Privacy Policy

Forgeborn ("we", "us", "our") operates the website forgeborn.dev and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.

We respect your privacy and are committed to protecting your personal data. This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

We use your personal data to:

• Respond to your inquiries and contact form submissions.
• Provide, maintain, and improve our services and products.
• Authenticate users and manage accounts.
• Monitor and analyze usage to improve the website experience.
• Detect, prevent, and address technical issues and security threats.
• Comply with legal obligations.

Under the GDPR, we process your data based on:

• Consent: when you submit a contact form or create an account.
• Legitimate interest: for server logs used in security monitoring and website improvement.
• Legal obligation: when we are required to retain data by law.

We use only essential cookies that are necessary for the website to function. These include session cookies for authentication and security. We do not use third-party advertising cookies, social media tracking pixels, or analytics cookies that track you across websites.

You can configure your browser to refuse cookies, but this may affect your ability to use certain features of our services.

Our infrastructure is self-hosted. We do not use third-party analytics services such as Google Analytics. However, we may use the following:

• Email delivery services: for transactional emails (e.g., password resets, contact form confirmations).
• Payment processors: if you purchase a product, payment is handled by a third-party processor. We do not store credit card numbers.

Each third-party service processes data under their own privacy policy and is selected for their GDPR compliance.

We retain your personal data only for as long as necessary:

• Contact form data: retained for up to 12 months after your inquiry is resolved.
• Account data: retained for the duration of your account. Deleted within 30 days of account deletion.
• Server logs: retained for up to 90 days for security and diagnostic purposes.

Under the GDPR and applicable data protection laws, you have the right to:

• Access your personal data and request a copy.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Restrict processing — request that we limit how we use your data.
• Data portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interest.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at admin@forgeborn.dev. We will respond within 30 days.

We implement appropriate technical and organizational measures to protect your personal data, including:

• HTTPS encryption for all data in transit.
• Self-hosted infrastructure with isolated environments per service.
• Regular security reviews and access controls.
• Password hashing using industry-standard algorithms.

While we strive to protect your data, no method of transmission or storage is 100% secure. If you discover a security vulnerability, please contact us at admin@forgeborn.dev.

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us: