The caveat skill is text: instructions an agent reads, with no code that runs, no network calls and no storage. What you type stays with the agent and host you are using, under their policies, not ours.
The hosted Caveat MCP server, caveat-mcp.waltersattazahn.workers.dev, receives the program text, events and scenarios an agent sends with each tool call, runs the tool and returns the report. It keeps nothing between requests: no accounts, no database, no record of what was sent. The server writes no logs of request contents.
The server runs on Cloudflare Workers. Cloudflare handles each connection, including your IP address, under the Cloudflare privacy policy. The server's rate limit counts requests per IP address for a minute at a time; those counts are not stored with anything else.
If you install the caveat-lang runtime instead, it runs locally on your machine, makes no network connections and records only what your own program tells it to record.
The terms of service cover use of the server. Questions: github.com/WSattazahn/caveat-lang/issues.