Privacy policy

Forge (“Forge”, “we”, “us”) operates this website and sells downloadable website templates from Accra, Ghana. We are the data controller for the personal information described here. Contact us at cradlepremiernetwork@gmail.com.

• Account details: your email address and a password (stored only in scrambled, hashed form, we cannot read it). If you use Google sign-in, we receive your email address and basic profile name from Google.
• Purchase records: which template you bought, the amount, currency, date and payment reference. We never see or store your card or mobile-money details, payment is handled entirely by Paystack.
• Download records: which template you downloaded and when, plus a one-way scrambled (hashed) version of your IP address used to prevent abuse. We cannot turn it back into your IP address.
• Messages you send us: anything you include when you email support.
• Technical data: your IP address and browser details appear briefly in security and server logs and are used for rate limiting (blocking floods of requests).

Browsing the site without an account requires no personal information from you.

• To create and secure your account and deliver what you bought (legal basis: performing our contract with you).
• To process payments, keep financial records and meet tax and accounting duties (legal basis: legal obligation).
• To prevent fraud, abuse and unauthorised downloads, and to keep the service running (legal basis: our legitimate interests).
• To reply to your questions (legal basis: your request).

We do not sell your personal information. We do not use it for advertising, profiling, or automated decisions about you. We only send emails that are needed for your account (confirmation, password reset, purchase receipts). We send no marketing email unless you separately ask for it.

We do not use advertising, analytics or tracking cookies, and we do not load third-party trackers, so there is no cookie banner to accept. The only things stored on your device are:

• A sign-in session cookie: set only when you log in, so we know it's you. It is strictly necessary to provide the service and is removed when you log out or it expires.
• A theme preference (light or dark) saved in your browser's local storage. It never leaves your device.

When you pay, you are taken to Paystack's secure checkout, and when you choose Google sign-in you are taken to Google. Those companies operate on their own websites and may set their own cookies under their own policies. You can block or delete cookies in your browser settings, but you will not be able to stay logged in.

Only service providers that we need in order to run the site, each bound to use data only for that purpose:

• Supabase: database, authentication and file storage.
• