Privacy Policy

1. Data Controller & Contact Information

Data Controller: ForgeDocks
Privacy Contact: support@forgedocks.com

For privacy requests (access, deletion, portability), email support@forgedocks.com. Response within 30 days.

2. Information We Collect

Account Information:

• Full name, email address, password (hashed)
• Account creation date, subscription plan

Billing Information:

• Billing email, billing address, payment method
• Invoice history, subscription status

Technical Data:

• IP address, browser type, device type
• Timezone, approximate geolocation (country-level only)

Data You Generate: Tool outputs and calculations are kept ONLY on your device. ForgeDocks does NOT collect, track, or access this data unless you explicitly export or share it.

3. Legal Basis for Processing (GDPR)

We process personal data based on:

• Account registration: Contractual necessity
• Billing: Contractual necessity + legal obligation (tax law)
• Customer support: Contractual necessity
• Security/fraud: Legitimate interest

You can withdraw consent for non-contractual processing anytime.

4. How We Use Your Data

Provide the Service: Create and manage accounts, process payments, deliver tools, provide customer support.

Improve the Service: Analyze anonymized usage patterns, debug issues, develop new features.

Communicate: Send billing invoices, notify of account changes, respond to support requests.

Comply with Law: Retain billing data for tax (7–10 years), respond to legal requests.

5. Data Retention

Account data: Active + 30 days after deletion
Billing/invoices: 7–10 years (tax requirement)
Support tickets: 3 years
Usage logs: 90 days

6. Data Sharing & Third Parties

We never sell your personal data or email lists, and we do not share your data with third parties for their own marketing.

We MAY Share With:

• Payment processing: Stripe (card payments)
• Hosting: o2switch (web hosting, located in France, EU)
• Analytics & advertising: Google — Google Analytics (usage statistics) and Google Ads / Merchant (advertising & conversion measurement); these set cookies, see Section 9
• Legal authorities: only if required by a valid legal request

7. Your Data Rights

Under GDPR and similar privacy laws, you have:

• Right of Access: Request a copy of data we hold
• Right to Correction: Request data correction
• Right to Erasure: Request data deletion
• Right to Restrict Processing: Limit how we use data
• Right to Portability: Request data in standard format
• Right to Object: Object to processing for marketing

To exercise rights, contact support@forgedocks.com. Response within 30 days.

8. Data Security

Encryption in transit: all traffic is served over HTTPS (TLS).
Password security: passwords are stored hashed and salted.
Access control: access to personal data is limited to what is needed to run the service.
Data minimization: we only collect data essential to providing the service.

9. Cookies & Tracking

We use essential cookies for login and session management. Tools use localStorage for your device only — this data is never synced to Forge servers. You control it entirely.

Analytics & advertising cookies. We use Google Analytics to understand how the site is used, and Google Ads / Merchant tools for advertising and conversion measurement. These services set their own cookies and may process data across sites in line with Google’s policies. You can manage or block cookies in your browser settings. The tools you run keep their working data in your browser’s localStorage only — that is never synced to our servers.

10. International Data Transfers

Your core account and site data is hosted in the EU (o2switch, France). Some processors we rely on — such as Stripe and Google — are based in the United States, so limited data may be transferred outside the EEA. Where that happens, transfers are safeguarded by Standard Contractual Clauses (SCCs). We comply with the GDPR and the UK DPA 2018.

11. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to Know: Request data we collect
• Right to Delete: Request data deletion
• Right to Opt-Out: Opt out of data selling
• Right to Non-Discrimination: No discrimination for exercising rights

To exercise CCPA rights, email support@forgedocks.com with “CCPA Request.” Response within 45 days.

12. Changes to This Policy

We may update this Privacy Policy anytime. Material changes communicated via email with 30 days’ notice.