What happens to what you tell MAKBL.

1. Who we are

MAKBL is operated by a UK sole trader, who is the data controller for the personal data described here.

MAKBL is a free private alpha open to adults in the United Kingdom. This policy covers the makbl.com website only.

2. What we collect

• What you write: what you want to become possible, what stops you, what a good outcome looks like, what it would be worth to you, and anything that must be true. You do not need to give your name or create an account.
• Your confirmations: that you accepted the Alpha Terms, confirmed you are 18+ and in the UK, and your sensitive-information choice, each with the wording version and time.
• A private access key: a random code that lets your browser (or your private link) get back to your own submissions. We store only a scrambled version of it.
• An optional email address: only if you choose to add one, to recover your private link and to tell you about your own submission. It is stored separately from what you wrote.
• An abuse-prevention code: to stop flooding, your IP address is read in memory and turned into a scrambled code with a secret key. The raw IP address is not saved. The code changes every day and is deleted within 24 hours.
• Aggregate counts: daily totals such as page views, forms started and submissions saved. These contain no identifier of any kind and cannot be linked to you.
• Agent discovery totals: daily counts of agent-page and skill requests, MCP discovery, authorised gateway calls and observation outcomes, with optional coarse unverified source categories. No visitor identifiers, fingerprinting, raw headers, tokens or task text are stored in these growth totals. They are private operator totals, not a public activity feed.

3. Anonymous-first, but not anonymous

We designed MAKBL so you can take part without telling us who you are. What you write is still personal data if it could identify you, and your access key and any email you add are personal data. We treat all of it that way.

Please describe what you want, not who you are. Do not include names, contact details or unnecessary personal information. You must never include sensitive information about another person. If we find personal or sensitive information about another person in a submission, we will remove or redact it, or delete the submission.

Sensitive information (special category data) means things like health, religion, ethnicity, sexuality, political views or trade union membership. Before submitting, you choose one of two options: that your submission contains no sensitive information about you, or that you give explicit consent for us to process sensitive information about you only where genuinely necessary to understand and group your want. Explicit consent is our condition for processing it. We record which option you chose, the wording version and the time. You can withdraw consent at any time by deleting your submission.

4. Why we use it, and our legal basis

• To run the service you asked for — storing your want, grouping it with compatible wants from other people, and letting you manage it (legitimate interests, and steps you ask us to take).
• To keep the service safe and stop abuse and flooding (legitimate interests).
• To email you about your own submission, only if you added an email (your consent — you can remove the email at any time).
• To understand, in aggregate, whether the service works (legitimate interests; no individual tracking).
• To keep a record of your acceptance of the Alpha Terms and your 18+/UK confirmation (legitimate interests and legal obligations).

5. Automated semantic processing

MAKBL uses AI models to understand what you wrote and to find other submissions that describe a compatible want. This produces a structured summary of the want (for example the outcome, location type and constraints). It is not used to make decisions with legal or similarly significant effects on you, to profile you, or to assess who you are.

Solution providers never see what you wrote, your identity, your email or your stated maximum. They see only an anonymous group description, and only once at least five separate people are in a group, with value shown in bands.

6. Who processes data for us

• Lovable (website hosting and application platform), which serves the site through Cloudflare's global network.
• Supabase, via Lovable Cloud (database and storage). Primary data is held in Frankfurt, Germany (EU).
• Lovable AI Gateway (semantic processing), which passes text to OpenAI and Google models to produce summaries and similarity matches. Submissions are sent for processing only; the gateway is not used to train models on your content.
• Resend (email delivery), used only if you add an email address or we reply to you.
• Google Fonts (typefaces loaded by your browser). This means Google receives your IP address when the page loads; no cookies are set.

Some of these providers may process data outside the UK, including in the EU and the United States. Where they do, transfers rely on UK adequacy regulations or the UK International Data Transfer Addendum to standard contractual clauses provided by those suppliers.

7. What we never do

• No advertising, no selling or sharing of data for marketing.
• No advertising trackers, cross-site tracking, heatmaps, session replay or profiling pixels.
• No public feed, voting or way for another person to find what you wrote.
• No collection of your date of birth or identity documents.

8. How long we keep it

• Your submission: while it is still unmet, until you withdraw or delete it. If a solution forms with your explicit agreement, a minimal sealed record of that agreement is kept.
• Optional email: until you remove it or delete your submission.
• Abuse-prevention code: deleted within 24 hours.
• Ordinary operator and security logs: deleted after 30 days.
• Aggregate daily counts: kept, as they contain no personal data.
• Backups: our database provider keeps automatic daily backups for about 7 days, so deleted data fully ages out of backups within about a week.

9. Storage on your device

We use one strictly necessary cookie to keep you signed into your own submissions on this device without an account. It cannot be read by scripts, is sent only over secure connections, and is removed when you choose “Forget this device”. Operators who sign in use a strictly necessary sign-in session stored in the browser. We do not use analytics, advertising or tracking cookies, so we do not show a cookie banner.

10. Your rights

Under UK data protection law you can ask to access, correct or delete your data, to restrict or object to how we use it, and to receive a copy of it. You can withdraw or delete a submission yourself from your private link. For anything else, contact us using the details below. Because we do not know who you are, we may ask you to prove the submission is yours using your private link.

If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

11. Changes

If we change this policy we will update the date below. Material changes will be shown when you next submit.