Privacy Policy

If you buy: your email address, your plan, your purchase reference from our payment provider, and the registry token we generate for you. Payment details (card, mobile money) are handled entirely by the payment provider — they never touch our servers.

If you sign in: a session cookie (strictly necessary, no consent banner games) and standard technical logs (IP, user agent) kept briefly for security.

If you just browse: your builder compositions and preferences (theme, package manager) live in your browser's localStorage — they are never sent to us.

Verifying licenses, signing you in by magic link, providing pro content through the registry and MCP, and answering your support emails. That's the whole list. We don't sell data, share it with advertisers, or profile you.

Blockforge is published by Terra Vidhal (terravidhal.me), who is responsible for the processing described here. Contact: [email protected].

• Hostinger: hosts the site, on a server in France.
• Cloudflare: delivers and protects the site, counts visits without cookies, stores our backups (in Europe).
• Neon: our database, in Frankfurt (EU).
• Resend: sends the sign-in emails.
• Chariow: takes payments.
• Sentry: technical error reports, stored in Germany (EU), without IP addresses or account data.

Each provider only receives what it needs to do its job. Some are US companies; transfers outside the EU then rely on the European Commission's standard contractual clauses or an equivalent safeguard.

We count visits with Cloudflare Web Analytics: page views, country, device and browser type, referring page. It sets no cookie, creates no identifier and does not follow you across sites; we only see totals.

Your account and license data: as long as your account exists. Purchase records: as long as accounting law requires. Security logs: a few days. Backups: the database is copied every night and each copy is kept 30 days, so deleted data also leaves our backups within 30 days.

HTTPS everywhere, and two-factor authentication on every server and admin tool. If a data breach ever put you at risk, we would tell you and the relevant authority within the legal deadlines.

Write to us to access, correct, export or deleteyour data at any time. Deleting your account removes your email and session data; we keep the minimal purchase record required for accounting. You can regenerate your registry token by contacting support if it ever leaks. You can also complain to your data protection authority (for example the CNIL in France, or Cameroon's personal data protection authority).

If this policy changes materially, we'll note it in the changelog and on this page's date. No silent edits.