Privacy Policy
Effective 30 September 2026.
Who is responsible
Section titled “Who is responsible”Forge is operated by TechnicallyArtist, an independent game tools developer based in Spain, who is the data controller for the personal data described here. Contact for anything about your data: [email protected].
The short version
Section titled “The short version”- Forge has no analytics, no advertising and no tracking.
- Without an account, your work stays in your browser. Forge sends nothing about you or your work anywhere.
- With an account, Forge keeps a private cloud copy of your own work, in the European Union, so you can open it on another device. That is the only reason it stores anything.
- Forge never sends your work to any AI service.
- No automated decisions are made about you, and nothing is used to profile you.
- You can delete everything, immediately, from inside the app.
Using Forge without an account
Section titled “Using Forge without an account”Your work stays in your browser. Projects, node graphs, the subnet library, images you import, saved patterns and your settings live in your browser’s own storage (IndexedDB and localStorage) on your device. They are not sent to TechnicallyArtist. Clearing the site’s data in your browser removes them, which is why Forge offers File ▸ Export Project.
Hosting logs. Forge, this documentation and the content registry are served by Cloudflare. Like any web host, Cloudflare receives your IP address, browser type and the address of each file it serves, and keeps standard request logs for a short time for security and operations. TechnicallyArtist does not use these logs to identify or profile anyone. Legal basis: legitimate interest in running a secure service.
Bot protection. Cloudflare may set a security cookie (such as __cf_bm or cf_clearance) to tell people from automated traffic. These are strictly necessary for the service and are not used for tracking, so no consent banner is shown.
The registry. When you open the image picker, Forge fetches a catalog of effect images from registry.technicallyartist.com. This is a plain file download; nothing about you travels with it beyond the ordinary web request.
Using Forge with an account
Section titled “Using Forge with an account”Accounts are optional and invite-only. Signing in turns on a private cloud backup of your work. Here is exactly what that involves.
What Forge receives when you sign in
Section titled “What Forge receives when you sign in”You sign in with Google. Forge never sees a password. Google sends Forge your email address, your display name, and the address of your profile picture, together with an identifier for your Google account. Forge shows your email and name in Profile ▸ Account and uses the identifier to keep your data apart from everyone else’s.
What is backed up
Section titled “What is backed up”The cloud copy mirrors what is in your browser:
- your projects (node graphs and their names),
- your subnet library (saved node groups and their versions),
- images you have imported (up to 4 MB each, images only),
- saved patterns,
- your app settings,
- conflict backups: when the same project is edited on two devices at once, the losing version is kept (the newest three per project) so nothing is silently lost,
- a storage counter (bytes used and number of projects) that enforces the 50 MB limit.
That is the whole list. Forge does not record what you do in the app, when you use it, or anything about your device beyond what the hosting logs above already contain.
Where and why
Section titled “Where and why”Account data is stored with Supabase in a data centre in Ireland (Amazon Web Services region eu-west-1), inside the European Union. It is used for one purpose: to provide the backup and cross-device sync you asked for by signing in. Legal basis: performance of a contract, the Terms of Service. Only you can read your data. Every record and every stored image is locked to your own account by the database itself, and there is no administrator backend that browses it.
How long
Section titled “How long”Your data is kept for as long as your account exists.
- Deleting a project removes its graph and its conflict backups. A small marker stays so your other devices learn about the deletion.
- Deleting a library version or an image removes it once nothing else of yours refers to it.
- Deleting your account (Profile ▸ Account ▸ Delete account) removes everything at once: the sign-in identity, every project, library version, image and backup. This is immediate and cannot be undone. Copies may persist briefly in the hosting provider’s own infrastructure backups before they age out.
Signing out keeps your cloud copy; only deleting your account removes it.
Cookies and browser storage
Section titled “Cookies and browser storage”Forge sets no cookies of its own. It uses your browser’s storage, on your device, for:
| What | Why |
|---|---|
| Your projects, library, images, patterns and settings (IndexedDB) | So your work is there when you come back |
| Interface preferences (panel layout, camera, drawing tool settings) | So the app looks the way you left it |
| Your sign-in session, when signed in | So you stay signed in between visits |
| The cook cache | So unchanged nodes do not recompute on the next load |
All of this stays on your device. It is removed when you clear the site’s data in your browser, or with Profile ▸ Account ▸ Sign out and remove data from this device.
Who else handles data
Section titled “Who else handles data”TechnicallyArtist uses these providers. Each processes data only to provide its part of the service.
| Provider | What it handles | Where |
|---|---|---|
| Cloudflare, Inc. | Hosting and delivery of the app, the docs and the registry; bot protection; request logs | Edge servers worldwide, nearest to you. Cloudflare is certified under the EU-US Data Privacy Framework. |
| Supabase, Inc. | Sign-in, the account database and image storage | Ireland (EU). Supabase is a US company bound by its data processing terms, which include the EU standard contractual clauses. |
| Google LLC | Confirming who you are when you sign in | Governed by Google’s own privacy policy. |
Forge has no advertising partners, no analytics providers and no data brokers. TechnicallyArtist does not sell or share personal data with anyone else, and discloses it only if the law requires it.
Your rights
Section titled “Your rights”Under the GDPR you can ask to see the personal data Forge holds about you, correct it, delete it, receive a copy of it, and restrict or object to its processing. Most of this you can do yourself:
- See and take your data: File ▸ Export Project saves any project as a
.tafile, and Profile ▸ Storage ▸ Download backup saves everything as one.zip. - Delete your data: Profile ▸ Account ▸ Delete account.
- Anything else: email [email protected]. Requests are answered within one month.
You can also complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es), or to the authority in your own country.
Children
Section titled “Children”Forge is not directed at children under 14, and accounts are not offered to them.
Changes to this policy
Section titled “Changes to this policy”Changes are posted on this page with a new effective date.