Information we collect
Account data
When you create an account, we collect:
- Your email address.
- A name, if you choose to provide one.
- A password hash (we never store plain-text passwords) or an OAuth
identifier from Google or Apple if you sign in with those providers.
- Timestamps for account creation, email verification, and last sign-in.
- Active session metadata (device-level expiry information) so you can
review and revoke sessions from your account page.
Payment data
When you subscribe to a paid feature, payments are processed by Polar (our merchant of record). Polar receives your billing details (name, email, payment method, and billing address) and processes the transaction. We receive:
- A purchase record (provider transaction id, product id, status,
renewal date) that lets us grant entitlements and show your purchase history.
- A customer id from Polar so we can reconcile
webhook events with your account.
We never see your full payment card number or CVV. Refer to Polar's privacy policy for how they handle billing data.
Transactional email
We use Resend to deliver transactional email (account verification, password resets, receipts, and payment notifications). Resend receives the recipient address and the email content needed to deliver the message. Resend does not use this data for marketing.
Error tracking
If/when error tracking is enabled, we use Sentry to record application errors and the minimum context needed to diagnose them (browser version, error stack trace, request id). We scrub personally identifiable information from these reports before they are stored.
Logs and analytics
We keep server-side request logs (IP address, timestamp, route) for operational and security purposes. These logs are retained for a limited period and are not used for marketing.
How we use information
We use the information we collect to:
- Authenticate you and protect your account from abuse.
- Provide paid features to subscribers and grant entitlements.
- Send transactional email related to your account and purchases.
- Diagnose and fix bugs.
- Comply with legal obligations.
We do not sell your personal information.
Sharing
We share information only with the service providers required to operate the Service:
- Polar — payment processing.
- Resend — transactional email delivery.
- Cloudflare R2 — hosting of application downloads.
- Sentry — error tracking (if/when enabled).
We may also share information when required by law or to protect the rights, property, or safety of Forkbench, Inc., our users, or others.
Data retention and deletion
You can delete your account at any time from the account page. Deletion is permanent. Your email, name, and OAuth links are removed; your purchase history is anonymized but retained for ledger and dispute-resolution purposes.
We honor verifiable requests to access, correct, or delete personal data as required by applicable law. Email [email protected] to exercise these rights.
Security
We use industry-standard practices: bcrypt password hashing, HTTPS everywhere, signed webhooks, and least-privilege access to infrastructure. No system is perfectly secure; report security issues to [email protected].
International users
The Service is operated from the United States. If you use the Service from outside the United States, you consent to your information being transferred to and processed in the United States.
Children
The Service is not directed to children under 13 and we do not knowingly collect personal data from children under 13. If you believe we have collected such data, contact [email protected].
Changes
We may update this Privacy Policy from time to time. Material changes will be announced through the Service or by email.
Contact
Questions about this Privacy Policy? Email [email protected].
Forkbench, Inc. [Street address] [City, State ZIP] United States