Privacy policy

Last updated 17 October 2026

Forge Deck is a desktop application. This service keeps your account, what you choose to sync between your own installations, and a security record that protects your account. Nothing else.

What is stored

To run your account:

What you sync: settings, Claude Code subagents, chat snippets, browser profile names, agents with their memory and schedules, and per project notes, configuration, Claude Code memory files, recordings with their transcripts and audio, and chats. A chat travels as conversation text only: what you wrote and what the model answered, never the files it read, the images you attached or the commands it ran.

Your usage, so every installation shows the same totals: for each hour, the model and provider used, the project it went to, named by its folder's path or its git remote, the agent, and the token and message counts.

Every one of these is encrypted before it is written, with a key held only by this service. No person reads them: the service only handles them automatically, to sync them between your installations, to add up your usage and for the service totals described below.

Service totals

To improve Forge Deck and plan its capacity, the service adds up how it is used across all accounts together: how many accounts, devices and chats there are, how many messages and tokens go to which models and providers, which features and settings people choose, and how much is stored. These totals never name an account, a project or an agent, and never include anything anyone wrote, nor any key or password. Only the people who run the service see them.

Crash and error reports

When Forge Deck stops unexpectedly (a part of the app crashes, or it closed without quitting normally) or runs into an error it did not handle, the app sends a short report: the app, Electron and operating system versions, which part stopped or failed and how, the error text if there was one, how long the app had been running, and a few lines of the app's own technical log, never what you type, page addresses or titles, with folder paths, user names, email addresses and keys removed. It carries a random number for this installation and, if you are signed in, your account. Crash files that hold memory contents never leave your computer.

Reports are used only to find and fix the cause of crashes and errors, are visible only to the service's operators, and are deleted after 90 days. You can turn them off in Settings › General › Send crash and error reports. Legal basis: legitimate interest (GDPR Art. 6(1)(f)) in keeping the app working.

Usage counts from apps without an account

When you use Forge Deck without signing in, the app sends, after each chat turn or agent run and when it starts, how many chat turns, new chats and agent runs it had on each day (UTC). It carries the random number for this installation that crash and error reports use, never an account, and never anything you wrote, a project, a file or a name. Signed in, it sends none of this: your synced chats already count toward the service totals.

The counts are used only to see how much Forge Deck is used and to plan its capacity, are visible only to the service's operators, and are deleted 13 months after the day they count. You can turn them off in Settings › General › Send usage statistics. Legal basis: legitimate interest (GDPR Art. 6(1)(f)) in knowing how much the app is used.

New version notices

While Forge Deck is open, it keeps a connection to the service so it hears as soon as a new version comes out, instead of asking again and again. Signed in, that is your account's connection. Without an account, the app opens it with the random number for this installation that crash and error reports use, never an account. The app sends nothing over it, and nothing about it is stored except when that number was last used, so that numbers no installation uses any more are deleted. Legal basis: legitimate interest (GDPR Art. 6(1)(f)) in keeping the app up to date.

What never leaves your machine

Security record

To keep accounts safe, the service notes security events on each account: signing in and out, failed sign in attempts, password and Google sign in changes, a device being added or removed, and the account being created, cleared or deleted. Each note holds the kind of event, when it happened, and the IP address and app or browser it came from.

It is used only to protect accounts and the service: to notice and stop someone trying to get into an account, to look into a problem you report, and to keep the service working. It is never used for advertising and never sold. What you do in Forge Deck is not part of it: not your chats, notes, projects, recordings or usage.

Only the people who run the service can see it, and every change they make to an account is noted in it too. It is kept because protecting accounts is a legitimate interest of the service and of its users (Article 6(1)(f) of the GDPR).

Google sign in

Signing in with Google shares only your Google account id, email address and name with this service. They are used to create and identify your account, and the security record notes when Google sign in is added to or removed from it. Like the rest of your account, they are never sold or used for advertising.

Who else handles it

Your data is never sold, and never given to anyone to use for their own purposes. A few providers handle it only on this service's behalf, to run it: the server host where everything is stored, Cloudflare, which carries the connection to the service, Resend, which delivers the service's emails (your email address and what the email says, such as the Google address you just linked), and Google, when you choose to sign in with it.

Retention and deletion

Your account and everything you sync are kept for as long as your account exists. Signing out on a device revokes that device's session. Deleting your account removes your account and everything you synced, at once.

Crash and error reports are deleted 90 days after they arrive.

Usage counts from apps without an account are deleted 13 months after the day they count.

The security record is kept with no fixed end, because misuse can come to light long after it happened. It keeps only what that needs: after 12 months its IP addresses are shortened and the app or browser details removed, and when an account is deleted its entries keep only the kind and time of each event, without your email address, IP address, device or any other detail.

One exception: a change the people running the service made to someone else's account keeps the email address of whoever made it, even after their own account is deleted, so every change made to an account can always be traced to whoever made it.

Your rights

You can ask for a copy of your data, have it corrected or deleted, restrict or object to how it is used, including the security record, and take it elsewhere. You can also complain to a data protection authority, in Portugal the Comissão Nacional de Proteção de Dados.

Contact

Much of this you can do yourself from the Account page: see your details, sign out your other devices, clear what you synced or delete the account. For anything else, such as a copy of your security record, use the privacy request form. It works without an account too, so it also serves someone whose account is already deleted. A request counts once you confirm it from the email it sends, so nobody can ask for someone else's data, and it is answered by email within one month. Requests are kept as a record of how they were answered.