Privacy policy
This covers the datapitfalls web app at www.avoidingdatapitfalls.com and the Data Pitfalls MCP connector at www.avoidingdatapitfalls.com/api/mcp. In short: we don’t ask who you are, and we don’t store what you send.
The MCP connector
The connector serves the Avoiding Data Pitfalls taxonomy to Claude. It has no accounts and no sign-in.
- What it receives: the tool requests Claude makes, such as a rule id, a search keyword, or the kind of work to get a checklist for. The work you ask Claude to review stays in your conversation with Claude and is not sent to the connector. The one exception is the optional
review_for_pitfallsprompt: if you pass it text, that text is sent to the connector, placed into the prompt, and returned to Claude in the same request. - What it keeps: nothing. The connector has no database and does not log request contents. Each request is handled on its own and then discarded.
- Rate limiting: to prevent abuse, the server counts requests per IP address in memory for about a minute. These counts are not written anywhere.
- No AI calls: the connector makes no calls to Anthropic or any other AI service.
The web app
- What you submit: the charts, text, code or documents you scan are sent to Anthropic’s Claude API to run the audit and are not stored by this app. Anthropic handles API data under its privacy policy. Please don’t upload confidential or personal data.
- Rate limiting: scans are limited per IP address, counted in memory for about a minute and not stored.
- Analytics: we use Vercel Web Analytics, which is cookieless and does not collect personal data, to count page views.
Hosting and third parties
The site and connector run on Vercel. Like any web host, Vercel processes standard request information such as IP addresses to deliver and protect the service, and keeps short-lived operational logs under its own privacy policy. We don’t sell or share data with anyone else.
Retention
We keep no copies of what you send to the web app or the connector. Rate-limit counts last about a minute. Hosting logs are kept by Vercel for its standard retention period.
Contact
Questions about this policy or your data: open an issue on GitHub or contact Ben Jones through dataliteracy.com.
Last updated October 13, 2026.