Privacy Policy
Last updated: October 2026
This page is a plain-language summary, not legal advice. It's intended to describe in good faith what Violet Summit Forge actually collects and does with it. If you need this policy to satisfy a specific legal or compliance requirement, have a lawyer review it before relying on it.
Who we are
This site is operated by Violet Summit Forge (“VSF”), a software engineering consultancy based in the United States. VSF decides what personal data is collected through this site and why, and is the controller of that data. Data is processed in the United States.
Data we collect
Violet Summit Forge collects the minimum needed to run a marketing site and reply to client inquiries:
- Contact form submissions — the name, email address, and message you submit through the Contact form. These are emailed to VSF and are not stored in a database on this site. We use them to reply to you and, if it leads to an engagement, to take the pre-engagement steps you asked for.
- Technical data — your IP address and basic request details are processed by our hosting provider to serve pages (and kept in its server logs for a limited period), and by the Contact form, briefly and in memory, to rate-limit abuse and verify submissions. We do not use this to identify you or build profiles.
- Scheduling details — if you choose “Book a call”, the name, email, and time you enter go to Google's scheduling service, not to this site. Google's scheduler loads only after you open that dialog.
- Cookieless usage analytics — aggregated page-view and performance data collected by Vercel Web Analytics and Speed Insights. This does not use cookies, does not track you across other sites, and isn't tied to your name or email.
Cookies
This site does not set any tracking cookies, and there is no cookie-consent banner because nothing here is used to track you. Your theme choice is saved in your browser's local storage on your device so the site looks the way you left it; it is never sent to us. If you open the “Book a call” dialog, Google's scheduling page loads in a frame and Google's own cookie and privacy terms apply there.
Third-party processors
A small number of specialized services process data on Violet Summit Forge's behalf. Some are based in the United States, so your data may be transferred there:
- Resend — delivers the email generated when you submit the Contact form. Resend processes the name, email, and message you provide in order to deliver that message.
- Cloudflare Turnstile — verifies that a Contact form submission is coming from a human, not a bot. It runs on the Contact page and processes your IP address and browser signals and issues a short-lived verification token; see Cloudflare's own privacy documentation for how it handles that data.
- Vercel — hosts this site and, as such, processes request data such as IP addresses in its server logs.
- Google — provides the appointment scheduling page behind “Book a call” and may host the inbox that receives Contact form messages.
- Vercel Web Analytics — collects cookieless, aggregated traffic and performance data for this site, as described above.
Retention
Contact form submissions are delivered to the inbox behind the Contact form and retained there like any other email, for as long as needed to respond to and keep a record of the inquiry, then deleted when no longer needed. Scheduling details are retained in the calendar used for booking on the same basis. Vercel Web Analytics data is aggregated and aged out on Vercel's standard retention schedule for its analytics product.
Your rights (GDPR / CCPA)
Regardless of where you're located, you can ask to see, correct, or delete the personal data Violet Summit Forge holds about you — in practice, that's whatever you submitted through the Contact form or the scheduler. To make a request, email contact@violetsummitforge.com or use the Contact form, and describe what you'd like done. Requests are handled directly by the people who hold the data, with no ticket queue. If you're in the EEA or UK, you may also lodge a complaint with your local data-protection authority. We don't sell personal data or share it for advertising.
Where the law requires a legal basis, we rely on responding to your inquiry and taking steps you ask for before an engagement, and on our legitimate interest in keeping this site secure and working.
Children
This site is for businesses and is not directed at children under 13, and we don't knowingly collect their data.
Changes to this policy
This policy may be updated as the site or its tooling changes. The “Last updated” date at the top of this page reflects the most recent revision.
Questions
Questions about this policy or how your data is handled are welcome by email or through the Contact form.
