Privacy Policy

Information we collect

Depending on how you use the site, we may collect:

• your name, email address, city, and optional social handle;
• your keyboard layout, budget, project notes, selected build references, and quote history;
• artwork, photos, logos, desk images, reference files, and generated 3D preview images;
• order, invoice, payment status, delivery, and support records when a quote proceeds; and
• basic submission and security data, such as time, page source, browser information, and a protected or hashed network identifier used to limit abuse.

Photos may contain personal information if a person can be identified. Please avoid sending sensitive information and only send images of other people when you have their permission.

How we collect and use it

We collect information directly from you through quote forms, the 3D designer, email or message follow-up, approved quotes, and order records. We use it to:

• review your idea, artwork quality, compatibility, parts, budget, and availability;
• prepare recommendations, visual proofs, quotes, invoices, production files, and order updates;
• source, assemble, tune, deliver, and support the goods or services you approve;
• protect the quote service from spam, fraud, misuse, and security incidents; and
• keep reasonable business, tax, dispute, and consumer support records.

If you do not provide the required contact and project details, we may be unable to review or reply to your request. Artwork is optional at the first quote stage unless it is necessary to assess a specific design.

Website analytics

The site can use privacy-focused website analytics to understand page visits, device category, performance, and broad quote-funnel steps. The current analytics integration is inactive unless a provider token or first-party event endpoint is configured.

When enabled, ForgeKeys conversion events are limited to items such as opening the designer, starting the quote form, selecting an artwork file, and whether a submission succeeds or fails. That event payload does not include your name, email address, project brief, uploaded artwork, file names, or full page query string. A configured page analytics provider may process standard request and page data under its own service terms. The ForgeKeys integration does not create an advertising profile or store an analytics identifier in cookies or local storage.

Cloudflare Web Analytics may be enabled for aggregate page and performance reporting. A separate ForgeKeys-controlled event endpoint may be enabled for the limited conversion events described above. This policy will be updated if the analytics setup or data use materially changes.

Service providers and disclosure

We may use trusted providers to operate the website and quote workflow, including GitHub Pages for website hosting, Supabase for database, authentication, file storage and server functions, Cloudflare Turnstile for abuse prevention, and an email delivery provider when quote notifications are enabled.

If an order proceeds, relevant information may also be shared with payment, shipping, manufacturing, printing, parts, or professional service providers where reasonably necessary for the approved order. We provide only the information needed for that work.

Some providers may process or store information outside Australia. Their locations and subprocessors can change. We assess the services we enable and do not intentionally make original customer artwork public.

We may also disclose information where required or authorised by law, or where reasonably necessary to investigate fraud, security, or a serious threat.

Storage, retention, and security

Quote records and original files are stored in restricted systems. Administration access requires an authorised account, and temporary signed links may be used to review private files. Public website visitors are not given a file browser or direct access to customer quote folders.

We keep information only for as long as reasonably needed for the quote, order, support, security, and legal record purposes described above. Unsuccessful enquiries and unnecessary artwork may be removed when no longer needed. Some transaction or dispute records may need to be retained for longer.

No online service can guarantee absolute security. We use access controls, file limits, validation, private storage, and abuse protection appropriate to the current service. Please do not upload passwords, identity documents, bank details, or unrelated sensitive information.

Access, correction, and deletion requests

You may ask what personal information we hold about you, request a correction, or ask us to delete information that is no longer required. Include your quote reference and the email used for the enquiry so we can verify the request. We may need to retain information where required by law or reasonably needed for an active order, payment record, dispute, security investigation, or legal claim.

You can also raise a privacy concern through the quote and contact form. We will review the request and respond through the verified contact details connected with the quote.

Contact and policy changes

Use the ForgeKeys AU contact form for privacy questions, access or correction requests, deletion requests, or complaints. Describe the privacy request in the project brief and include the relevant quote reference.

We may update this policy when the service, providers, or legal requirements change. The current version and update date will remain available on this page.