Privacy Policy

Last updated: May 5, 2026

This Privacy Policy describes how Elephant Tortoise LLC (“we”, “us”), a Texas limited liability company and the operator of Cordon for MCP (the @getcordon/cli and @getcordon/policy packages, the @getcordon/core proxy engine, and the hosted dashboard at app.getcordon.com), collects and uses information.

What we collect

When you sign in to the Cordon dashboard with GitHub, we receive from GitHub:

• Your GitHub user ID and login (username)
• Your email address
• Your avatar URL

When you use Cordon with hosted audit logging enabled, we receive audit events that you generate, which include:

• Tool call metadata (server name, tool name, timestamp, duration)
• Policy decisions (allowed, blocked, or approved)
• The arguments passed to each tool call, which may contain content from your usage

We do not collect:

• Payment information — the hosted dashboard is currently free, no payment is processed
• Browsing history outside our domains
• Personal data beyond what is listed above

How we use it

We use the data to authenticate you on the dashboard, show you your own audit logs and approval queue, and operate the service.

We do not sell your data, share it with third parties for marketing, or use it to train AI models.

Third-party services we use

• GitHub for OAuth authentication (governed by GitHub’s privacy policy)
• Railway for hosting the server and database
• Stripe for future payment processing (currently dormant; no payment data is collected today)
• Plausible Analytics for privacy-friendly traffic measurement — no cookies, IP-anonymized

Data retention

• Audit log events are automatically deleted 30 days after they are received.
• Your user account and API keys are retained until you request deletion.

Your rights

You can request a copy of your data, correction of inaccurate data, or deletion of your account and associated data by emailing support@getcordon.com.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent change. Material changes will be announced on getcordon.com or via email to registered users.

Contact

Questions, requests, or concerns: support@getcordon.com.