Forgeroo

Privacy policy

Privacy

What Forgeroo collects, why, who else sees it, how long it is kept, and what you can ask us to do with it.

Last updated 2 October 2026.

1. Who is responsible for your data

Dhanu Allen-Budiasa, of Suite RA01, 195-197 Wood Street, London, E17 3NU, is the data controller for personal data processed through Forgeroo.

For any question or request about your data, contact support@forgeroo.app.

2. What we do not collect

Forgeroo is a desktop application, and most of what it handles never leaves your computer. We do not collect or store:

  • Your artwork, permanently. Designs are read on your machine. A copy leaves it only to have a listing written, or when you run a forge connected to Printify or Gelato. The copies we send are deleted after a set time: section 6 says how long. Printify or Gelato also keep their own copy in your account with them, under their own rules (section 5).
  • Your listings. The titles, descriptions and tags Forgeroo writes are saved on your computer. We do not keep a copy.
  • Your design or file names.
  • Your Printify or Gelato API keys. These are held in your operating system’s own encrypted store on your machine and are never sent to us — not even as a hash. Once a key is saved, the application only ever shows its last four characters.
  • Your shop name, product listings, prices or sales, unless you give us your shop link when you join the waiting list and ask to try Forgeroo first (section 3).
  • Anything from Etsy. Forgeroo does not connect to Etsy. It holds no Etsy credentials, makes no request to Etsy, and has no access to your shop or your account there.
  • Your templates and mockups.

3. What we collect, and why

Your account. Your email address and sign-in details, held by our authentication provider. It also holds your name if your account has one: Google shares it, for example, when you sign in with Google. In our own records, a copy of your email address, your plan, your subscription status, the date your paid period ends, and the references Stripe gives your customer record and subscription. We need this to give you an account and to know what you have paid for.

What you have used. A record each time listings are written: your account identifier, how many, when, and what kind of writing it was. This is billing — it is what tells us how much of your monthly allowance is left. On the free plan, a record is also kept each time a Quick mockups run ends: how many mockups it made and when, towards its 50 free ones. Each record also carries the device code described below, which is not billing.

What the application did. A record each time a run finishes: how many designs, whether it wrote listings or only made mockups, how many sizes it cut, which print provider the forge is set to send to (the word “printify” or “gelato” and nothing more), and when. We use this to understand how the product is being used and to keep your lifetime run count working if you change computer.

Your artwork, briefly. When a listing is written, a reduced-resolution copy of the design is sent to Anthropic, whose Claude models we use, so that it can describe what it sees. When you run a forge connected to Printify or Gelato, your full-size design file is hosted temporarily by our storage provider so that the print provider can fetch it. It sits at a web address that is not published anywhere and cannot be guessed, but anyone who had that exact address could open the file until it is removed. Neither copy is kept permanently: section 6 says how long each one lasts.

Staying signed in.A token so that the desktop application does not ask for your password every time you open it, and a record of each computer you have signed in on: a short label for the kind of computer (such as “Mac”), when it was signed in, when it was last used, and when it was signed out. Resetting a forgotten password on our website signs every computer out. Your account page lists the computers you are signed in on now, and you can sign any of them out there. The copy you can download from that page includes every computer you have signed in on.

Emails from us. If we ask whether you would like occasional emails with Forgeroo news and discounts, we record your answer, when you gave it, and the exact wording you were shown. You can change your answer at any time on your account page. Emails about your account and your payments are not marketing and are sent either way.

The waiting list. If you join the waiting list before Forgeroo launches: your email address and the exact words you agreed to. If you answer them, a few optional questions: where and what you sell, which print provider, how you make your mockups and your designs, how many listings you make now and would like to, and how long one takes you. Each answer is saved as you give it, so anything you pick or type is kept even if you close the form before finishing. If you ask to try Forgeroo first, the shop link and note you give us. We use these to email you when your early access opens and about the launch, to contact you about trying Forgeroo first if you asked to, and to shape Forgeroo and its pricing.

Checkouts we could not take. If you try to subscribe from a country we do not sell to yet, we note the country you were connecting from, the plan you chose and your account, so that we know where there is demand.

Messages you send us. If you email us, we keep your message, your email address and our reply, so that we can help you and look back at what was said.

