Privacy Policy

Last updated: June 23, 2026

Short version. We collect the minimum we need to run Forge — your email, your broker API key (encrypted), your trading metadata. We don't sell your data. We don't run ad trackers. Your broker password and credit card never touch our database in plaintext.

1. Who we are

Forge HQ ("Forge", "we", "us") operates forgehq.trade and the Danny product. Questions about this policy: hello@forgehq.trade.

2. What we collect

Account data — your email address, hashed password (argon2id) or Google OIDC subject ID, account creation timestamp, subscription tier, Stripe customer ID, Stripe subscription ID.

Broker connection data — broker name, username, API key (encrypted at rest with a Fernet vault), account label, account size, account type, optional Discord webhook URL.

Trading metadata — signals received, orders placed (size, direction, entry/stop/target), fills, P&L, win/loss counts, daily aggregates. We do not collect or store your broker password.

Application data — for invite-only signups, anything you submit through the application form (name, email, optional phone, optional notes you write).

Usage data — server logs (IP, request path, status, timing) retained for 30 days for security and debugging. No third-party analytics, no ad pixels, no behavior trackers.

3. What we don't collect

We don't store your broker password — only the API key (encrypted).
We don't store full credit-card numbers — Stripe handles that.
We don't use Google Analytics, Facebook Pixel, or similar ad/behavior trackers.
We don't sell, rent, or trade your personal data to anyone.

4. How we use it

Run the product — authenticate you, place trades on accounts you connect, show your stats, send Discord notifications you opted into.
Bill you — process subscriptions through Stripe and manage upgrades/downgrades/cancellations.
Communicate — send transactional emails (approval codes, payment receipts, security alerts). We don't send marketing emails without your explicit opt-in.
Operate & secure — detect abuse, debug errors, comply with legal obligations.

5. Encryption & security

Broker API keys are encrypted at rest with a Fernet vault before being written to our database. Plaintext never leaves the request handler.
Passwords are hashed with argon2id (industry standard, memory-hard).
All traffic is HTTPS-only. Database connections are TLS-encrypted.
Webhook receivers verify HMAC-SHA256 signatures so a third party can't forge events into our pipeline.
JWTs are server-side revocable via the WebSession table.

6. Third parties we share with

We share the minimum data necessary with the following processors:

Stripe — for payment processing. They get your email and payment method; they have their own privacy policy.
Render — our hosting provider. Operates our servers and database; data does not leave their infrastructure for our use case.
TopstepX / ProjectX — the broker API your bot trades through. We pass your API key + order intents; they handle execution.
Cloudflare — DNS + email forwarding for forgehq.trade.
Discord — only when you configure a webhook URL. We send signal embeds to that URL on your behalf.
Tally — hosts the embedded application form on /apply.

We do not sell your data. We do not share data with advertisers, data brokers, or marketers.

7. Your rights

You can:

Access & export — email us to receive a copy of all data we hold about you.
Correct — update your email and broker connection in the dashboard at any time.
Delete — email us to delete your account. We remove your auth data, broker credentials, and personal info within 7 days. We may retain aggregate trade metadata (anonymized) for fraud prevention and platform analytics.
Cancel billing — cancel a monthly subscription via the dashboard at any time. Lifetime purchases are non-refundable beyond the window in our Refund Policy.

EU/UK residents: you have GDPR rights including objection and portability. Contact us to exercise them.

California residents: you have CCPA rights including right to know and right to delete. Contact us to exercise them.

8. Retention

Account + broker data: retained for the lifetime of your account; removed within 7 days of deletion request.
Trade metadata: retained 7 years (matches recommended record-keeping for futures trading).
Server logs: 30 days.
Stripe payment records: governed by Stripe's retention policy (typically 7 years for tax compliance).

9. Cookies

We use a single first-party cookie / localStorage entry to hold your authenticated JWT after sign-in. We do not use third-party cookies. We do not need a consent banner under the GDPR strictly-necessary exemption, but if you sign in from the EU and want us to add one, email us.

10. Children

Forge is not intended for anyone under 18. If we learn we have collected data from a minor we will delete it.

11. Changes

We may update this policy. Material changes will be announced by email and in the dashboard. Continued use after a change constitutes acceptance.

12. Contact

For any privacy question or data-rights request: hello@forgehq.trade.