Privacy policy
What the Starter Pack does and doesn't collect. Short version: no account, no telemetry, skills live on your machine.
- No account required. Starter Pack works without signing in to anything.
- No telemetry. We do not track which skills you install, how often you use them, or what your agent does with them.
- Skills install locally to your machine. Nothing is sent to Floom servers during installation.
- The only network calls are fetching skill files from publishers' GitHub repos and the manifest from
floomhq/packs. Those are read-only pulls; no data leaves your machine via Floom.
What we collect
For the Starter Pack specifically, a standalone static site with no login, we collect nothing about you individually.
The Starter Pack landing page (floom.dev/starter) is served by Vercel. Vercel may log standard request metadata (IP address, user-agent, timestamp) at the infrastructure level per their own privacy policy. We do not receive or store this data ourselves.
The npm install count shown on the landing page is fetched from the public npm registry API; no identifying data is sent.
Local-first install
When your agent or CLI runs npx @floomhq/starter, all skill files are written to your local machine, typically into your agent's config directory (e.g. ~/.claude/skills/ or ~/.codex/skills/).
- The installer does not send your machine name, username, agent identity, or skill usage patterns to Floom.
- The installer does not create a user account or set any persistent identifier.
- Skill files remain on your machine. Uninstalling means deleting the files; nothing to revoke remotely.
Network calls
The Starter Pack makes exactly two types of outbound calls at install time:
- Manifest fetch: reads the curated skill list from
github.com/floomhq/packs(public GitHub repo, read-only). - Skill file fetch: downloads each skill's
SKILL.mddirectly from the publisher's GitHub repo (also public, read-only).
Both are standard HTTPS GET requests. No authentication token, session cookie, or user identifier is sent. GitHub may log requests per their own privacy policy.
What we don't do
- We don't collect your email, name, or any account data; there is no account.
- We don't track which skills you install or remove.
- We don't observe how your agent invokes skills or what prompts it sends.
- We don't sell data. We have no data to sell.
- We don't share anything with third parties for advertising or analytics.
Contact
Questions about this policy: hello@floom.dev
If you use the full Floom app at floom.dev (which does have accounts), the main Floom privacy policy applies there.