1. Introduction
20forge (available at 20forge.gg) respects your privacy and is committed to protecting your personal data in compliance with the Brazilian General Data Protection Law (LGPD — Law No. 13.709/2018) and applicable international privacy standards.
This Privacy Policy explains what data we collect, how we use it, who we share it with, and what your rights are.
20forge is operated by Danilo, an independent indie developer. For any privacy-related matter, please contact: danilo@20forge.gg.
2. Data We Collect
2.1 Data you provide
- Email address: collected when you sign up for our waitlist or newsletter (lead capture). This is the only personal data we actively collect at this stage.
2.2 Data collected automatically
- Usage and behavior data: we use PostHog (an analytics tool) to collect information about how visitors interact with the site — such as pages visited, clicks, navigation time, and in-tool events. This data is anonymized or pseudonymized and used exclusively to improve the platform.
- Technical data: IP address (which may be anonymized), browser type, operating system, and referring page, collected automatically as part of normal web application operation.
3. How We Use Your Data
| Purpose | Legal Basis (LGPD) |
|---|---|
| Sending news, updates, and announcements about 20forge | Consent (art. 7, I) |
| Usage analysis and platform improvement (PostHog) | Legitimate interest (art. 7, IX) |
| Technical stability and security monitoring | Legitimate interest (art. 7, IX) |
We do not use your data for third-party advertising, data selling, or commercial profiling.
4. Data Sharing
20forge does not sell your personal data. We may share it only with:
- PostHog: an analytics tool used for user behavior analysis on the site. Data is processed according to PostHog's Privacy Policy;
- Competent authorities: when required by law or court order.
Planned future services (not yet active)
We intend to integrate the following services in the future. When activated, this policy will be updated accordingly:
- Google (login): for authentication in The Forge;
- Stripe (payments): for subscription or paid plan processing;
- Hosting and infrastructure providers: necessary for platform operation.
5. Cookies and Similar Technologies
20forge may use cookies and similar technologies to:
- Store navigation preferences;
- Collect usage data via PostHog.
You can configure your browser to refuse cookies, but this may affect certain features of the site.
6. Data Storage and Security
Your data is stored on secure servers. We adopt reasonable technical and organizational measures to protect your information against unauthorized access, loss, or destruction.
As an indie project in active development, we continuously improve our security practices. In the event of an incident that may impact your data, you will be notified as required by applicable law.
7. Data Retention
- Email (leads): retained until you request removal or unsubscribe;
- Analytics data (PostHog): according to PostHog's retention policy;
- Technical data (logs): for the time necessary to ensure security and stability.
8. Your Rights as a Data Subject (LGPD)
You have the right to:
- Confirm whether we process your data;
- Access the data we hold about you;
- Correct incomplete, inaccurate, or outdated data;
- Request deletion of your personal data;
- Withdraw consent at any time;
- Request portability of your data;
- Object to processing based on legitimate interest.
To exercise any of these rights, contact us at danilo@20forge.gg. We will respond within 15 business days.
9. Minors
20forge does not intentionally collect data from children under the age of 13. If we identify that a minor has provided data without parental or guardian consent, we will remove that information promptly.
10. Changes to This Policy
This Policy may be updated periodically to reflect changes in the platform or applicable law. The date of the last update is always shown at the top of this document. Material changes will be communicated by email to registered users.
11. Governing Law and Jurisdiction
This Policy is governed by Brazilian Law No. 13.709/2018 (LGPD) and other applicable Brazilian regulations. The courts of Campinas – SP are elected as the exclusive venue for any disputes.
12. Contact and Data Protection Officer (DPO)
For now, the sole data controller and point of contact is:
Privacy-related questions, requests, or complaints will be answered within 15 business days.