What we collect, and what we don’t.

No legal fog. This is a plain description of what actually happens when you use mycocoon.life — what gets collected, where it goes, and how to have it removed.

Last updated 2 August 2026 · Cocoon, Sri Lanka

The short version

You can use almost everything on this site without telling us who you are. None of our free tools require an account. We do run analytics, we do keep the details you type into a contact or application form, and the AI tools send what you write to an AI provider so they can answer you. That’s the whole picture; the rest of this page is the detail.

What you give us on purpose

Contact and enquiry forms

When you fill in a form — booking a call, asking about a programme, downloading something — we keep what you typed: usually your name, email, organisation and message. We use it to reply to you and to keep track of the conversation. It’s stored in our own database on Cloudflare, and a copy is emailed to us.

If the email address you give is a company domain, we look up publicly available information about that company — what it does, roughly how big it is, where it’s based — so we can have a useful first conversation. This is public information about the business, not about you personally.

Job applications

If you apply for a role, your CV and the details on the form are emailed straight to Ammar. Applications are read by a person, not filtered by software. If you’d like your application and CV deleted at any point, email us and we’ll delete them.

The AI tools

Our AI tools are powered by a mix of third-party AI providers. What you type is processed by the provider to generate your result — we don’t attach your name to it and we don’t keep a copy for ourselves, though like any AI tool, your input is handled under the provider’s own policies.

So: please don’t paste anything confidential — client data, personal details of other people, anything under NDA — into these tools. Describe the shape of the problem instead. This is the same advice we give in our training.

What gets collected automatically

Like most sites, we use analytics to understand what people find useful and what’s broken:

• Google Analytics — pages visited, roughly where in the world from, which link brought you here.
• Microsoft Clarity — anonymised session recordings and heatmaps, so we can see where a page confuses people. Clarity masks text input by default.
• RB2B — a business-identification service that tries to work out which company is visiting, from network information.

These set cookies. If you’d rather not be counted, Google’s own opt-out add-on covers Analytics, and your browser’s tracking protection or private browsing keeps the rest out. Or email us and we’ll walk you through each provider’s opt-out ourselves.

We also keep a simple count of page visits and which tools get used. That’s a number, not a profile.

Who else is involved

We’re a small team, so we use other people’s infrastructure rather than building our own. Your data may pass through:

• Cloudflare — hosting, and the database where form submissions live.
• Resend — sends our email notifications and confirmations.
• Formspree — handles some of the older contact forms.
• Cal.com — the booking calendar, when you schedule a call.
• AI providers — Cloudflare Workers AI, OpenRouter, DeepSeek, Anthropic.
• Search providers — used only for the public company lookup described above.
• Instagram and ElevenLabs — embedded content on a few pages, which loads from their servers and can see that you visited that page.

We don’t sell your data, and we don’t share it with anyone outside this list. We don’t send marketing email to people who never asked for it.

How long we keep things

Enquiries and the notes attached to them stay in our records while the conversation is live and for a reasonable period afterwards, so we recognise you if you come back. Applications are kept for the hiring round they were sent for. Analytics data follows each provider’s own retention schedule.

If you’d rather we didn’t keep any of it, just say so — see below.

Getting your data back, or deleted

Email [email protected] and ask. You can ask us to:

• tell you what we hold about you;
• correct anything that’s wrong;
• delete it entirely;
• stop contacting you.

You don’t need to give a reason and we won’t ask for one. We’ll confirm once it’s done. Depending on where you live you may have these rights by law — we’d honour the request either way.

Children

Some of our work is with schools and students. We don’t knowingly collect personal details from children through this website. If a young person has sent us something and a parent or guardian would like it removed, email us and it’s done, no questions.

Security, honestly stated

The site runs on Cloudflare with encrypted connections throughout, access to the database is restricted, and we keep the amount of personal data we hold deliberately small — the least we need to do the job. No system is perfectly secure, and we’d rather say that plainly than claim otherwise. If you find a security problem here, please tell us at [email protected].

Changes

If we start collecting something new, this page changes and the date at the top changes with it.

Asking us anything

Cocoon is based in Sri Lanka and works across South and Southeast Asia. For anything on this page, or any question about your data, write to [email protected] and a person will answer.

This page describes how we actually work. It isn’t legal advice, and it isn’t a substitute for a lawyer’s review if you need one for a procurement or compliance process — ask us and we’ll work through it with you.