Privacy Policy
Last updated: 22 October 2026
Plain-English Summary
RevForge does not require an account. We do not use advertising trackers or sell your data. The only personal data we automatically process is your IP address in server logs, which is deleted after 7 days. If you email us, we keep that email to respond. That is it.
1. Data Controller
The data controller responsible for your personal data is RevForge, operating the platform at revforgehq.co, based in the Netherlands.
Contact for all privacy matters: contact@revforgehq.co
2. What Personal Data We Process
We collect the minimum data necessary to operate the platform securely. We do not require you to create an account, and we do not collect any special category data.
| Processing Activity | Data Processed | Lawful Basis (GDPR Art. 6) | Retention |
|---|---|---|---|
| Server access logs | IP address, page visited, timestamp, browser type | Legitimate interest (Art. 6(1)(f)) — security monitoring and debugging | 7 days, auto-deleted |
| Client error reports | Page URL, error message, browser type (no name or account data) | Legitimate interest (Art. 6(1)(f)) — platform stability | 7 days, auto-deleted |
| Email correspondence | Name and email address you provide, message content | Legitimate interest (Art. 6(1)(f)) — responding to your enquiry | Until the matter is resolved, then deleted within 12 months |
3. What We Do Not Do
- We do not use Google Analytics, Meta Pixel, or any third-party advertising or behavioural tracker.
- We do not set cookies of our own. No cookie consent banner is required because we place no non-essential cookies.
- We do not sell, rent, or otherwise share your personal data with any third party for commercial purposes.
- We do not use automated decision-making or profiling that produces legal or significant effects on you.
- We do not build user profiles or track you across other websites.
4. Cookies
We do not set our own cookies. Cloudflare, our infrastructure provider, may set a short-lived technical cookie (__cf_bm) on your browser to distinguish human visitors from automated bots. This cookie is strictly necessary for security and expires within 30 minutes. It does not track you for advertising purposes. See Cloudflare’s Privacy Policy for details.
5. Third-Party Data Processors
We share data only with service providers who process it strictly on our behalf and under contractual data processing agreements:
| Processor | Country | Purpose | Safeguard |
|---|---|---|---|
| Hetzner Online GmbH | Germany (EU) | VPS hosting, server logs | GDPR-compliant, DPA in place |
| Cloudflare, Inc. | USA | CDN, DNS, DDoS protection | Standard Contractual Clauses (SCCs) |
| GitHub, Inc. | USA | Source code, CI/CD (no visitor data) | SCCs |
| Google LLC (Gmail) | USA | Email forwarding for contact@revforgehq.co | SCCs |
Where transfers occur outside the European Economic Area (EEA), appropriate safeguards are in place — specifically Standard Contractual Clauses approved by the European Commission under Article 46(2)(c) GDPR.
6. Your Rights Under GDPR (EU / EEA Residents)
As an EU or EEA resident, you have the following rights under the General Data Protection Regulation (Regulation 2016/679):
- Right of access (Art. 15) — request a copy of personal data we hold about you.
- Right to rectification (Art. 16) — ask us to correct inaccurate data.
- Right to erasure (Art. 17) — ask us to delete your data (“right to be forgotten”), subject to legal retention obligations.
- Right to restriction (Art. 18) — ask us to pause processing in certain circumstances.
- Right to data portability (Art. 20) — receive your data in a machine-readable format.
- Right to object (Art. 21) — object to processing based on legitimate interest. We will stop unless we have compelling legitimate grounds.
To exercise any of these rights, email contact@revforgehq.co. We will respond within one calendar month. If we cannot fulfil your request, we will explain why.
If you are unsatisfied with our response, you have the right to lodge a complaint with the Dutch supervisory authority: Autoriteit Persoonsgegevens (AP), autoriteitpersoonsgegevens.nl. You may also contact the data protection authority in your own EU member state.
7. Your Rights Under CCPA (California Residents)
If you are a California resident under the California Consumer Privacy Act:
- Right to know — what personal information we collect and how it is used.
- Right to delete — request deletion of personal information we have collected.
- Right to opt out of sale — we do not sell personal information to any third party.
- Right to non-discrimination — we will not treat you differently for exercising any privacy right.
Submit requests to contact@revforgehq.co. We will respond within 45 days.
8. Data Retention
- Server and access logs: 7 days, automatically deleted by log rotation.
- Error reports: 7 days, automatically deleted.
- Email correspondence: retained until the matter is resolved, then deleted within 12 months of last contact.
9. Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Autoriteit Persoonsgegevens within 72 hours of becoming aware, as required by Article 33 GDPR. Where the breach is likely to result in a high risk, we will also notify affected individuals without undue delay under Article 34 GDPR.
10. Children
The Platform is intended for professional use and is not directed at individuals under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected such data, contact us at contact@revforgehq.co and we will delete it promptly.
11. Changes to This Policy
We may update this policy when the platform’s capabilities change (for example, when user accounts are introduced). The “last updated” date at the top of this page reflects the most recent substantive revision. We will notify users of material changes where reasonably practicable. Continued use of the Platform after a change constitutes acknowledgement of the updated policy.
12. Contact
All privacy enquiries: contact@revforgehq.co
This policy is written in good faith to comply with GDPR, CCPA, and applicable Dutch law. For commercially significant operations or user accounts, we recommend review by a qualified privacy lawyer.