Privacy Policy
Last updated: July 14, 2026
This Privacy Policy explains how AppSec Forge (“AppSec Forge”, “we”, “our”, or “us”) collects, uses, stores, and protects information when you use the website, purchase digital products, or interact with the Service.
By using the Service, you acknowledge this Privacy Policy.
Scope
This Privacy Policy applies to:
- the AppSec Forge website;
- purchases of AppSec Forge products;
- GitHub repository access where applicable;
- communications related to the Service.
This Policy does not apply to third-party services that operate under their own privacy policies.
Information We Collect
Depending on how you interact with the Service, we may collect:
Information You Provide
This may include:
- your email address;
- your name, if voluntarily provided;
- information submitted through contact forms;
- support requests;
- information necessary to provide access to purchased products.
Automatically Collected Information
Like most websites, we may automatically collect limited technical information such as:
- IP address;
- browser type;
- operating system;
- device information;
- pages visited;
- referral sources;
- approximate location derived from IP;
- website usage statistics.
This information is primarily used for security, diagnostics, analytics, and improving the Service.
Payment Information
Payments are processed by third-party payment providers.
AppSec Forge does not store your payment card number or other sensitive payment credentials.
Payment providers process payment information according to their own privacy policies.
How We Use Information
Information may be used to:
- provide access to purchased products;
- verify purchases;
- communicate about your order;
- provide customer support;
- improve the website and learning experience;
- detect fraud and abuse;
- maintain the security of the Service;
- comply with legal obligations.
We do not sell your personal information.
Repository Access
For products delivered through private GitHub repositories, we may process information necessary to grant, manage, or revoke repository access.
This may include your GitHub username or other information required for repository access management.
GitHub and GitLab
The Public Edition of AppSec Forge is hosted on GitHub and mirrored to GitLab.
The Pro Edition is distributed exclusively through a private GitHub repository.
Your interactions with GitHub or GitLab, including authentication, repository access, account management, and any data processed by those platforms, are governed by their respective privacy policies and terms of service.
Email Communications
If you provide your email address, we may use it to:
- deliver purchased products;
- provide repository access instructions;
- respond to support requests;
- notify you about important updates related to your purchase;
- communicate changes affecting your access to the Service.
We do not send unsolicited marketing emails. Where optional communications are offered, you may unsubscribe at any time.
Cookies
The website may use cookies or similar technologies for:
- essential website functionality;
- analytics;
- remembering preferences;
- improving user experience.
You may disable cookies through your browser settings, although some features may not function correctly.
Analytics
We may use privacy-conscious analytics tools to better understand how the website is used.
Analytics data is generally aggregated and used to improve content, usability, and performance.
Third-Party Services
The Service may rely on third-party providers, including services for:
- payment processing;
- website hosting;
- analytics;
- email delivery;
- GitHub repository hosting and access management;
- GitLab repository hosting (Public Edition only).
These providers process information according to their own privacy policies.
Data Retention
We retain personal information only for as long as reasonably necessary to:
- provide the Service;
- comply with legal obligations;
- resolve disputes;
- enforce our agreements.
When information is no longer required, it is deleted or anonymized where reasonably practicable.
Data Security
Reasonable technical and organizational measures are used to protect personal information against unauthorized access, disclosure, alteration, or destruction.
However, no method of electronic storage or internet transmission can be guaranteed to be completely secure.
International Transfers
Depending on the infrastructure used by AppSec Forge and its service providers, information may be processed or stored in countries other than your own.
Where applicable, reasonable safeguards are used for such transfers.
Your Rights
Depending on your jurisdiction, you may have rights including:
- access to your personal information;
- correction of inaccurate information;
- deletion of personal information;
- restriction of processing;
- objection to certain processing activities;
- data portability where applicable.
To exercise these rights, please contact us.
Children’s Privacy
The Service is intended for software professionals and adult learners.
It is not directed toward children under the age required by applicable law.
We do not knowingly collect personal information from children.
Changes to This Privacy Policy
This Privacy Policy may be updated from time to time.
The latest version published on this website supersedes all previous versions.
Continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.
Contact
If you have questions about this Privacy Policy or the processing of your personal information, please contact:
Email: your-email@gmail.com