Privacy policy
What the Ibis Gear connector receives, what it keeps, and who else is involved in delivering it.
Applies to the MCP connector at https://mcp.ibis-gear.shop/mcp and
to these pages. It does not cover the https://ibis.net.ua online shop, which has its
own policy.
In short
The connector reads a public product catalogue. It never receives your Claude account, your identity or the rest of your conversation — only the search terms and product ids needed to answer the question in front of it. It answers and forgets: we do not keep a log of tool calls, their arguments or the addresses they came from. We do not sell, share or advertise with anything.
Who is responsible
Ibis, operator of https://ibis.net.ua, is the controller for the data described here. Contact: ibisarms@pm.me.
What the connector receives
When Claude calls a tool on your behalf, the server receives only that call's arguments. In practice that is:
- Search terms you asked about — for example a brand, a category or a price ceiling.
- Product, category or brand identifiers taken from earlier results.
- Standard request metadata that reaches any web server, such as the IP address and user agent of the connecting client.
It does not receive your name, email, Claude account, payment details, files, or any part of the conversation other than the arguments of the call itself. There is no sign-in, so there are no accounts or tokens to store.
What we keep
No call log. Tool calls and their arguments are used to answer the request and are not written to any log or database.
Rate limiting. To keep one client from crowding out the others, the server counts requests per client IP address in memory over a one-minute window. The count is discarded when the window ends and is never written to disk.
Operational logs. The server records its own health — start-ups, errors, database and storage problems, and the fact that a rate limit was hit. These entries do not include search terms, tool arguments or client addresses. They are rotated by size and overwritten as new entries arrive.
Why
- Answering the question. The arguments of a call are needed to run it.
- Keeping the service up and fair. Operational logs let us diagnose failures; the in-memory rate limit stops a misbehaving client from degrading the service for everyone else.
The lawful basis is our legitimate interest in operating a secure, working service.
Who else is involved
- Cloudflare carries the connection to
mcp.ibis-gear.shopandchatgpt.ibis-gear.shopas our network and TLS provider, and processes connection data such as the IP address to deliver the traffic. - MEGA S4 object storage holds the product photos. Photo links are signed and expire after about an hour; when a client opens one, it connects to that storage directly. The photos are catalogue images and carry no data about you.
Beyond these service providers, nobody. We do not sell, rent or share data with advertisers, do not profile individuals and do not use it to train machine-learning models. The pages you are reading carry no analytics, no cookies and no third-party scripts.
Your rights
Because we keep nothing tied to a person, there is normally nothing to look up or delete. You may still ask what we hold, ask for deletion, or object to the processing described above. Write to ibisarms@pm.me and we will respond within 30 days.
Children
The catalogue includes goods whose sale is age-restricted under Ukrainian law. The connector is not directed at children and is not intended for use by anyone under 18.
Changes
If this policy changes materially, the updated version appears here with a new date below before the change takes effect.