Do you have to give us any of this? Your email address and, on a paid plan, your payment details are needed to make the contract work — without them we cannot give you an account or take payment, so we could not supply the service. Your answer about emails from us is up to you, and saying no changes nothing else. Everything else comes from using Forgeroo, not from questions we ask you. On the waiting list only your email address is needed: the questions after it are optional, and skipping them changes nothing, except that to try Forgeroo first we need every answer.

One device identifier

When the application looks up how much of your allowance is left, or records what you have used, it sends a 64-character hash. We store it only with the record of what you have used. It is not your computer’s identifier: the application reads a hardware identifier that never leaves your machine, adds a fixed value of ours, and sends only the result. It cannot be reversed, cannot identify a computer to anyone who does not already have it, and cannot be matched against any other company’s records.

It exists because the free allowance would otherwise be per email address, and fifty throwaway accounts on one laptop would collect fifty free allowances. Only free accounts are checked against it. Where a machine will not provide an identifier, the allowance is counted by account alone and nobody is refused a free plan because of it.

We treat this as personal data, because hashing narrows what a device identifier can be used for but does not put it outside the rules.

4. Our lawful basis

Performing our contract with you — your account, your subscription, your allowance, and sending your artwork to the AI provider and to your print provider, because those are the service you asked for.

Our legitimate interests — the record of what the application did, so that we can understand how our own product is used and improve it; the device hash, so that a free allowance meant for one person is not taken fifty times; and the note of checkouts we could not take, so that we know where there is demand; and emails you send us, so that we can answer them. We have weighed each of these against your interests. None of them involves selling or sharing your data, and you can object to any of them using the contact address in section 1.

Your consent — occasional emails with Forgeroo news and discounts, only if you have said yes; and, if you join the waiting list, emails about early access and the launch, your optional answers, and, if you ask to try Forgeroo first, emails about testing it. You can withdraw it at any time: on your account page, or for the waiting list with the unsubscribe link in any of its emails. Doing so affects nothing else.

Complying with the law — keeping records of what was sold and to whom, which tax law requires us to retain.

5. Who else sees it

We use the following companies to run Forgeroo. They process data on our instructions, under contract, and may not use it for their own purposes.

  • Clerk — accounts. Your email address, your sign-in, and your name if your account has one.
  • Supabase — our database. It holds your account record, your usage and run history, the computers you have signed in on, your answer about emails, any checkout we could not take, and the waiting list.
  • Stripe — payments. Your card details go directly to Stripe and never reach us. Stripe also holds your email address, a reference to your Forgeroo account, and your name and billing address where checkout asks for them. When you subscribe, we record with Stripe that you asked for Forgeroo to start straight away, when you agreed, and which version of our terms you agreed to. We see what we need to manage your subscription: your payments and invoices, and the last four digits and expiry date of your card.
  • Backblaze B2 — our storage provider. Hosts your full-size design file so that your print provider can collect it. It can no longer be opened about seven days after upload, and is deleted automatically a day or so after that.
  • Resend — sends our emails to you: confirmation of your subscription and of any cancellation, other notices about your subscription, emails about early access and the launch if you joined the waiting list, and, if you have said yes to them, occasional news and discounts. It receives your email address and the contents of those messages, and nothing else. Its servers are in Ireland.
  • Anthropic— receives a reduced-resolution copy of your design, the writing instructions, the product type, whether it is a digital product, and the keywords and product details you have given in your forge’s settings or on the Quick SEO screen, in order to write the listing. When you ask for a listing you already have to be improved, it also receives that listing’s title, description and tags. A rewrite from your wording alone sends no image: it sends your wording, the writing instructions, the product type and any keywords you gave. Their Claude models look at the image so that they can describe it. Under the commercial terms we hold with them, none of it is used to train their models, and they delete it within 30 days — longer only where something has been flagged as a breach of their usage policy, or where the law requires it.
  • Vercel — runs this website and the servers the application talks to, which is how your design reaches Anthropic when a listing is written.
  • Google Workspace — our email. Receives anything you send to support@forgeroo.app.

