Privacy Policy

We collect information reasonably necessary to operate, secure, and improve FortForge.

If you purchase or subscribe to paid features, we may collect and store billing-related records such as:

• Selected plan, tier, and billing interval.
• Subscription status and billing period dates.
• Stripe customer IDs, subscription IDs, and associated price or product references.
• Invoice and payment status information.
• Billing metadata needed to provision, manage, or audit subscription access.

We do not store full payment card numbers on FortForge systems. Subscription payment entry, billing management, and subscription payment collection are handled on Stripe-hosted pages.

Payments are processed by third-party payment providers, including Stripe. When you subscribe, check out for a subscription, update subscription payment methods, or manage subscription billing, you may be redirected to Stripe-hosted pages or forms. Stripe may collect and process payment details, billing address information, tax-related information, and transaction data.

FortForge generally receives limited billing and subscription records from Stripe or through Stripe webhooks, rather than full raw card details.

Other payment-related flows, such as donations or similar support payments, may be handled by different third-party providers and are subject to those providers' interfaces, terms, and privacy practices.

Stripe's handling of payment information is governed by Stripe's own terms, privacy notice, and compliance obligations.

We use information we collect to:

• Operate, maintain, and improve the Platform.
• Authenticate users and manage accounts.
• Host, display, distribute, and moderate user content.
• Process subscriptions, payments, invoices, and billing updates.
• Provide customer support and respond to inquiries.
• Prevent fraud, abuse, and unauthorized access.
• Comply with legal, regulatory, accounting, and security obligations.

We do not sell your personal data.

Where applicable, we rely on the following lawful bases:

• Contract - to provide the Platform, accounts, subscriptions, and requested services.
• Legitimate interests - to secure, improve, and administer the Platform and prevent abuse.
• Legal obligation - to comply with accounting, tax, law enforcement, or regulatory requirements.
• Consent - where required for optional cookies, preferences, or similar controls.

We may share information with:

• Payment processors such as Stripe, to process subscriptions, payments, and billing operations.
• Hosting, infrastructure, and service providers that help us run the Platform.
• Analytics or operational tooling providers used to understand, secure, or support the service.
• Legal authorities or counterparties where required by law or necessary to protect rights, safety, or the Platform.
• Other users where you choose to make content or profile information public.

FortForge uses cookies and similar technologies for authentication, session continuity, preferences, and site operations. We may also use analytics or measurement tools, including Vercel Analytics or similar services, to understand site usage.

You may be given cookie preference controls through the Platform or your browser settings. Depending on implementation and service configuration at a given time, some measurement or operational tooling may remain active even when non-essential cookies are limited.

We may send transactional emails or service notices relating to:

• Payments and invoices.
• Subscription renewals, updates, or cancellations.
• Failed charges or billing issues.
• Required legal or service notifications.

These communications are generally considered necessary for operating the service you use.

We retain information for different periods depending on purpose and legal need, including:

• Account data - generally while your account remains active and as needed afterward for legitimate business or legal reasons.
• Billing records - up to 6 years, or longer where required by law, tax, accounting, dispute, or audit obligations.
• Logs, backups, and security records - for limited or operationally necessary durations.
• Billing event and webhook records - for auditing, troubleshooting, fraud prevention, and subscription administration for as long as reasonably necessary.

When no longer needed, information is deleted, anonymized, or otherwise handled in accordance with applicable law and operational requirements.

Depending on your location, you may have rights to:

• Access your personal data.
• Correct inaccurate or incomplete data.
• Request deletion of certain data.
• Object to or restrict certain processing.
• Withdraw consent where processing relies on consent.
• Request data portability where applicable.

To exercise privacy rights, contact privacy@fortforge.dev.

We may update this Privacy Policy from time to time. Where reasonably possible, we will provide at least 3 days' notice before a materially updated version takes effect.

Continued use of the Platform on or after the effective date provided in that notice means you accept the revised Policy. If we request your consent through an in-product popup or similar notice, your acceptance through that flow also means you accept the revised Policy.