Privacy Policy

Last updated: 24 September 2026

This policy explains what personal data DataForge (“DataForge”, “we”, “us”) collects when you use the website and study app at dataforge-inky.vercel.app, why, and what rights you have. DataForge is operated by an individual developer based in Spain, who is the data controller. Contact: carleondel@gmail.com.

What we collect

• Account data. Your email address and, if you sign in with Google or GitHub, the basic profile those services share with us (name, profile picture and a unique account identifier). If you use email and password, your password is stored only as a secure hash by our authentication provider.
• Study progress. Your answers, XP, achievements, bookmarks, study-block history, mock-exam results, preferences and similar data the app needs to work.
• Technical data. Our hosting and authentication providers keep short-lived server logs (IP address, browser type, time of request) for security and troubleshooting.

We do not use analytics, advertising or tracking cookies, and we do not sell or share your data for marketing.

Why we use it

• To create and secure your account and to save and sync your study progress across devices. The legal basis is the performance of our agreement with you (Art. 6(1)(b) GDPR).
• To keep the service secure and working, and to answer you when you contact us, based on our legitimate interest (Art. 6(1)(f) GDPR).
• To send essential account emails such as sign-in links or password resets.

Browser storage

The app stores your sign-in session and a copy of your progress in your browser's local storage so it works quickly and survives a reload. This storage is strictly necessary for the service you request, so no consent banner is required. Trial progress stays only in your browser until you create an account.

Service providers

We rely on these providers, who process data on our behalf:

• Supabase: authentication and database.
• Vercel: website hosting and delivery.
• Google: Google sign-in (if you choose it) and Google Fonts, which receives your IP address when the page loads its fonts.
• GitHub: GitHub sign-in, if you choose it.

Some of these providers may process data outside the European Economic Area. Where they do, transfers rely on safeguards such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.

How long we keep it

We keep your account and progress for as long as your account exists. If you ask us to delete your account, we delete your account and progress within 30 days. Server logs are kept by our providers for a limited period according to their own policies.

Your rights

You can ask to access, correct, export or delete your data, or object to or restrict its processing, by emailing carleondel@gmail.com from the address linked to your account. You also have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es) or your local authority.

Children

DataForge is not intended for children under 14 and we do not knowingly collect their data.

Changes

We may update this policy as the service evolves. We will change the date above and, for significant changes, let signed-in users know in the app or by email.