PRIVACY
This site is run by Vinga, working as Skyforge (skyforge.sh). She decides what is collected here and why, which makes her the data controller. Questions, corrections and deletions go to vinga@skyforge.sh.
Two things are described below: what happens when you use this site, and what happens when a business is contacted about work. If you arrived here from a link in an email, the second one is probably why.
Using this site
Visits are counted. Each page request adds one to a daily, aggregate tally: the date, the referring domain, a rough browser-or-bot label, and a country. The country is looked up from your IP address, which is not kept.
Talking to Cecil. Your messages and his replies are stored on the server for about a day after your last message, then deleted by an automatic sweep. If Cecil cannot answer something about Vinga's work, the question alone is recorded so the gaps can be fixed. If you send his research clerk into a repository, the question you asked it is recorded the same way.
Leaving word. The form and Cecil's own message tool write into the same store: your contact details, your message, a name if you gave one, and the time. The message is emailed to Vinga so she sees it. It is kept until you ask for it to go.
Booking a call. A booking stores your email address, your name if you gave one, the subject of the call, what you told us about the enquiry - through Cecil, or the few fields on the booking form - your timezone, and the time you chose. You get a calendar invitation; Vinga gets her copy, with a short excerpt of the conversation where there was one, so she can prepare. Bookings are kept as the record of an appointment - ask and they go.
One cookie. The server sets cecil_session when you speak to Cecil or hold a slot in the diary - a
signed identifier, readable only by the server, which expires after 24 hours. It ties your
conversation and your booking to you and is used for the usage limits. It is necessary for a
service you asked for, and is set without asking for that reason. Your IP address is also held
in memory for the day, for rate limiting and the daily usage caps.
If we contacted you about work
Vinga writes to businesses whose public advertisements suggest the kind of work she does would help. If yours was one of them, this is the part that applies to you.
What is held. The company's name and public record, the name and role of a director or named contact, a business email address, and notes about what the company appears to need.
Where it came from. The Companies House register, the company's own website, and public job advertisements. Where no address is published, one is inferred from the pattern of other addresses at the same company and checked with an email verification service.
The link in the email. Links in the email carry a tag that identifies the message it was sent in - visits made through it, and what happens on the site during that visit, are recorded against that message.
Why, and on what basis. To write to you about work we believe suits you. The lawful basis is legitimate interests - ours in finding clients.
How long. Names and email addresses are kept while we are waiting to hear back, and removed within 90 days after that. Company-level facts are kept. If we end up working together, the records that go with that are kept for as long as the work and the tax rules require.
To stop it. Reply and say so, or send one line to vinga@skyforge.sh. Your details go on our do-not-contact list, and every message is checked against that list before it is sent.
Who else sees it
Railway hosts the site and its database; Anthropic's model writes Cecil's replies, so what you type in the chat passes through it; Google's model summarises the older parts of a long conversation; Resend sends the emails and calendar invitations. For the outreach research, Hunter is asked whether an address exists. Some of these are US companies, so some processing happens outside the UK and the EEA, under the transfer terms in their standard agreements.
Your rights
You can ask what is held about you, ask for it to be corrected or deleted, object to it being held at all, ask for its use to be restricted, or ask for a copy. Write to vinga@skyforge.sh and you will get an answer within a month.
If the answer does not satisfy you, you can complain to a data protection regulator: in the UK the Information Commissioner's Office, or elsewhere in Europe the authority for the country you live in.
Last updated 17 August 2026. The machinery this describes is set out in more detail on how this site works; the terms for using the site are here.