Privacy Policy

Forged is operated by CodeDraft LLC (“Forged,” “we,” “us,” or “our”). We collect as little personal information as we can, we are clear about what we do with it, and we never sell it. This policy explains what we collect when you visit forged.codedraft.io or use our content library, why we collect it, and the choices you have.

By using Forged you agree to this Privacy Policy and to our Terms of Service.

We collect only what we need to run a subscription content library:

• Account & contact information.Your email address. Forged uses passwordless “magic link” sign-in, so your email is the primary identifier for your account.
• Subscription & payment information. Payments are processed by Stripe. We do not receive or store your full card number. We store the Stripe customer and subscription identifiers, your plan, and your subscription status so we can grant and verify access.
• Usage & technical information. Standard information such as IP address, browser/user-agent, and the pages and resources you access, including download events.
• Records we generate. To operate and secure the service we keep a download audit log (your email, the asset, a timestamp, and IP address), a record of your acceptance of our download disclaimer (your email, the disclaimer version, timestamp, IP address, and user-agent), and abuse-prevention counters tied to your email.
• Newsletter (optional). If you subscribe to the Forged newsletter, we manage your subscription through Buttondown. You can unsubscribe at any time using the link in any newsletter email.

Forged does not collect resumes, government identifiers, or special-category data (such as health, biometric, or demographic data), and the service uses no automated AI processing of your personal information.

• To authenticate you (send and verify magic-link sign-in emails) and grant access to gated content.
• To create and manage your subscription and process payments through Stripe.
• To deliver transactional email, such as your sign-in links.
• To send the newsletter, if and only if you have opted in.
• To secure the service — rate-limiting sign-in requests, auditing downloads, and preventing abuse.
• To comply with legal, tax, and accounting obligations.

We do not sell your personal information. We share it only with the service providers (“sub-processors”) needed to operate Forged, and only as required to provide their service to us. We also disclose information where required by law or to protect our rights.

Forged uses only strictly necessary cookies — we do not use advertising or third-party tracking cookies. Specifically, we set a secure, HttpOnly session cookie (forge_token) that keeps you signed in, and a non-sensitive flag (forge_auth) that tells the interface whether to show signed-in or signed-out controls. Blocking these cookies will prevent sign-in from working.

We keep your account and email while your account is active and for a reasonable period afterward. Payment and billing records are retained as long as required by applicable tax and accounting law. Security and download-audit records are kept for a limited period sufficient to investigate abuse and meet our legal obligations, then deleted or anonymized.

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. You can unsubscribe from the newsletter at any time. To exercise any of these rights, contact us at the address below. You also have the right to lodge a complaint with your local data-protection authority.

We protect your information with industry-standard measures: encryption in transit (HTTPS) and at rest, signed and short-lived access tokens, least-privilege managed identities for our infrastructure, and time-limited links for downloading content. No system is perfectly secure, but we work to keep your information safe and to limit what we collect in the first place.

Forged is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

Our service providers process data primarily in the United States. If you access Forged from outside the United States, you understand that your information will be transferred to and processed in the United States and other countries where our sub-processors operate.

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice. Your continued use of Forged after a change takes effect means you accept the updated policy.

Questions about this policy or your information? Email us at privacy@codedraft.io.