1. Data controller
The data controller is the operator of Skill Forge, a personal project, reachable at ciao22king@gmail.com.
2. What data we process
- GitHub sign-in data: identifier, username, name and profile image, email address (if made available). We receive them through OAuth authentication when you sign in.
- Material you submit: the text or documents you upload to generate a skill, and the answers to the six questions in the "from scratch" mode.
- Published skills: if you choose to publish to the marketplace, the skill and your GitHub username are stored and made visible to anyone. You can delete them at any time from your dashboard.
- Technical data: IP address, request data and logs, handled by our infrastructure provider for security and operation.
- Cookies: one session cookie required to keep you signed in (see the cookie policy).
3. Why we process it (purposes and legal bases)
- Providing the service (generating and publishing the skill): performance of a contract.
- Security and abuse prevention: legitimate interest.
- Legal obligations, if required: legal obligation.
4. Who it is shared with
We rely on providers that process data as processors:
- Cloudflare — hosting and delivery (Workers, network).
- GitHub — authentication and reading your profile.
- OpenRouter — the text you submit is transmitted to the language model to produce the skill. OpenRouter may route the request to one of the available models.
We do not sell your data and we do not use it for advertising or profiling.
5. Transfers outside the EU
Some providers are based in the United States. Transfers take place under the European Commission's standard contractual clauses or other safeguards provided by the GDPR.
6. For how long
The session cookie lasts until the session expires or you sign out. The material you submit is processed to generate the skill and is not kept permanently by us beyond the time required; technical logs follow the infrastructure provider's retention periods.
7. Your rights
You can exercise the rights set out in articles 15-22 of the GDPR: access, rectification, erasure, restriction, objection and portability. Write to ciao22king@gmail.com. You may also lodge a complaint with your local data protection authority.
8. Changes
We may update this policy; the date at the top indicates the version in force.