Legal

Privacy Policy

Last updated: August 2026  ·  PublishMCP  ·  publishmcp.net

This Privacy Policy explains what information PublishMCP, operated by Anderseen OÜ (Estonia), collects, how we use it, and what choices you have. If anything is unclear, email us.

Information we collect

When you create an account, we collect:

• Your email address
• A one-time login code (no password is ever stored)
• Optional account settings you choose to save

When you use the service, we store:

• Articles you publish — slug, title, summary, body HTML, category, tags, image URL, domain, and publication status
• Images you upload or generate via AI — stored in your account folder on our server
• A personal connector token we generate for you, which authenticates requests from Claude to our service
• Optionally: an OpenRouter API key you provide, stored encrypted with AES-256
• Optionally: a Google OAuth access token and refresh token (encrypted), if you connect Google Search Console

We do not store conversation data from your Claude sessions, prompts you type, or data from your website visitors.

How we use your information

• To store and serve your published articles via the JSON API
• To make Google Search Console API calls on your behalf when you request it
• To generate and store article images via OpenRouter when you request it
• To communicate with you about your account
• To detect and prevent fraud or abuse

We do not sell your information, share it with advertisers, or use it to train AI models.

Your article content

Articles you publish are stored in our database and served via our public JSON API to your website. By using the service, you grant PublishMCP permission to store and serve your article content. You retain full ownership of the content you publish. You can export, unpublish, or delete any article at any time.

Google Search Console data

If you connect Google Search Console, we store your OAuth token encrypted. Search Console data (queries, impressions, clicks) is fetched live on each request and returned to your Claude session — it is never stored on our servers. We request webmasters.readonly scope only — we cannot make any changes to your Google account. You can disconnect at any time from MCP Settings, which immediately deletes the stored token.

Third-party services

• Anthropic — your AI assistant (Claude). We do not send your article content to Anthropic; Claude calls our MCP server, which reads from and writes to your account database
• OpenRouter — optionally, for AI image generation using your provided API key
• Google LLC — optionally, for Search Console read-only access via OAuth
• newsorwhat.com — optionally, if you enable syndication, article teasers (title + summary) are shared to this platform

Data retention and deletion

When you delete your account, we immediately delete your articles, images, connector token, OAuth tokens, and API keys. Your email address is anonymized. Operational logs are purged on a 90-day cycle.

Cookies and sessions

We use strictly necessary cookies to keep you logged in to the dashboard. We do not use advertising cookies or third-party tracking pixels on our own pages.

Data security

All connections use HTTPS with TLS 1.2 or higher. OAuth tokens and API keys are encrypted at rest using AES-256. Access to production systems is limited to authorized personnel.

Your rights

If you're in the EU/EEA, you have rights under the GDPR including access, correction, deletion, and portability. Email us to exercise these rights. We typically respond within a few business days. You can export all your articles at any time using the CSV export in MCP Settings.

Children

This service is intended for adults operating websites and is not directed at children under 16.

Changes to this policy

We may update this policy occasionally. The "Last updated" date reflects when changes were made. Material changes will be communicated to active users by email.

Contact