Privacy Policy

We collect only what we need to operate the Site and respond to you.

• Information you give us. When you submit a contact form, project enquiry, newsletter signup, or roadmap suggestion we collect the details you provide — typically name, email address, organisation, and the message itself.
• Account information. Administrative users authenticate through our backend provider. We store an account identifier, email, and hashed credentials handled by that provider.
• Technical information. Our hosting and analytics layer automatically records IP address, user agent, referring URL, pages viewed, and approximate location derived from IP. We use a short browser fingerprint to deduplicate suggestion votes.
• Cookies and local storage. We use first-party cookies and browser storage strictly to keep you signed in, remember preferences, and prevent abuse. We do not use advertising or cross-site tracking cookies.

• To reply to enquiries and deliver work you have engaged us to do.
• To operate, secure, and improve the Site.
• To send field-notes emails when you opt in (you can unsubscribe at any time).
• To detect abuse, fraud, and to enforce our terms.
• To comply with legal obligations.

We do not sell your personal information and we do not use it to train third-party AI models.

Where GDPR or UK GDPR applies, we rely on the following lawful bases: your consent (newsletter, optional cookies); contract (delivering services you request); legitimate interests (securing the Site, responding to enquiries, basic analytics); and legal obligation where required.

We share data only with vetted service providers that help us run the Site, under contracts that require them to protect your data:

• Cloud hosting and database (Cloudflare, Supabase).
• Transactional email and notifications (e.g. Discord webhooks for internal alerts).
• Error and performance monitoring.

We may also disclose information when required by law, to protect our rights, or in connection with a merger or acquisition. In that case you will be notified before your information becomes subject to a different privacy policy.

Our providers may process data outside your country, including in the United States and the European Union. Where required, transfers are covered by Standard Contractual Clauses or an equivalent safeguard.

We keep personal information only as long as needed for the purpose it was collected, to comply with our legal obligations, or to resolve disputes. Enquiry messages are typically kept for up to 24 months; newsletter subscribers until you unsubscribe; server and security logs for up to 90 days.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your information ("right to be forgotten").
• Object to or restrict certain processing.
• Withdraw consent at any time.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email info@workforgedev.com. We will respond within 30 days.

We use TLS in transit, encrypted databases at rest, row-level security policies on user data, and least-privilege access for our team. No system is perfectly secure; if we discover a breach affecting your data we will notify affected users without undue delay.

The Site is not directed at children under 16 and we do not knowingly collect personal information from them. If you believe a child has given us information, please contact us and we will delete it.

We may update this policy as our services and the law evolve. Material changes will be announced on the Site with an updated effective date at the top.

Questions or requests? Email info@workforgedev.com.