Privacy Policy
Last updated: June 27, 2026
1. What We Collect
When you use ModForge, we collect: account information (username, email, password hash), profile information you choose to provide (bio, avatar, PayPal email), transaction data (purchases, sales, payouts), usage data (pages visited, searches, clicks), and device information (IP address, browser type, operating system).
2. How We Use Your Data
We use your data to: operate and improve the Platform, process payments and payouts, verify seller identities and review applications, send transactional emails (purchase confirmations, payout notifications), send optional marketing emails (you can unsubscribe at any time), prevent fraud and enforce our Terms of Service, and comply with legal obligations.
3. Data Sharing
We do not sell your personal data. We share data only with: payment processors (Stripe, PayPal, Coinbase Commerce) to process transactions, our database provider (Supabase) to store your data securely, analytics tools to understand how the Platform is used, and law enforcement when required by law. Sellers can see buyers' usernames on orders they fulfill. Buyers can see sellers' public profiles.
4. Data Storage & Security
Your data is stored on Supabase servers with encryption at rest and in transit. We use row-level security to ensure users can only access their own data. Passwords are hashed using bcrypt and never stored in plain text. We implement industry-standard security practices but cannot guarantee absolute security.
5. Cookies
We use essential cookies to keep you logged in and remember your preferences. We do not use third-party tracking or advertising cookies. You can disable cookies in your browser settings, but some features may not work correctly.
6. Your Rights
Depending on your location, you may have the right to: access the personal data we hold about you, request correction of inaccurate data, request deletion of your account and data, export your data in a portable format, and opt out of marketing communications. To exercise these rights, contact us at privacy@modforge.xyz.
7. Data Retention
We retain your account data for as long as your account is active. Transaction records are retained for 7 years for legal and accounting purposes. If you delete your account, personal data is removed within 30 days, except where retention is required by law.
8. Children's Privacy
ModForge is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, contact us and we will delete it promptly.
9. Changes to This Policy
We may update this policy from time to time. We'll notify you of significant changes via email or a notice on the Platform. Continued use after changes constitutes acceptance.
10. Contact
For privacy questions or requests, contact us at privacy@modforge.xyz.