affiliate-mcp is an open-source tool built so the maintainer never sees your data. That holds completely for the local server, which is the default and stays free forever. There is also an optional hosted tier: if you choose it, we do hold your network keys, encrypted. Both are set out below, separately.
only what you allow.
This website is a separate thing from the software. These pages use Cloudflare Web Analytics, which sets no cookies, stores nothing on your device, and creates no visitor or session identifier. It counts page views and page-speed metrics, nothing else. Your IP is used for country-level geolocation and is not stored. There is no cookie banner because there is nothing on your device to consent to. The hosted dashboard and the OAuth consent pages carry no analytics at all.
~/.affiliate-mcp/.env, locked to your user account (mode 0600). They never leave your computer except to authenticate directly with the networks you configure.Affiliate data and credentials are sent only to the official APIs of the networks you configure. They receive the same requests they'd get from their own dashboard. For example:
Each network's own privacy policy governs the data it returns.
If you explicitly enable anonymous usage telemetry, coarse daily counters are sent to the project's telemetry endpoint. They never include affiliate data, credentials, prompts, arguments, results, or error text.
The hosted tier exists for people who cannot install and run a server themselves, and for reports that need to run while your machine is off. Doing that requires us to hold your network API keys. This section says exactly what that means. It applies only once you have created a hosted account and connected a network.
A stored credential serves only its own owner's requests. Beyond the affiliate networks themselves, the hosted tier uses three sub-processors: Cloudflare (compute, storage, and the credential vault), Stripe (payments and billing), and Resend (sign-in and digest email). Your affiliate data is not used for analytics, for training, or for any purpose beyond serving you.
Deleting your hosted account deletes the encrypted credentials, the key protecting them, the account record, and the subscription record including the billing email. Deletion is complete, not a soft flag. Two limits we would rather state than let you discover: self-serve export is not built yet, so a copy of your stored data has to be requested; and because session tokens are stateless, a token already issued stays valid until it expires rather than being revoked immediately.
For the hosted tier we act as a processor of the data you store with us. There is no SOC 2 or ISO 27001 certification and no data processing agreement on offer at present. If you need those, the local server does the same job with no vendor relationship at all.
~/.affiliate-mcp/.env.affiliate-networks-mcp telemetry status, telemetry enable, or telemetry disable.npx affiliate-networks-mcp uninstall, then delete the ~/.affiliate-mcp/ directory.