Privacy Policy
Last updated: October 9, 2026
MiniForge Tools is operated by J.S. Design. This policy explains how we handle information when you browse the website and use its design tools.
1. Your designs and files
The current design tools process artwork, text, fonts, SVGs, and 3D models locally in your browser. These inputs are not uploaded to our analytics system. Project files and model exports are saved to the destination you choose. We do not operate a cloud design-storage service in the current version.
2. Information we collect
If you accept optional analytics, we collect first-party usage information such as page visits, tool and feature choices, generation timing, export events, coarse browser/device categories, referring website hostname, and standardized error codes. Random browser and session identifiers help distinguish visits; they do not identify you by name, but can link activity within a browser.
Analytics excludes your designs, uploaded files, entered text, custom filenames, custom font names, full referring URLs, and raw error messages. Network and hosting infrastructure may process IP addresses and technical request information to deliver and protect the service. This technical information is distinct from our usage analytics.
If you email us, we receive your email address and the information you include so we can respond and handle your request. Please avoid sending unnecessary sensitive information.
3. Browser storage and cookies
We use browser storage to remember your theme and analytics choice. Optional analytics uses a random browser identifier with a maximum lifetime of 12 months and a session identifier that expires after 30 minutes of inactivity. Administrator login uses a session cookie; ordinary visitors do not need an administrator account.
No analytics identifiers are created and no analytics events are sent until you accept. Declining analytics does not prevent you from using the design tools.
4. How we use information
We use optional analytics, with your consent, to understand usage, improve tools, and diagnose reliability problems. We use necessary technical information to operate the service, remember preferences, prevent abuse, and meet applicable legal obligations. We do not sell usage analytics or use it for advertising profiles.
5. Your choices and rights
You can accept, decline, or withdraw analytics consent using Privacy settings at the bottom of the site. Withdrawal clears analytics identifiers and queued events in your browser and stops future collection. It does not automatically erase previously recorded information. You can also clear website storage through your browser settings.
Depending on applicable law, you may have rights to access, correct, delete, restrict, or object to processing, receive a copy of your information, and complain to a relevant privacy authority. Requests involving random identifiers may require enough information to locate the relevant records without collecting unnecessary personal data.
6. Retention, service providers, and security
Our analytics retention policy is up to 12 months. Information may be retained longer where required by law or to resolve an active dispute. Hosting and database providers may process information on our behalf to operate the site; locations and contractual safeguards depend on the deployment. We use reasonable safeguards, but no online service or storage system is completely secure.
7. Children, external links, and changes
The site is not directed at children under 13, and we do not knowingly collect their personal information. External websites have their own privacy policies. We may update this policy as features or processing practices change; the date above identifies the latest version.
8. GDPR — European privacy rights
Where the General Data Protection Regulation (GDPR) applies, J.S. Design acts as controller for the personal data described in this policy. Our legal bases are your consent for optional analytics; legitimate interests in operating, securing, and improving the service and responding to requests, subject to your rights; performance of a contract where processing is necessary to provide a service you request; and compliance with applicable legal obligations.
Subject to applicable conditions and exceptions, you may request access, correction, erasure, restriction, and a portable copy of your personal data. You may object to processing based on legitimate interests and withdraw consent at any time without affecting processing that was lawful before withdrawal. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.
You can contact us using the email below and complain to the supervisory authority in the EU/EEA country where you live, work, or believe an infringement occurred. We normally respond to GDPR requests within one month; where an allowed extension is necessary, we will explain it within that initial period. We may request proportionate information to verify a request.
If information is transferred outside the EU/EEA where GDPR applies, applicable transfer safeguards must be used, such as an adequacy decision or standard contractual clauses. Contact us for information about the providers, processing locations, and safeguards relevant to your data.
9. California rights — CCPA as amended by CPRA
Where the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), applies, California residents have the following rights, subject to legal exceptions:
- Know the categories and specific pieces of personal information collected, their sources, purposes, and categories of recipients; obtain a portable copy.
- Request deletion and correction of inaccurate personal information.
- Opt out of sale or sharing for cross-context behavioral advertising, and limit qualifying uses or disclosures of sensitive personal information.
- Exercise privacy rights without unlawful discrimination or retaliation.
The current service does not sell personal information or share it for cross-context behavioral advertising. Our visitor analytics does not request sensitive personal information, and we do not use it to infer sensitive characteristics. We do not knowingly sell or share personal information of people under 16.
The following categories describe the current service. They are collected directly from your browser or communications; technical information can also come from infrastructure providers. We use them for the purposes in this policy and disclose them to service providers as needed to operate the service, or where legally required.
| Category | Examples | Purpose / recipients |
|---|---|---|
| Identifiers | Random browser/session IDs; email address when you contact us; IP address processed by infrastructure | Consented analytics, replies, service delivery and security; hosting/database and communication providers |
| Internet activity | Visits, feature choices, generation/export events, coarse browser/device details and referrer hostname | Consented usage measurement and reliability; hosting/database providers |
| Correspondence | Information you choose to send in a support or privacy request | Responding to requests and resolving issues; communication providers |
Retention is described in section 6. To exercise rights, email the address below with your request. We may verify your identity and your connection to the records without collecting excessive information. Authorized agents may submit requests with evidence of authority; additional verification may be required where allowed. We normally respond to requests to know, delete, or correct within 45 calendar days, with notice of an allowed extension when necessary. Contact us if you believe a request was incorrectly declined.
10. CalOPPA and browser privacy signals
This policy is publicly accessible without creating an account, including from the website footer. The categories we collect and recipients are described above. You can request review or changes to information about you using the contact email below. Policy revisions are posted here with an updated date; material changes to processing will be brought to your attention as required by applicable law.
Under the California Online Privacy Protection Act (CalOPPA), we disclose that the current site does not respond automatically to the browser's traditional Do Not Track (DNT) signal. Optional analytics still requires a separate acceptance and can be withdrawn in Privacy settings.
Global Privacy Control (GPC) is distinct from DNT and communicates an opt-out of sale or sharing. The current service does not sell or share personal information for cross-context behavioral advertising, whether or not GPC is enabled. GPC does not currently switch off separately consented first-party analytics; use Privacy settings to do that. If our practices change, we will update this notice and apply legally required opt-out controls before introducing sale or sharing.
We do not enable third-party advertising trackers to collect your activity across unrelated websites. Infrastructure providers process information to deliver the service, as described above.
11. Contact and requests
For privacy questions or requests, contact J.S. Design at [email protected].