Privacy policy

Last updated: October 29, 2026

Short version: this website doesn't use tracking cookies, analytics or advertising pixels. When you buy, Lemon Squeezy handles your payment details. We only see what we need to deliver your order and help you.

Who we are

ForgeKits is a small independent business that sells digital kits for creators. In this policy, "we" means ForgeKits. You can reach us by Instagram DM (@forgekits.studio).

When you visit this website

No tracking cookies, no analytics, no ad pixels. We don't run Google Analytics, Meta Pixel or similar tools.
Hosting. The site is hosted by Vercel. Like any web host, Vercel processes basic technical data (IP address, browser type, the page requested) to deliver the site and protect it from abuse. See Vercel's privacy policy.
Fonts and images are served from this site. We don't load third-party font or script services.
Campaign tags. If you arrive from a link with a tag like utm_source=instagram, we pass that tag to checkout so we know which channel works. It identifies the channel, not you.

When you buy

Checkout is run by Lemon Squeezy, our Merchant of Record. Lemon Squeezy collects your name, email address, billing country and payment details to take payment, calculate tax, send your receipt and prevent fraud. We never see your full card number. Lemon Squeezy shares order details with us (your name, email, what you bought and the amount) so we can support you. Read Lemon Squeezy's privacy policy.

When you contact us

If you message us on Instagram, we see what you send and your profile, and use it only to answer you. Instagram is run by Meta under its own privacy policy.

What we do with your data

Deliver your order, answer questions and handle refunds
Keep basic records required for accounting and tax

We don't sell your data, and we don't add you to a mailing list unless you ask to join one.

How long we keep it

Order records are kept as long as tax and accounting law requires (usually up to 6–7 years). Support messages are deleted when they're no longer needed.

Your rights

Depending on where you live (including under the GDPR, UK GDPR and US state privacy laws), you can ask to see, correct or delete the personal data we hold about you, or object to how we use it. Send us a DM and we'll respond within 30 days. You can also complain to your local data protection authority.

Children

Our products are for adults running a business. We don't knowingly collect data from children under 16.

Changes

If we change this policy, we'll update the date at the top of this page.