privacy

your data,
your machine.

affiliate-mcp is a local-only, open-source tool, built so the maintainer never sees your data. Here's exactly what that means.

what leaves your machine

only what you allow.

✕ No affiliate data, credentials, prompts, arguments, results, or error text in telemetry.
→ Optional anonymous usage telemetry is off by default and sent only after you explicitly opt in.
✕ No crash reporting.
✕ No account, sign-up, or registration.

how your data is handled

→ The tool runs entirely on your own machine.
→ Credentials are stored locally in ~/.affiliate-mcp/.env, locked to your user account (mode 0600). They never leave your computer except to authenticate directly with the networks you configure.
→ Affiliate data is fetched live and processed locally. Optional persistent caching is off by default; when explicitly enabled, selected closed-window results are stored locally with owner-only permissions and bounded expiry.

who it's shared with

Affiliate data and credentials are sent only to the official APIs of the networks you configure. They receive the same requests they'd get from their own dashboard. For example:

Awinapi.awin.com CJ Affiliateapi.cj.com eBay Partnerapi.ebay.com Impactapi.impact.com Rakutenapi.linksynergy.com

Each network's own privacy policy governs the data it returns.

If you explicitly enable anonymous usage telemetry, coarse daily counters are sent to the project's telemetry endpoint. They never include affiliate data, credentials, prompts, arguments, results, or error text.

your control

→ Remove a network by deleting its keys from ~/.affiliate-mcp/.env.
→ Check or change telemetry at any time with affiliate-networks-mcp telemetry status, telemetry enable, or telemetry disable.
→ Uninstall entirely with npx affiliate-networks-mcp uninstall, then delete the ~/.affiliate-mcp/ directory.

read the full privacy policy ▸