Privacy Policy
Last updated: March 4, 2026
Colossus Forge Studios ("we", "us", "our") operates the website colossusforge.com and publishes software products including Portrait Forge, NOAA Weather, PromptGrader, TripForge, Forge the Kingdom, Protect the Forge, Voice Agent Auditioner, and Precursor. This policy describes what information we collect, how we use it, and how we protect it.
Information We Collect
Information you provide directly
- Purchases: When you buy a product through Stripe, Stripe collects your payment information (card number, billing address, email). We do not store your payment details — Stripe processes and secures all payment data under their own privacy policy.
- Support emails: If you email us at colossusforge@pm.me, we receive your email address and message content.
- API keys: Some products (e.g., Portrait Forge) allow you to enter your own API keys for third-party AI services. These keys are stored locally on your device and are never transmitted to our servers.
Information collected automatically
- Rate limiting data: Our backend servers may log hashed IP addresses for rate limiting purposes. These hashes are not reversible and cannot identify you. They reset daily.
- Vercel hosting: Our website is hosted on Vercel, which may collect standard web server logs (IP address, browser type, pages visited) as described in Vercel's privacy policy.
Information we do NOT collect
- No analytics SDKs (no Google Analytics, no Mixpanel, no tracking pixels)
- No advertising networks or ad tracking
- No cookies for tracking purposes
- No crash reporting SDKs
- No fingerprinting or cross-site tracking
- No sale of personal data to third parties
How We Use Information
- Payment processing: To fulfill your purchases and deliver digital products.
- Rate limiting: To prevent abuse of free-tier services.
- Support: To respond to your emails and resolve issues.
We do not use your information for advertising, profiling, or any purpose beyond delivering the product or service you requested.
Third-Party Services
Our products may interact with the following third-party services, each governed by their own privacy policies:
- Stripe — Payment processing (privacy policy)
- Google Generative AI / Gemini — AI image generation in Portrait Forge, when using your own API key (terms)
- Replicate — AI image generation in Portrait Forge (privacy policy)
- NOAA / National Weather Service — Weather data in NOAA Weather (privacy policy)
- Vercel — Website and app hosting (privacy policy)
- Railway — Backend hosting (privacy policy)
Data Storage and Security
- We store minimal data on our servers. Most user data (images, API keys, preferences) is stored locally on your device using browser storage (IndexedDB, localStorage).
- Payment data is handled entirely by Stripe and is never stored on our servers.
- Our backend servers use HTTPS encryption for all communications.
- Hashed IP data used for rate limiting is stored in-memory only and resets daily at midnight UTC.
Disclosure of Information
We do not sell, rent, or share your personal information with third parties except:
- When required by law (court order, subpoena, or legal process).
- With payment processors (Stripe) to complete transactions you initiate.
- With AI service providers when you use AI-powered features — only the prompts you submit are sent, and only to the provider you selected.
Children's Privacy
Our products are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.
Your Rights
You may:
- Request deletion of any data we hold about you.
- Clear all locally stored data by clearing your browser storage.
- Revoke API keys you've entered at any time through the app settings.
Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of our products after changes constitutes acceptance of the updated policy.
Contact
Questions about this privacy policy? Contact us: