privacy notice

the short version

who we are

Project Cyril Ltd is a private company limited by shares, registered in England and Wales under company number 17399868. We are the data controller for cyril.glass, and we are registered with the Information Commissioner's Office under registration ZC222327. Cyril is made by Berida; the company that operates it, and that answers for your data, is Project Cyril Ltd. For anything in this notice, write to privacy@cyril.glass.

the conversation

What you type or say to Cyril, and any images you show it, are processed to generate the reply and are not retained on our servers afterwards. To generate replies we use Anthropic, an AI provider, as our processor; your messages are transmitted to Anthropic's systems in the United States under contractual safeguards, including EU standard contractual clauses and the UK international data transfer addendum, and are handled under our agreement with them. Your browser's language setting is read each turn to localise sourcing to your region; it is not stored.

During pilot periods we may retain conversations for quality and safety review. When this is active, the interface says so before you begin.

your terrain

Cyril's running read of your taste — a small record of registers, a score, and one line — is stored in your own browser's local storage on your device, not on our servers. It is sent back with your messages so Cyril can remember you between visits, and it is discarded from our systems the moment your reply is generated. You can erase it at any time with the forget control on the page. This storage is used only to provide the service you have asked for; we place nothing else on your device.

demand records

With your consent, given in the session, we distil a structured record of what you were looking for: the occasion, the kind of garment, its attributes, the price range, and whether you found it or what came closest. These records are stored without your name or contact details. Where a record could in principle still be linked to you, we treat it as personal data and all the rights below apply to it. We use these records to understand demand, and we share that understanding with fashion producers only in aggregated form, in cohorts of at least twenty people — never as individual records. This is how the service stays free for you.

the waitlists

If you join the consumer waitlist we collect your email address, with your consent, and use it only to tell you about Cyril's availability. If you join the trade waitlist we collect your email, your organisation, and your answer to the demand question, and use them to evaluate and follow up trade interest. You can withdraw at any time by writing to privacy@cyril.glass, and we will remove you.

keeping the door safe

Our server processes your IP address to rate-limit requests and protect the service from abuse. This is done under our legitimate interest in keeping the service running, and the data is held transiently — on the order of minutes to hours — before it is discarded.

what we do not do

• No advertising cookies and no third-party analytics on this site.
• No selling of personal data, ever. The demand product is aggregate only.
• No profiles of you assembled from elsewhere on the web.
• Cyril is not directed at anyone under 18.

who we share with

Anthropic (AI processing, United States, under contractual safeguards as described above); [DigitalOcean, London (UK) ], which hosts our server and storage; and no one else, unless the law requires it.

how long we keep things

Conversations: not retained, except during a stated pilot review period. Terrain: on your device, for as long as you keep it. Demand records: for the life of the demand product, in the de-identified form described above. Waitlist details: until launch communications conclude or you withdraw. Security logs: minutes to hours.

your rights

Under UK and EU data protection law you can ask us for access to your personal data, correction, erasure, restriction, or a portable copy; you can object to processing based on legitimate interests; and you can withdraw any consent at any time without affecting what was done before. Write to privacy@cyril.glass and we will respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or, if you are in the EU, to your local data protection supervisory authority.

changes

If this notice changes, we will post the new version here with a new effective date. Meaningful changes to how demand records are used will be asked for, not assumed.