Last updated: 22 June 2026
Privacy Policy
Short version: this website collects almost nothing, and the Urfael software is local-first. Urfael runs on your own machine, your conversations and your vault stay on your device, and we never receive your prompts, your memory, or your AI traffic. The only personal data this site can collect is an email address, and only if you choose to give us one.
The software does not talk to us. When you run Urfael, it processes your data locally on your device. Your prompts and your vault are never sent to MYG Media or to any Urfael server, because there is no Urfael server and no Urfael account. The model you point Urfael at (for example your Claude subscription, another provider, or a local model on your own hardware) has its own terms and its own privacy notice, and that connection is between you and that provider. This policy covers the marketing website at urfael.com, not the AI model you choose to use with the software.
On this page
1. Who we are (the data controller)
The controller responsible for personal data collected through urfael.com is:
MYG Media SRL (a limited company registered in Romania)
Registered address: Bld. George Enescu 23, G45/B/6, 720246 Suceava, Romania
Trade register / company registration number (CUI): RO50059004 (CUI 50059004)
Privacy contact: contact@myg-media.com
If you have any question about this policy or about how your data is handled, you can reach us at the email above.
2. What this site collects
We have deliberately built urfael.com to gather as little as possible. In normal use, the site collects two things, and only one of them depends on you:
- A newsletter or launch email address, but only if you type it into a form and submit it. See section 3.
- Standard server and hosting logs, created automatically by the companies that host the site, the same way almost every website on the internet works. See section 4.
We do not ask you to create an account. We do not run advertising trackers. We do not build a profile of you. We do not sell or rent personal data to anyone, ever.
3. Email and consent (the newsletter or launch list)
If you want to hear from us, for example to be told when Urfael ships an update or a new release, you can enter your email address into a form on the site and submit it. Here is exactly what happens.
| What we collect | The email address you type in, plus the technical metadata that comes with a form submission (such as the time it was sent and the originating IP address, handled by our form provider). |
|---|---|
| Why | To send you the updates or announcements you asked for. Nothing else. |
| Legal basis | Your consent (Article 6(1)(a) GDPR). You give it by choosing to submit the form. You can withdraw it at any time. |
| Processor | An email or form service provider, for example Formspree or Buttondown, typically based in the United States. named when the list launches |
Withdrawing your consent is easy and free. Every email we send includes an unsubscribe link, and one click removes you. You can also email contact@myg-media.com and ask us to delete your address. Withdrawing consent stops future emails and leads to deletion of your address from the list; it does not affect the lawfulness of anything we did with your consent before you withdrew it.
Giving us your email is entirely optional. The website works exactly the same whether or not you ever submit the form.
4. Server logs (hosting and security)
Like virtually every website, urfael.com is served by hosting providers that automatically keep technical logs so the site can run, stay available, and be defended against attacks and abuse. These logs can include your IP address, the date and time of the request, the page or file requested, the referring page, and your browser and device type (the user-agent string).
Legal basis: legitimate interest (Article 6(1)(f) GDPR). The legitimate interest is operating the site reliably, keeping it secure, diagnosing faults, and preventing abuse. We do not use these logs to identify or profile individual visitors for marketing. You have the right to object to this processing (see section 10).
5. Cookies and tracking
At present, urfael.com does not set any analytics or tracking cookies, and it runs no third-party advertising or analytics trackers. There is no consent banner because there is nothing here that legally requires one. Any cookie strictly necessary to serve the site or to operate the form would be used only to make the page function, not to track you.
If we ever add analytics or any non-essential cookie in the future, we will first show a clear cookie banner and ask for your consent before any such cookie is set, and we will update this policy to describe it.
6. The Urfael software (local-first, on your machine)
Urfael is open-source software released under the MIT license that you download and run on your own computer. This is the heart of why Urfael exists, so we want to be plain about it:
- The software processes your data locally on your device.
- Your vault, your notes, and your memory are stored on your machine only. They are not uploaded to us.
- MYG Media does not receive your prompts, your conversations, or your AI traffic. There is no Urfael account and no Urfael server in the loop.
When Urfael needs an AI model to think, it connects to whatever model provider you configure, for example your existing Claude subscription, another provider, or a local model running on your own hardware. That connection is directly between you and that provider, under that provider's own terms and privacy notice. We are not a party to it and we do not see it. For data handled entirely on your own machine by software you control, MYG Media is not the controller.
7. Who receives data (processors and recipients)
To run the website, we rely on a small number of service providers acting on our behalf or hosting the content. They process data only as needed to provide their service.
| Recipient | Role | What they handle |
|---|---|---|
| Vercel | Website hosting and delivery | Server logs, including IP and request data, to serve and protect the site. |
| GitHub (Pages / CDN) | Code hosting and content delivery | Standard access logs when assets are served from their network. |
| Email / form provider named when the list launches | Newsletter delivery | Your email address and form submission metadata, only if you submit the form. |
We do not sell personal data, and we do not share it with anyone except the providers above for the purposes described. We may disclose data if we are legally required to do so, for example by a valid order from a competent authority.
8. International data transfers
Some of the providers above are based in, or store data in, the United States. Where personal data is transferred outside the European Economic Area, that transfer is protected by appropriate safeguards under the GDPR, in particular the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, an adequacy framework. You can ask us for more detail about the safeguards in place using the contact details in section 1.
9. How long we keep data
- Newsletter email: kept until you unsubscribe or ask us to delete it, after which it is removed from the active list within a reasonable period. We do not keep your address once you have withdrawn consent.
- Server logs: kept by our hosting providers for a short period for security and operational purposes, then deleted or anonymised according to their standard retention practices.
We do not keep personal data longer than we need it for the purpose it was collected for.
10. Your rights
Under the GDPR you have the following rights over your personal data. They are free to exercise:
- Access: ask whether we hold data about you and get a copy of it.
- Rectification: have inaccurate or incomplete data corrected.
- Erasure: ask us to delete your data (the "right to be forgotten").
- Restriction: ask us to limit how we use your data in certain cases.
- Portability: receive the data you gave us in a structured, commonly used, machine-readable format, and have it sent to another controller where technically feasible.
- Objection: object to processing based on legitimate interest, including the server logs described in section 4.
- Withdraw consent: where we rely on your consent (the newsletter), withdraw it at any time. This is as simple as clicking unsubscribe or emailing us, and it does not affect processing carried out before you withdrew.
To exercise any of these rights, email contact@myg-media.com. We will respond within one month, as required by law. We may need to confirm your identity before acting, to protect your data.
11. The right to lodge a complaint
If you believe we have handled your personal data unlawfully, we would like the chance to put it right, so please contact us first. You also have the right to lodge a complaint with a supervisory authority. In Romania, where MYG Media SRL is established, that authority is:
The National Supervisory Authority for Personal Data Processing (ANSPDCP)
B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest, Romania
Web: www.dataprotection.ro
You may also complain to the data protection authority in your own country of residence or place of work within the EU or EEA.
12. Children
This site is intended for a general, adult audience. We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, please contact us and we will delete it.
13. Changes to this policy
We may update this policy from time to time, for example if we add a new processor or a new feature. When we do, we will change the "Last updated" date at the top of this page. If a change is significant, we will make a reasonable effort to flag it more prominently.
14. Contact
Questions about this policy or about your data? Email contact@myg-media.com, or write to MYG Media SRL at Bld. George Enescu 23, G45/B/6, 720246 Suceava, Romania.