Privacy Policy

Last updated: April 2026 · We believe in plain language, not legal walls of text.

1. Who We Are

MyDMForge is operated by František Chadraba, OSVČ (sole trader), Czech Republic. We are the data controller for personal data collected through this Service.

Contact: info@mydmforge.com

2. What Data We Collect

DataWhyHow long
Email addressAccount creation and loginUntil you delete your account
Credit balance & usageTo manage your daily credits and subscriptionUntil you delete your account
Generation logsTo show your usage history90 days
Payment dataProcessed by Stripe — we never see your card detailsPer Stripe's policy
IP address (hashed)Rate limiting for guest access (one free generation per IP per 30 days)30 days

3. What We Do NOT Collect

4. Analytics

We use Plausible Analytics — a privacy-first, cookieless analytics tool. It collects anonymous aggregate data (page views, referrers) with no personal identifiers. No cookie consent is required.

5. Third-Party Services

6. Your Rights (GDPR)

As an EU resident you have the right to:

To exercise any of these rights, email us at info@mydmforge.com and we will respond within 30 days.

7. Data Security

Your data is stored on Supabase with row-level security enabled. Passwords are hashed and never stored in plain text. Access tokens expire after 1 hour. Portrait images are stored on Cloudflare R2 with private access.

8. Children

MyDMForge is not intended for users under 16. We do not knowingly collect data from children.

9. Contact

Privacy questions? Contact us at info@mydmforge.com.