When you sign in
You sign in with Google. Google tells us your name, your email address, your profile picture and the identifier of your Google account. We keep these to know who you are and to show your name beside your work.
We set only the cookies sign-in needs: one that keeps you signed in, and short-lived ones while Google sign-in completes. There are no advertising or analytics cookies.
What you put in Aptarium
We store what you and your workspace create: workspaces, spaces, apts and every version of their files, skills and their versions, comments, invitations and the agent tokens you issue.
We keep a record of each change, saying who made it and when, so your workspace has an honest history. When your AI tools fetch or sync your skills, we record which tool holds which version.
Who sees it
Your work is seen by the people your workspace lets see it: its members, the people on a space, and anyone an apt is shared with. Guests see only what is shared with them.
Apt files are served from a separate content address, inside a sandbox, so an apt cannot read your Aptarium session.
A skill listed in the Community is public, with its publisher’s name and an example apt, because that is what listing it means.
The services we use
Google, to sign you in. Resend, to send invitation emails. Our hosting and storage providers, to run Aptarium and keep its files.
context.dev, only when a workspace admin asks for a design skill: we send it the workspace’s website address, it reads the public site, and Aptarium fetches the logo from that site itself.
What we never do
We do not show ads and we do not sell your data. Aptarium runs no AI models: we never send your apts, skills or comments to one.
Our logs record requests so we can fix problems. They never contain passwords, tokens, or the content of your apts, comments or skills.
Deleting things
When an apt is deleted, it is removed permanently 30 days later, with its versions and files. A remix someone else made of it stays theirs.
To ask for a copy of your data, or to be removed from Aptarium, use the contact address we will publish here before launch.