Privacy policy

Last updated 2026-09-17.

This page covers Sitecake (sitecake.net), including the Claude Connectors Directory MCP connector at https://sitecake.net/mcp. Operated by TODO(Nik): company legal name.

Account data

Creating an account only requires an email address. We store your email, an internal account id, your plan and account status, and the timestamps of your login sessions. Sign-in uses a one-time emailed code — we don't store a password.

Site content

The HTML, text and images that make up your sites are stored in Cloudflare R2 (object storage) and Cloudflare D1 (a SQL database) under our Cloudflare account. Draft and published versions of a page are kept separately so a draft edit doesn't affect what's publicly live until you (or an agent acting for you) publish it.

OAuth connections and API keys

Connecting Claude (or any other client) to Sitecake creates an OAuth grant and, on approval, an API key scoped to your account, labeled so you can recognize it (for example "Claude connector, 2026-09-17"). The grant and key let that client act on your account's sites until you revoke it. You can revoke an API key at any time from your account settings; doing so also ends the associated connection.

What we log

Cloudflare Workers Logs capture request metadata (method, path, status, timing) and the operational events our code writes deliberately (for example, a tool name and whether it succeeded) — never full request bodies, page content, or file contents. Logs are retained for the period set on our Cloudflare account (TODO(Nik): confirm and state the exact Workers Logs retention window here) and are not shared beyond what's needed to operate and debug the service.

Conversation data

Sitecake's MCP connector only ever receives the arguments of a tool call (for example, a subdomain, an HTML string, or an image) — never your conversation with Claude, and nothing beyond what a tool call actually needs to do its job. We don't store conversation transcripts at all.

Who processes this data

Cloudflare is our infrastructure and email provider: Workers, R2, D1 and KV host the application and its data, and Cloudflare Email Routing/Email Sending delivers login codes and forwards support email. Paddle is our billing processor for paid plans; it only sees data relevant to a purchase, not your site content.

Deletion

To delete your account and its data, or to ask what we hold about you, email privacy@sitecake.net. We'll confirm once your sites, account record and any active API keys have been removed.

Contact

Privacy questions: privacy@sitecake.net. Support: support@sitecake.net.