Privacy Policy

The data controller responsible for personal data described in this policy is StoneForge Labs, s.r.o., a limited liability company incorporated in the Czech Republic (Company ID (IČO) 24546844, VAT ID CZ24546844) (the "Company"), the operator of the Forge Logger service available at forgelogger.dev and app.forgelogger.dev.

Registered address: Nové sady 988/2, 602 00 Brno, Czech Republic. For any privacy-related request you can reach us at support@forgelogger.dev.

Forge Logger is a business-to-business platform. The way we act under the GDPR depends on the data in question:

• As a controller — for the personal data of our customers and their team members: account details, authentication, billing, and how you use the dashboard.
• As a processor — for the telemetry, logs, crash data, and bug reports that you (our customer) send into Forge Logger from your games and applications. You decide what that data contains and remain its controller; we process it on your behalf under your instructions.

If you are an end-user of a game or application that uses Forge Logger and have questions about data collected through it, please contact the developer or studio operating that product.

We collect and process the following categories of personal data:

• Account data — name, email address, and authentication details. If you sign in with Google, we receive your basic profile information (name, email, and your unique Google account identifier) via the openid, email, and profile scopes. We never request access to your Gmail, Drive, or other Google data.
• Billing data — subscription tier, plan status, and billing identifiers. Card and payment details are handled directly by our payment processor (Stripe) and are not stored on our servers.
• Ingested project data — the events, sessions, builds, logs, attachments, and bug reports your applications send to us. This data is controlled by you and may contain personal data of your end-users if you choose to include it.
• Usage and technical data — IP address, browser/device information, and log data generated when you use the service, used for security, rate-limiting, and diagnostics.

We process personal data for the following purposes and legal bases:

• To provide the service (performance of a contract) — creating and managing your account, ingesting and displaying your project data, and operating dashboard features.
• To process payments (performance of a contract) — managing subscriptions and invoicing via Stripe.
• To secure and improve the service (legitimate interests) — preventing abuse, rate-limiting, debugging, and improving reliability.
• To communicate with you (legitimate interests / contract) — sending service, security, and account-related emails.
• To comply with the law (legal obligation) — meeting tax, accounting, and other legal requirements.

Some optional features use AI models to summarise bug reports and detect likely duplicate issues. When enabled for your project, relevant report content may be sent to our AI sub-processors (see below) to generate these summaries and similarity embeddings. These features can be controlled at the project level, and the underlying providers do not use your data to train their models under our agreements with them.

We rely on a small number of trusted service providers to operate Forge Logger. Each processes data only as needed to provide their service to us:

• Google Cloud Platform — hosting, database, file storage, and encryption key management (EU/US).
• Stripe — payment processing and subscription billing.
• Anthropic and OpenAI — AI-assisted summarisation and duplicate detection (only when those features are enabled).
• Resend — delivery of transactional and account emails.

Some of our sub-processors may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses to ensure your data remains protected.

We keep account and billing data for as long as your account is active and as required to meet our legal obligations. Ingested project data is retained according to your plan and configuration, and is deleted when you delete it or close your account, subject to short-term backup retention. You can request deletion of your account and associated data at any time.

We protect your data with industry-standard measures, including encryption in transit (TLS) and encryption at rest. Sensitive secrets such as integration credentials are encrypted using envelope encryption backed by Google Cloud KMS. Access to production systems is restricted and audited.

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure of your data ("right to be forgotten");
• restrict or object to certain processing;
• receive your data in a portable format;
• lodge a complaint with a supervisory authority — in the Czech Republic, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).

To exercise any of these rights, email us at support@forgelogger.dev. We will respond within the timeframes required by law.

Forge Logger uses strictly necessary browser storage (such as authentication tokens and your theme preference) to keep you signed in and deliver the service. We do not use third-party advertising or cross-site tracking cookies.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you by email or within the application.

If you have any questions about this Privacy Policy or how we handle your data, contact us at support@forgelogger.dev.