Privacy Policy

1. Information We Collect

When you create a FORGE account we collect your email address, username, and any profile information you choose to provide (bio, school, avatar). If you sign up via GitHub or Google OAuth we receive the data those providers share under their respective scopes.

When you use the platform we log tool usage events (tool ID, timestamp, session ID) to power analytics and leaderboards. We do not log the content of your prompts or interactions inside third-party tools.

2. Payment Information

All payment processing is handled by Stripe. FORGE never stores your full card number, CVC, or bank details. Stripe's privacy policy governs how payment data is handled. Builder payout accounts are managed through Stripe Connect.

3. How We Use Your Information

We use your information to operate the platform, send transactional emails (tool published, payout sent, milestones), calculate XP and tier rankings, and display public profile information. We do not sell your personal data to third parties.

4. Data Storage

Your data is stored in Supabase (PostgreSQL hosted on AWS). Uploaded tool files are stored in Cloudflare R2. Both services are located in the United States. By using FORGE you consent to your data being processed in the US.

5. Cookies

We use essential session cookies for authentication. We do not use tracking or advertising cookies. See our Cookie Policy for details.

6. Your Rights

You can delete your account at any time from Settings → Danger Zone. This removes your profile, tools, and personal data from our systems. You may also request a data export by emailing us.

7. Contact

Questions about this policy? Email legal@forgechallenge.com.

Note: This is a working draft privacy policy. FORGE is in the process of engaging legal counsel to finalize all policies. Do not rely on this document as legal advice.