Privacy

The AWML Registry at awml.io is run by chrismdp Ltd, a company registered in England and Wales (number 16198002). We decide what happens to the data described here. Questions go to chris@chrismdp.com.

What we keep

• Your account: email address, name, username and profile picture, from GitHub, Google or the email you sign in with.
• Your signed-in sessions: the IP address and browser they started from, so you stay signed in and we can spot misuse.
• The workflows you push, every version of each, and the organisations and members you set up.
• Access tokens you make, stored only as a one-way hash.
• An audit log for each organisation: who pushed, viewed a private workflow, joined or left, and when.

We use one cookie, to keep you signed in. There is no advertising and no tracking. We never send your workflows to an AI model.

Why

We use this data to run the registry for you, which is the contract between us, and to keep it secure, which is our legitimate interest. We do not sell it or use it for marketing.

Where it lives

The database is held in the EU on Cloudflare. These companies handle data for us:

• Cloudflare hosts the site and database and sends sign-in emails.
• GitHub or Google, only if you choose to sign in with them.
• Google Fonts serves the site's typefaces, so Google sees your IP address when a page loads.

Public and private

A public workflow can be read by anyone. A private workflow can be read only by members of its organisation.

How long

We keep your data while your account exists. Ask us to delete your account and we remove it and the workflows you own within 30 days.

Your rights

Under UK and EU data protection law you can ask to see, correct, export or delete your data, or object to how we use it. Email us and we will reply within a month. You can also complain to the Information Commissioner's Office at ico.org.uk.

Last updated 21 October 2026. See also the terms.