Privacy policy
This policy explains which personal data Forge processes, why, for how long, and how to exercise your rights.
Data controller
The publisher of the site, a private individual (see the legal notice). Contact for any question about your data: bonjour@forgefrance.fr.
Data processed and purposes
| Processing | Data | Legal basis | Retention |
|---|---|---|---|
| Account, favorites and downloads | email address, display name, hashed password (BCrypt), language, favorite resources | performance of the terms of use | until the account is deleted |
| Newsletter | email address, language, confirmation date | consent | until you unsubscribe |
| Contact form | name, email address, message | legitimate interest (answering your request) | 3 years after the last exchange |
| Security | IP address, transiently, to limit sign-in attempts; technical logs | legitimate interest | 12 months at most for logs |
| Audience measurement (Umami, hosted on the site's server) | pages viewed, referring page, device and browser type, country; the IP address is not kept | legitimate interest (visit statistics) | 25 months |
Forge sells nothing, uses no advertising tool and shares no data.
Audience measurement is anonymous, reserved to the publisher, uses no cookie, is never combined with other sites and honours your browser's Do Not Track setting.
Recipients
Only the publisher and their processors can access the data, within the limits of their tasks: the host (Hostinger International Ltd) and the email delivery service. Some processors may transfer data outside the European Union; these transfers rely on the European Commission's standard contractual clauses or an adequacy decision.
Your rights
You have the right to access, rectify, erase, restrict and port your data and to object to its processing, as well as the right to withdraw your consent at any time and to set instructions for your data after your death. Most of these rights can be exercised from your account (profile, account deletion) or from the unsubscribe link in every newsletter; otherwise, write to bonjour@forgefrance.fr.
Deleting your account erases your personal data.
You can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).
Security
Traffic is encrypted (HTTPS), passwords are never stored in plain text, session tokens rotate on every use and downloads go through signed, time-limited links.