Privacy Policy
Last updated: May 31, 2026
1. Who We Are
This website at https://forgeopus.org (the "Site") is operated by Aaditya Jindal and Gunbir Singh, two individuals based in the United States, doing business as ForgeOpus ("we," "us," or "the Operators"). ForgeOpus is an independent open-source project and is not incorporated as a business entity.
For purposes of the EU General Data Protection Regulation ("GDPR"), the Operators act as joint data controllers within the meaning of Article 26 GDPR. The single point of contact for all data-related inquiries is: forgeecosystem@gmail.com.
This Privacy Policy describes what information is collected when you visit the Site, why it is collected, and your rights with respect to it.
2. The Short Version
We do not use cookies of any kind.
We do not operate user accounts, contact forms, or any feature that collects information you actively submit.
We do not sell, share, or monetize any data about you.
The only data processed about you is generated automatically by our hosting infrastructure (Vercel) as a standard and unavoidable part of serving any website over the internet.
3. Information Collected and Why
We do not directly collect personal information. The services that host and deliver this Site automatically process certain technical data:
Vercel — Hosting Infrastructure
The Site is hosted by Vercel, Inc. (USA). Vercel's servers automatically log every HTTP request they handle. These server-side logs include: visitor IP address, browser User-Agent string, request path, HTTP method, response status code, referrer URL, and timestamp. On our plan, Vercel retains these logs internally for approximately one hour before automatic deletion. We do not receive exportable copies of these logs. Vercel acts as our data processor for this infrastructure data.
Lawful basis (GDPR Art. 6(1)(f)): We process this data under legitimate interests — specifically, our interest in operating, securing, and maintaining a functioning website. We have assessed that this interest is not overridden by your rights, given that: (a) data is processed only by Vercel as our infrastructure provider and not by us directly; (b) server logs are deleted within approximately one hour, which is far shorter than the 30-day industry standard; and (c) no profiling, cross-site tracking, or automated decision-making occurs.
Vercel Speed Insights — Performance Monitoring
We use Vercel Speed Insights to measure page performance (Core Web Vitals: LCP, FCP, CLS, TTFB). Speed Insights is designed to operate without collecting personally identifiable information: it does not store IP addresses, sets no cookies, and does notfingerprint or track individual visitors across sessions. It collects aggregated, anonymized performance metrics: page URL, network speed, browser engine, device type, OS, and country (derived server-side from your IP at the moment of collection but not stored with the data point). Vercel's own documentation confirms this data "cannot be tied to, or associated with, any individual visitor or IP address." Because no personal data is retained, GDPR does not apply to Speed Insights data.
Cloudflare — DNS Resolution Only
We use Cloudflare, Inc. as our DNS provider for domain name resolution only. Your web traffic flows directly to Vercel's servers — it is not proxied through Cloudflare's network. Cloudflare therefore does not observe, process, or store your browsing traffic to this Site.
Email Contact
If you email us at forgeecosystem@gmail.com, we receive your email address and the contents of your message. This information is used only to respond to your inquiry and is stored in our Gmail inbox (Google LLC). We do not use it for any other purpose. Lawful basis: Article 6(1)(f) GDPR (legitimate interest in communication) or Article 6(1)(b) where your message initiates a pre-contractual or informational exchange.
4. Cookies
This Site does not use cookies of any kind — not for analytics, session management, advertising, or any other purpose. No cookie consent banner is displayed because none is needed.
5. Third-Party Data Processors
The following services process data in connection with the Site. Each is contractually bound to appropriate data protection obligations and maintains its own privacy documentation:
| Processor | Role | Safeguards |
|---|---|---|
| Vercel, Inc. (USA) | Hosting & Speed Insights | EU–US Data Privacy Framework; Standard Contractual Clauses; ISO 27001; SOC 2 Type II |
| Cloudflare, Inc. (USA) | DNS resolution only | EU–US Data Privacy Framework; Standard Contractual Clauses |
| Google LLC (USA) | Email (Gmail) | EU–US Data Privacy Framework; Standard Contractual Clauses |
We do not sell, rent, or otherwise disclose personal data to any other third parties, except as required by law or valid legal process.
6. Data Retention
- Vercel infrastructure logs — approximately one hour, then automatically purged by Vercel.
- Speed Insights metrics— retained in anonymized, aggregated form per Vercel's dashboard retention limits for our plan. Cannot be linked to any individual.
- Email correspondence — retained for as long as necessary to address your inquiry, then deleted in the ordinary course.
7. Your Rights (EU / EEA / UK Residents)
If you are located in the European Economic Area or the United Kingdom, you have the following rights under the GDPR and UK GDPR with respect to personal data we process about you:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing based on legitimate interests (Art. 21 GDPR)
- Right to lodge a complaint with your local supervisory authority
Because this Site uses no cookies, operates no user accounts, and collects no contact information from visitors, we do not directly hold personal data about you. The infrastructure logs described above are held by Vercel, Inc. as our data processor. To exercise rights with respect to that data, you may contact Vercel at privacy@vercel.com or via vercel.com/legal/privacy-policy. We will assist you in exercising your rights to the extent we are able.
For EU residents, the relevant supervisory authority is the data protection authority in your EU Member State. For UK residents, the ICO at ico.org.uk.
8. Children's Privacy (COPPA)
This Site is not directed to children under the age of 13. Because this Site collects no personal information from any visitor, no obligations arise under the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children. If you believe a child has submitted personal information to us, contact us at forgeecosystem@gmail.com and we will investigate and delete any such information promptly.
9. Links to Third-Party Sites
This Site contains links to external websites, including GitHub repositories and documentation platforms. We are not responsible for the privacy practices of those sites. When you navigate away from this Site, we encourage you to review the privacy policy of any site you visit.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page when we do. Continued use of the Site after any update constitutes your acknowledgment of the revised policy.
11. Contact
Questions or requests regarding this Privacy Policy should be directed to: forgeecosystem@gmail.com. We will respond within 30 days.