Private alpha · version 0.1
Privacy information
This notice explains how FanForge handles personal information in the private-alpha application at app.joinfanforge.com.
Who is responsible
FanForge is currently operated for the private alpha by Javan Buchanan. Privacy questions and rights requests can be sent to forgemaster@joinfanforge.com.
Information we handle
- Invitation, account and profile details, including your email address and creator name.
- Forge membership, roles and access permissions.
- Creative work you choose to add, including manuscripts, lore, files, images, audio, video and related metadata.
- Collaboration records such as comments, notes, mentions, submissions, reviews, decisions and attribution.
- Publishing choices, public Forge material and moderated engagement where those features are enabled.
- Privacy-minimised public audience signals. FanForge uses a rotating daily visitor digest for view deduplication and stores broad referrer categories rather than raw IP addresses or source URLs.
- Feedback, support correspondence and limited technical or security information needed to diagnose problems and protect the service.
Why we use it
We use this information to provide and secure FanForge, authenticate invited testers, enforce access boundaries, preserve the history of authorised collaboration, process requested publishing actions, respond to support, investigate abuse and improve the alpha. The intended legal bases are performance of the alpha agreement, FanForge’s legitimate interests in operating and protecting the service, compliance with legal obligations, and consent where it is specifically requested. This allocation remains subject to qualified legal review.
Who can see it
Private Forge material is available only to people whose membership and role permit access. Public material is exposed only through a deliberate publishing choice. Infrastructure providers process information to host the application, database, authentication, storage and email. FanForge currently relies principally on Vercel and Supabase for the hosted application. We do not sell private creative work or use it for advertising profiles, public rankings or recommendation scores.
International processing
Infrastructure suppliers may process information outside the United Kingdom. FanForge relies on the contractual and legal safeguards offered by those suppliers. Supplier locations and transfer safeguards must be confirmed in the final legal review.
How long we keep it
Account and Forge information is kept while it is needed to provide the alpha, protect its users and preserve authorised collaboration records. Contribution, review and attribution records are deliberately durable and may affect other collaborators, so a deletion request may require records to be restricted or de-identified rather than simply removed. Support and security records are kept only as long as reasonably needed for the issue, prevention of abuse or legal requirements. Deleted information may remain temporarily in provider backups until their normal replacement cycle completes. Exact operational schedules are still being documented before broader launch.
Your choices and rights
You may ask for access to, correction of, deletion of, restriction of, or a portable copy of personal information, and may object to some uses. The rights that apply depend on the circumstances. Email the address above so the request can be verified and handled safely. You may also complain to the UK Information Commissioner’s Office.
Cookies and local storage
FanForge uses essential session storage to authenticate users and protect private routes. The application does not currently use advertising cookies. See Cookies & storage for the current inventory.
Security and your responsibilities
FanForge uses access controls, private storage and short-lived file links, but no pre-release online service can promise absolute security. Use a unique password, do not share invitation or sign-in links, and do not upload irreplaceable material without keeping your own copy. Report suspected unauthorised access promptly through Support.
Children
Private-alpha participation is restricted to people aged 18 or over. Do not create an account or participate if you are under 18.
Changes
This notice is versioned. Material changes will be identified and, where appropriate, brought to testers’ attention or require a renewed acknowledgement.