Privacy Policy
Last updated: June 6, 2025 · Effective date: June 6, 2025
MetaForge ("we", "our", or "us") operates the website metaforge.fit (the "Service"). This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under applicable law — including the EU General Data Protection Regulation (GDPR), the UK GDPR, and other applicable privacy regulations.
By using MetaForge you agree to this policy. If you do not agree, please discontinue use of the Service.
1. Data Controller
MetaForge is the data controller for personal data collected through this website. For privacy-related inquiries, contact us at waseemkhan.datori98@gmail.com.
2. Personal Data We Collect
Account Information. When you register, we collect your name and email address. If you use Google Sign-In, we receive your Google profile name and email via OAuth 2.0.
Usage & Log Data. We automatically collect information about how you interact with the Service — pages visited, features used, browser type, IP address, and timestamps — via cookies and similar technologies.
Images You Upload. Images are processed entirely in your browser and sent directly from your device to whichever third-party AI API you configure (Google Gemini, Groq, Mistral, OpenRouter, or Anthropic Claude). MetaForge servers never receive, store, or process your images.
API Keys. API keys you enter are stored only in your browser's localStorage and are never transmitted to MetaForge servers.
Contact Messages. If you contact us via the contact form or email, we retain your name, email, and message to respond to your inquiry.
3. Legal Basis for Processing (GDPR)
We process your personal data on the following legal bases under Article 6 GDPR:
- Contractual necessity (Art. 6(1)(b)): Account registration and service delivery.
- Legitimate interests (Art. 6(1)(f)): Security, fraud prevention, and service improvement.
- Consent (Art. 6(1)(a)): Personalized advertising via Google AdSense cookies. You may withdraw consent at any time via the cookie banner or your browser settings.
- Legal obligation (Art. 6(1)(c)): Compliance with applicable law.
4. Cookies and Tracking Technologies
We use cookies and similar technologies for the following purposes:
- Strictly Necessary: Authentication and session management. These cannot be disabled without breaking the Service.
- Functional: Remembering your preferences (theme, settings). Consent-optional.
- Analytics: Aggregate traffic and feature-usage analysis to improve the Service.
- Advertising (Google AdSense): We use Google AdSense to display ads that fund our free service. Google and its partners may use cookies to serve ads based on your browsing history on this and other sites. This requires your consent in the EU/UK/EEA.
You can opt out of personalized ads at google.com/settings/ads or via the Digital Advertising Alliance opt-out. You may also manage or delete cookies through your browser settings. Disabling strictly necessary cookies may impair Service functionality.
Google AdSense Compliance: Our use of Google AdSense complies with Google's Publisher Policies. We display a cookie consent banner to EU/EEA/UK users before loading personalized ads.
5. How We Use Your Information
- Provide, maintain, and improve the MetaForge Service
- Authenticate users and manage accounts
- Respond to support requests and contact messages
- Detect and prevent fraud and abuse
- Comply with legal obligations
- Display advertisements to support our free service (with consent where required)
6. Third-Party Services & Data Sharing
We share data with the following third parties only as described:
We do not sell your personal data to any third party.
7. Data Retention
Account information is retained as long as your account is active. You may request deletion at any time. Contact form messages are retained for up to 12 months. Usage/analytics data is retained for up to 24 months and then anonymized or deleted.
8. Your Rights (GDPR & Other Laws)
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right of Access (Art. 15 GDPR): Request a copy of the personal data we hold about you.
- Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data.
- Right to Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten").
- Right to Restriction of Processing (Art. 18): Request we limit how we use your data.
- Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
- Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent (Art. 7(3)): Where processing is based on consent, you may withdraw at any time without affecting prior processing.
- Right to Lodge a Complaint: You have the right to complain to your local data protection authority (e.g., the ICO in the UK, or your national DPA in the EU).
To exercise any of these rights, contact us at waseemkhan.datori98@gmail.com. We will respond within 30 days.
9. Children's Privacy
MetaForge is not directed to children under the age of 13 (or 16 in the EU where applicable). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately and we will delete it.
10. International Data Transfers
Your data may be transferred to and processed in countries outside your jurisdiction, including the United States. Where required (e.g., for EU residents), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs), to protect your data in compliance with GDPR Chapter V.
11. Security
We implement reasonable technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. No method of transmission over the internet or electronic storage is 100% secure, however, and we cannot guarantee absolute security.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also notify you by email. We encourage you to review this policy periodically.
13. Contact & Data Protection Inquiries