Forgeflight

Privacy policy

What Forgeflight stores, why, who else handles it and how to delete it.

Effective October 30, 2026. Forgeflight is run by Basstion Forge LLC (“we”, “us”). Questions or requests: support@basstionforge.com.

Forgeflight collects only the email you log in with, plus any voice feedback you choose to record: no name, phone number, location, contacts or advertising ID. There are no ads, no third-party analytics and no tracking across other apps or websites. We don't sell or share your personal information, and we don't use it for targeted advertising.

What we store

A random device token made by the app (stored as a hash on our server).
A scrambled (hashed) copy of a recovery code the app makes for your profile. We can't read the code itself.
Your login: your email address and a scrambled (salted and hashed) copy of your password. We can't read the password itself, and other players never see your email. We use your email to log you in and to add you as a tester for the Apple and Google versions of the game; when this prototype is ready to launch, we'll email you a link to the live app. We never send marketing or share it with anyone else, except Apple and Google to invite you as a tester.
Your nickname, which other players see on boards, in Squads and in chats; you can change it in Settings.
Game progress: best main-play and Hardcore scores, best tier, lifetime gates, relics unlocked, chosen skin, settings, day streak and daily Embers claimed.
Run results for Squad leaderboards: your best score and tier per mode for each of the last 90 days, your all-time best per mode, and the power-up you used.
Embers (the free in-game currency) earned and spent, and boosts bought and used.
Squads you're in (code and join date), nudges between Squad members, and players you've hidden (the team sees who was hidden, to spot abuse).
Friends, friend requests and Squad invites; Battles (who, the mode, the Embers staked and the result); weekly Heats; and Embers gifts with their notes.
Messages you send to Squad mates and in Squad chats, your reactions, which conversations you've read or muted, and messages you report. Only the people in a conversation see it; the team reads a message only if someone reports it (with the few lines around it), and the admin "View as" tool can't open chats.
Invites: your invite code, and if you joined from a friend's link, who invited you and whether their invite reward was paid.
Name reports: if you report a name, which player you reported, the name, the reason and when.
Purchases: which item, its status and end date, and the ID of your customer record at Stripe, our payment processor (website purchases). For Forge Club on the website, Stripe also keeps a record that you agreed to automatic renewal and when. App store purchases are handled by Apple or Google.
Dates your profile was created and last used.
Emails you send us, if you write to support.
Notifications, only if you turn them on: your phone's push address for Forgeflight (made by Apple, Google, Mozilla or Microsoft for this app, not your phone number) and which kinds of notification you chose in Settings › Notifications. We use it only to send those notifications. Turning them off for a phone deletes its push address.
Voice feedback, only if you record it: when you tap “Give me your feedback” and the microphone, the app records your voice (up to 5 minutes) and sends the recording when you press Send. We keep the audio and a written transcript made from it automatically, linked to your nickname and login, so the team can listen and decide what to build. The microphone is used only while that button is recording; nothing is recorded at any other time.

IP addresses

Our server uses your IP address briefly to stop repeated password guesses, and, when you open a friend's invite or Squad link, keeps a scrambled (hashed) copy for up to 2 hours so the invite still counts, and the Squad can be joined, if you then play from your home screen. Both are deleted within a day. Cloudflare, our host, processes IP addresses to deliver and protect the service.

Your age range

In the App Store and Google Play versions, your app store tells the game your age range (Apple's Declared Age Range, Google Play's Age Signals) and whether a parent approved. The game uses it only on your phone to apply the limits below and to follow the law. It isn't sent to our servers or used for anything else.

How we use it

Only to run the game: save and restore your progress, show Squad leaderboards, check scores are real, deliver what you bought, keep names safe, answer your messages, and meet our legal duties. We never use it for advertising or profiling.

Who else handles it

We share data only with these service providers, only what each needs to do its job for us:

Cloudflare (United States): hosts the game and stores the data above, and turns voice feedback into text with its Workers AI service (the recording isn't used to train AI models).
Stripe: takes website payments. It collects your card details and email itself; we never see your card.
Apple and Google: take App Store and Google Play payments and provide the age range.
Apple, Google, Mozilla or Microsoft (your phone or browser's push service), only if you turn notifications on: carry each notification to your phone. Its text is encrypted so only your phone can read it.

Each is bound by its own terms and privacy commitments to protect this data at least as well as this policy does. We may also disclose data if the law requires it, or to a company that takes over the game, which must keep this policy's promises.

How long

Profiles unused for 18 months are deleted automatically, with everything listed above.
Daily run results are deleted after 90 days; your all-time bests stay until you delete your data.
Name reports are deleted after 12 months.
Voice feedback recordings and their transcripts are deleted after 12 months, or sooner once we've reviewed them.
Messages, their reactions and reports are deleted after 90 days.
Support emails are deleted 2 years after the conversation ends.
Payment and renewal-consent records are kept by Stripe, Apple or Google for as long as tax and consumer law require (usually up to 7 years).

Your choices and rights

You can change your nickname, leave Squads and hide players at any time. To stop us collecting anything, delete your data (below) and uninstall the app. You can also ask us for a copy of your data, to correct it, or to delete it by emailing support@basstionforge.com; depending on where you live (for example California, Texas, Virginia or Colorado), the law gives you these rights. We answer within 30 days, won't treat you differently for asking, and you may appeal a decision by replying to our answer.

Delete everything

Settings → Delete my data removes your profile, run results, Squad memberships, nudges, messages, hidden players, reports, voice feedback, notification settings and purchase entitlements from our servers within a minute, and clears this phone. No longer have the app? Use the deletion page with your email and password, or email us. We keep only a scrambled (hashed) copy of your email, so the one-time starting Embers aren't paid again if the same email signs up later. Stripe, Apple and Google keep their own payment records.

Children

Forgeflight is meant for players aged 13 and up and is not directed at children under 13. If your app store tells us a player is under 13, the game stays playable but Squads, nicknames and purchases are switched off, so we keep only the device token and game progress, used only to run the game and never for advertising. Players under 18 need a parent's approval in the store to download the app or buy anything. If we learn that a child under 13 has given us other personal information, we delete it. Parents can ask what we hold about their child, or ask us to delete it, at support@basstionforge.com.

Security

Data travels over HTTPS. Tokens and recovery codes are stored only as hashes. Access to our servers is limited to the owner's accounts, and we keep a written security plan and retention schedule that we review every year. If a breach affects your data, we'll tell you in the app and notify regulators where the law requires.

Where we operate

Forgeflight is run from the United States and your data is stored there.

Changes

If this policy changes, we'll update the date above and show the change in the app before it applies. If a change affects how we use data from players under 18, we'll also tell the app stores so they can ask for a parent's approval again where the law requires.