Privacy Policy

What this service is

Forge Auth is the central sign-in service for BlueForge applications. When you sign in to a BlueForge app, this service is what authenticates you and issues your session.

Data we store

• Your account — name, email address, whether that email is verified, and a profile image URL if your sign-in provider supplied one.
• Sessions — a session record and its expiry, so you stay signed in between visits.
• Linked sign-in accounts — the provider you signed in with and the identifier it gave us, so the same person signing in twice is recognised as the same account.
• Teams and membership — which teams you belong to, where an application uses them.
• Guest sessions — some apps let you start without an account. That creates a temporary, anonymous user with a placeholder email, flagged as anonymous, so your progress survives a page reload.

Cookies

This service sets a session cookie when you sign in. It is strictly necessary — without it you could not stay signed in — and it is not used for tracking or advertising. It is cleared when you sign out.

There is no analytics, no advertising, and no third-party tracking on this service, so it sets no other cookies.

Who else receives your data

• Google and GitHub — only if you choose to sign in with one of them. You authenticate on their site; they return your name, email and profile image to us. We do not send them anything about your activity afterwards.
• Stripe — where an application has paid plans, checkout, the billing portal and subscription status are handled by Stripe. Card details go to Stripe directly and are never stored here.

Everything else runs on BlueForge's own infrastructure. We do not sell or rent your personal data.

How long we keep it

Account records are kept while your account exists. Sessions expire on their own and are removed. Delete your account and the associated records go with it.

Your rights

If you are in the EU or UK you can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Write to privacy@blueforge.studio and we will respond within 30 days.

Changes

If what this service stores or shares changes, this page changes with it. The date at the top is when it was last accurate.