Privacy Policy

1. Introduction

PBR Forge ("we," "us," or "our"), operated by Jad Haidar (based in Dubai, UAE), is committed to protecting your privacy. We built PBR Forge with a "Privacy by Design" approach.

2. Data We Collect

We collect minimal data to maintain the app's security and improve its functionality.

A. Data You Provide

Currently, PBR Forge does not require a user account. We do not collect your name, email address, or phone number.

B. Automatically Collected Data (Analytics)

We use PostHog to understand how users interact with our features (e.g., "Which filter is used most?").

• Data Hosted In: European Union (Germany)
• Privacy Controls: We employ strict input masking. We do not record keystrokes in input fields, and we visually mask canvas elements in session replays to ensure your texture work remains private.
• Consent: This tracking only occurs if you explicitly click "Accept" on our privacy banner.

C. Technical Logs (Hosting)

Our application is hosted on Vercel. Like most web hosts, Vercel may collect standard server logs (such as IP addresses) for security purposes, DDoS protection, and performance monitoring. This data is not combined with analytics data to identify you personally.

3. How We Use Your Data

We use the limited data we collect for the following purposes:

• To Improve PBR Forge: Analyzing usage patterns to fix bugs and prioritize new features.
• Security: Protecting the app from abuse or cyberattacks.
• Legal Compliance: Complying with applicable laws and regulations.

4. Legal Basis for Processing (GDPR)

If you are visiting from the European Economic Area (EEA), our legal basis for collecting and using your personal information is:

• Consent: For analytics and session recording (PostHog). You may withdraw this consent at any time by clearing your browser cookies or using the "Opt-out" feature in the app.
• Legitimate Interest: For ensuring the security and performance of the application (Vercel logs).

5. Data Storage and International Transfers

• Analytics Data: Stored in the European Union (Germany) via PostHog.
• Hosting Data: Processed globally via Vercel's Content Delivery Network (CDN) to ensure low latency.
• Your Location: As the developer is based in Dubai (UAE), aggregated, non-personally identifiable reports may be accessed from this location. The UAE provides a level of data protection comparable to international standards.

6. Your Rights

Depending on your location, you may have the following rights:

• Right to Access: You can ask for copies of your personal data (if any exists).
• Right to Deletion: You can request that we delete your data.
• Right to Withdraw Consent: You can opt-out of analytics at any time.

To exercise these rights, please contact us at privacy@pbrforge.com.

7. Third-Party Services

We use the following trusted third-party service providers:

• PostHog: Product Analytics (EU Cloud)
• Vercel: Web Hosting and Infrastructure

8. Updates to This Policy

We may update this Privacy Policy from time to time, particularly if we introduce user accounts or paid subscriptions. We will notify you of any significant changes by posting the new policy on this page.