Printify and Gelato are different. They are not companies we use: they are the print providers you choose to connect, with your own account. If you connect one, it receives your design file and listing text, and Printify also gets the sizes and prices you choose in Forgeroo (Gelato takes those from your template). What they do with it is covered by their own privacy policies, not ours.

We do not sell your data, and we do not share it for advertising.

Some of these companies are outside the United Kingdom, mainly in the United States. Those transfers are covered either by the UK Extension to the EU–US Data Privacy Framework, where the company is certified under it, or by the UK International Data Transfer Agreement or the UK Addendum to the standard contractual clauses. Ask us and we will tell you which applies to a particular company and send you a copy.

6. How long we keep it

  • Artwork sent for a listing — not kept by us once the listing is written. Anthropic deletes its copy within 30 days, unless it has been flagged as breaking their usage policy or the law requires them to keep it.
  • Artwork hosted for a print provider — can no longer be opened about seven days after upload, and is deleted automatically a day or so after that.
  • Your account — while your account exists, and for 30 days after you ask us to close it.
  • Billing and usage records— six years, because tax law requires business records to be kept for that period. The device code on your usage records is kept with them. It is used for the current month’s free listings and, on the free plan, for the one-off 50 free mockups, which do not reset.
  • Run records, the computers you have signed in on, your answer about emails, and checkouts we could not take — while your account exists, and deleted when it is closed.
  • Sign-in tokens — each one works until that computer is signed out. You can sign a computer out in the app or from your account page, and resetting a forgotten password on our website signs every computer out. Tokens do not run out on their own, so sign out any computer you no longer use. We never keep the token itself, only a scrambled fingerprint of it that cannot be used to sign in. That fingerprint stays with the record of that computer until your account is closed.
  • The waiting list — deleted six months after Forgeroo launches. If you unsubscribe before then, your answers are deleted and we keep only your email address, the date you left and the words you had agreed to, so that we never email you again. Every waiting-list email has a link to unsubscribe.
  • Emails you send us — for as long as we need them to help you, and deleted when your account is closed, except those about a payment, a refund or your data rights, which we keep with our business records for six years.

7. Your rights

Under UK data protection law you have the right to ask us for a copy of your personal data, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive it in a portable form. You also have the right to withdraw consent where we rely on it, though for the most part we do not.

You can download your account records yourself, at any time, from your account page: your account details, your plan, the listings you have used, your runs and the computers you have signed in on. Your payments and invoices are in the Billing section of the same page. For a full copy of everything we hold, including emails you have sent us, or to use any of these rights, email support@forgeroo.app. We will respond within one month. There is no charge.

Deleting your account does not delete the billing records we are required to keep, as described in section 6.

You also have the right to complain to us about how we have handled your personal data, and we have to tell you that separately from the right to complain to the regulator. Email support@forgeroo.app with “data complaint” in the subject. We will acknowledge it within 30 days and respond without undue delay.

If you are still unhappy you may complain to the Information Commissioner’s Office at ico.org.uk. Complaining to us first does not take that right away.

8. What the application stores on your computer

Forgeroo is software you install, so most of what it keeps is on your own machine rather than ours. It stores:

  • Your sign-in token, the email address you signed in with, and your first name if your account has one, so it does not ask for your password every launch, can show which account is signed in, and can greet you by name. It does not store your plan: it checks that with our server each time.
  • Your settings and your forges — what you sell, your SEO wording, your provider keys, your folder choices.
  • Your artwork, mockups and finished listings, in the folders you chose.
  • A hardware identifier, used to work out the hashed value described in section 3. The identifier itself never leaves your computer.

All of it is necessary for the application to do what you asked it to do, which is why none of it asks your permission first. We do not store anything on your computer for advertising, for tracking you across other services, or for measuring you against other people.

You can remove all of it by uninstalling the application and deleting its folder.

9. Cookies

Forgeroo uses only the cookies necessary to run the service: keeping you signed in, and keeping the site secure. We do not use analytics cookies, advertising cookies, or any third-party tracking.

Because we set no non-essential cookies, there is no consent banner to click.

10. Children

Forgeroo is not intended for children. You must be at least 18 to hold an account, and we do not knowingly collect data about anyone younger.

11. Changes to this policy

If we change what we collect or what we do with it, we will update this page and, where the change is significant, tell you by email before it takes effect.

See also our terms.