Privacy Policy

Account information includes your email address, display name, profile image, account identifiers, login sessions and a hashed password if you use password sign-in. If you use an enabled third-party sign-in provider, we receive the account information and authentication tokens needed for that sign-in.

Content and communications include designs, uploaded images, feedback, ratings, support messages and delivery email addresses that you submit. Order records include pack selection, amounts, currency, credit balances and transactions, order and checkout identifiers, payment status, refunds and delivery status. Payment providers collect payment details on their own checkout; BasesForge does not collect or store complete card numbers or security codes.

Technical and usage information may include IP address, browser and device information, requested pages, timestamps, errors and security logs. We use Google Analytics to measure site usage, which can use cookies and related identifiers.

We use information to provide editing and account features, authenticate users, process orders and verified payment callbacks, maintain credit balances, deliver layout links and account emails, answer support requests, investigate failures and fraud, and improve the site. Order-related emails are service communications.

Uploaded content may be stored when you submit it for an order, feedback or a publishing feature. Content you choose to publish, or content displayed through a public library or feedback feature, can be accessible to other visitors. Avoid uploading confidential information. We do not sell your personal information.

Authentication cookies support sign-in and account security. Browser storage also supports settings, editor identifiers and temporary checkout/design drafts. Google Analytics may use cookies to understand visits and interactions.

You can manage or delete cookies and local storage through your browser and use its tracking controls. Blocking essential storage may prevent sign-in or draft recovery. Google's privacy information and Analytics opt-out tool are linked below.

We use service providers for hosting (Vercel), database storage (Supabase), uploaded-file storage (Cloudflare R2), email delivery (Resend), usage analytics (Google Analytics), authentication where enabled, and payment processing (Waffo Pancake for new payments). Legacy Creem or PayPal records may remain for historical transactions and reconciliation. Information needed to fulfill a design order may also be included in internal operational notifications and made available to authorized personnel handling delivery and support.

Providers handle information under their own applicable terms and policies. We share information needed to operate these features, comply with legal obligations, investigate fraud or protect users and the service. We do not provide your game account password to any provider, and you should never submit it to us.

We retain information for as long as reasonably needed to operate your account, deliver services, resolve disputes, prevent abuse and meet applicable recordkeeping obligations. Some transaction records, security logs and backups may need to be retained after an account deletion request; information no longer needed is deleted or de-identified where practicable.

We use access controls, password hashing and other technical measures to protect information. No network or storage system is completely secure. Keep your credentials private and contact us if you suspect unauthorized access.

You can update available account settings, manage browser storage and contact us to request access, correction or deletion of your personal information or account. Depending on your location, you may also have rights to restrict or object to processing, request portability, withdraw consent where processing relies on consent, or complain to a relevant data protection authority.

Send requests from your account email where possible. We may request reasonable information to verify ownership before responding. Deletion may affect saved content and access to services; records needed for outstanding orders, disputes or legal obligations may be retained. We respond in accordance with applicable requirements.

Our hosting and other providers may process information in countries outside your country of residence. Applicable protections and provider safeguards apply to that processing.

BasesForge is not directed to children under 13. If you believe a child has provided personal information without appropriate authorization, contact us so we can investigate and remove it where appropriate.

We may update this policy when our features or providers change, publish the new version here and revise the date. We will communicate material changes through the service or email where appropriate. For privacy questions or requests, email [email protected].