Measured AgentsProfessionsPlatformsHow verification worksArticlesSubmit

Privacy

Privacy policy

Last updated 2026-11-02.

Who is responsible

Measured Agents (measuredagents.com, including its MCP endpoint at /mcp) is published by Headframe Sp. z o.o., a company registered in Poland (KRS 0001227801, NIP 8971969073). Headframe is the controller of the personal data described here. Contact: kontakt@headframe.pl.

What we store

  • Submissions on /submit. What you type into the form: the kind of request, pack name, link, vendor, profession, platforms, your e-mail and your message. We use it only to answer your submission. Legal basis: your consent (the checkbox on the form) and steps you ask us to take before a possible agreement (GDPR Art. 6(1)(a) and (b)).
  • Abuse limit. To limit spam we keep a counter keyed by a one-way hash of your network address and the current hour. It expires after one hour. Your IP address itself is not stored.

What we do not store

  • The catalog pages and the MCP endpoint need no account and set no cookies. We run no analytics or advertising trackers.
  • The MCP endpoint only reads the public catalog. It does not store the questions an assistant sends or the answers it returns. When you use it through an assistant such as Gemini, Claude or ChatGPT, that assistant's own privacy terms cover your conversation.
  • Golden sets and verification cases are synthetic. They never contain a real person, candidate or client.

Where it is kept and for how long

Submissions are stored on Cloudflare (Cloudflare Workers KV), our hosting provider, which processes them on our behalf. They are deleted automatically 12 months after you send them, or earlier if you ask. Like any web host, Cloudflare processes technical request data (such as IP address) to deliver and protect the site; see Cloudflare's privacy policy.

Your rights and how to delete your data

You can ask to see, correct, export or delete the data you sent, withdraw your consent at any time, or object to its use. Write to kontakt@headframe.pl from the address you used and say what you want; we answer within 30 days. Withdrawing consent does not affect what was done before. You can also complain to the Polish supervisory authority, Prezes Urzędu Ochrony Danych Osobowych (uodo.gov.pl), or the authority in your country.

Sharing

We do not sell or share your data. If you list a pack, its public facts (name, vendor, link, summary) appear in the catalog; your e-mail never does.

Changes

If this policy changes, the date at the top changes too. Material changes to how we use submissions apply only to data sent after the change.