Privacy policy: Cicada Guide connector
Last updated: 2026-09-30.
Scope
This policy covers the Cicada Guide connector (MCP server) at public.cicada.guide, which answers questions about U.S. state legislation for AI assistants such as Claude. The Cicada Guide website and app are covered by cicada.guide/privacy-policy.
What each tool call records
- The tool's name and the arguments your assistant passed.
context: a short note your assistant writes about the purpose of the call. When it writes none, the connector records a generic one built from the tool's purpose and the names of the arguments passed, never their values.llm_model: the name of the AI model making the call.- The app making the call: its name and version, and the User-Agent string it sends.
- How long the call took, the size of the response, and any error.
The arguments can include text taken from your conversation, such as a search phrase or the summary shown on a bill card. The connector does not record your conversation beyond the context note and those arguments, and it does not record the results it sends back.
The connector also lists a get_more_tools tool. It returns no data: when your assistant calls it, the connector records the assistant's note on what it was trying to do and what tool would have helped, to show which tools are missing.
Connecting, listing the tools, loading a card, refused or failed requests, and the outcome of a sign-in are recorded too, with the same app and account details and without arguments.
Who is identified
Calls are anonymous by default and are recorded without a person profile. If a caller signs in to Cicada Guide (with a Clerk key or sign-in token), analytics link the call to that account's id; server logs store a one-way hash of the id instead of the id.
Where it goes
- PostHog (United States), for product analytics.
- Cloudflare, which hosts the connector, keeps request logs, which can include your IP address and the approximate location Cloudflare derives from it, and applies rate limits by IP address.
- Clerk, only when a caller signs in.
The legislative data comes from public records, and nothing about you is written to it.
What is never collected
No email address or phone number, and no precise location. The district map's location toggle runs in your browser and is never sent. Nothing is sold or used for advertising.
Retention
Analytics events are kept for up to 7 years. Request logs are kept for a few days.
Contact
Questions or requests: GitHub issues.