Privacy Policy

Effective Date: April 16, 2026

Overview

GitForge ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and how your data is protected when you use the GitForge application and its optional cloud sync service ("Forge Sync").

1. Account Information

When you create a GitForge account, we collect and store your email address. This is used solely for:

Account identification and authentication
Essential service communications (e.g. security notices)

We do not sell, share, or distribute your email address to third parties for marketing purposes.

2. Cloud Sync (Forge Sync)

Forge Sync is an optional feature that allows you to synchronize your workspace data across devices. If you choose to enable Forge Sync, the following applies:

🔐 Zero-Knowledge Encryption

All data synchronized through Forge Sync — including repositories, SSH keys, Git identities, environment files, and pet companion data — is encrypted on your device before it is uploaded to our servers.

Encryption is performed using AES-256-GCM, a military-grade encryption standard.
Your encryption key is randomly generated on your device and never leaves your device.
Our servers store only encrypted blobs — we cannot read, access, or decrypt your synced data.
If you lose your encryption key, we cannot recover your synced data.

3. What We Do Not Collect

GitForge does not collect:

Your source code, repository contents, or file contents (these remain on your device or in encrypted form on our servers)
Usage analytics or telemetry without your consent
Location data
Contact lists or personal files outside your workspace

4. Data Storage & Security

Account data and encrypted sync blobs are stored on secure infrastructure provided by Supabase, which uses industry-standard security practices including encryption at rest and in transit (TLS). Access to our infrastructure is restricted and monitored.

5. Third-Party Services

GitForge may integrate with third-party AI services (such as Google Gemini or Anthropic Claude) for optional features like AI-generated commit messages. When you use these features:

Data is sent directly from your device to the third-party service using your own API key.
We do not proxy, store, or log any data sent to these services.
Your use of these services is subject to their respective privacy policies.

6. Data Deletion

You may delete your account and all associated data at any time. Upon account deletion:

Your email address and account information will be permanently removed.
All encrypted sync data stored on our servers will be permanently deleted.
Local data on your devices is not affected and remains under your control.

7. Children's Privacy

GitForge is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us so we can promptly delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated effective date. We encourage you to review this policy periodically.

9. Contact

If you have questions or concerns about this Privacy Policy, you can reach us at admin@shadowtopstudios.com.