Privacy notice · 1 October 2026
Privacy
mcpdrives is built and run by Jalil Laaraichi. This notice covers the website at mcpdrives.com, the waitlist and the service at cloud.mcpdrives.com.
Website
The website is a set of static pages. It sets no cookies and uses no analytics, advertising or third-party scripts and fonts. Cloudflare serves it and may process your IP address to deliver the pages and protect them from abuse.
Waitlist
When you join the waitlist we store your email address, the agent you chose and your note, if you gave them, the time you joined and the version of this notice. We use them to decide who to admit next and to email you once when your address can sign in. To limit abuse we count signups per network for an hour, under a keyed hash of your IP address; the address itself is not stored.
An entry is removed when you use your private removal link, when we admit you, or 180 days after you joined, whichever comes first. Joining does not create an account, and we send no other email about the waitlist.
Your account
To run the service we store, for each account:
- your email address and when the account was created;
- your signed-in browsers, with a label such as "Chrome on macOS" and when each was last used, for 30 days;
- your storage connections: provider, endpoint, region, the buckets and folders you mount, and your access key, whose secret is encrypted and never shown again;
- your drives, mounts and settings;
- the agents you approved: the name each app gave, its return address and client ID, the access you chose and when it was last used;
- an activity log of operations, paths, byte counts and connection names, which keeps the latest 10,000 entries;
- daily usage counts, used to apply the limits.
Your files
Your files stay in your buckets. mcpdrives keeps no copy of them. File contents pass through the service only while an agent reads, writes or edits a file with an MCP tool, or copies it between different providers, and they are not logged. Signed links and copies within one storage account move files without passing through mcpdrives at all.
We email you sign-in codes when you ask for them, and one message when your waitlist entry is admitted. We send no newsletters or marketing.
Cookies
The service at cloud.mcpdrives.com sets three first-party cookies, all needed for it to work: a session cookie that keeps you signed in for up to 30 days, a cookie that protects your forms against requests from other sites, and, when you open a share link, a one-hour cookie that lets you approve your agent with that link.
Service providers
Cloudflare hosts the website and the service, stores the data described here and sends our email. Your storage providers receive the requests mcpdrives signs with your keys, under their own terms. We do not sell your data or use it for advertising.
Deleting your data
- Delete your account in the dashboard's Settings. That removes your connections and their secrets, your drives, mounts, agent connections, share links, activity log and usage counts, and your address from the access list. It does not touch the files in your buckets.
- Remove a single storage connection, drive or agent at any time from the dashboard.
- Leave the waitlist with the private removal link you received when you joined.