Privacy Policy

Forge is local-first. Your contacts, deals, notes, budget and email content live in a database file on your own machine. We have no copy, no sync, and no way to read them.

That is a design constraint, not a marketing line. Our cloud database exists for subscription bookkeeping, and what it holds is listed below in full.

What we hold

To run your subscription, and nothing beyond it:

• Your email address. It is your account — we issue no password. You sign in with Google, and Google tells us your verified email address. That is the only thing we learn from your Google account.
• Your subscription state — which products you are entitled to, whether it is active, when the period ends, and our payment provider’s identifiers for your customer and subscription record.
• Your acceptance of our terms — which document you accepted, its version, a fingerprint of its exact text, when you accepted it, and the IP address and browser you accepted it from. We keep this so both of us can prove what was agreed, and so we cannot quietly change the text afterwards.
• Server request logs — the IP address, browser, page and time of requests to our service, kept for security and for working out what broke.
• A voucher code, if you redeemed one.

What our payment provider holds

Card payments are processed by Stripe. Your name, card details and billing address go to Stripe directly. We never receive or store a card number — only Stripe’s identifier for you.

What we don’t do

We don’t sell your information and we don’t show ads. This website loads nothing from anyone else — no analytics, no trackers, no third-party fonts — so no third party learns you visited. Open your browser’s developer tools and check; that is the point of saying it. The only cookie we set is a first-party, HttpOnly session cookie proving you are signed in.

Forge apps on your machine contact us to check your subscription. They send no business data when they do.

How long we keep it

Server logs are kept for 30 days. Records of your acceptance of our terms are kept for the life of your account and six years afterwards — their whole purpose is to settle a later dispute about what was agreed, and a record deleted early cannot do that.

Your choices

Email us to ask what we hold about you, to correct it, or to have it deleted. Deleting your account removes your entitlement and acceptance records from our systems. The data on your own machine is yours and stays exactly where it is — including after you cancel. We cannot restore it for you, because we never had it; your backups are yours to keep.

Changes

If this policy changes materially, we will tell you at sign-in rather than quietly editing this page.

Contact

Questions, or a request about your data? Email hello@cruciblelogiclabs.com.

Crucible Logic Labs, a trading name of Human-Cyber Performance Tech LLC. Effective 30 August 2026.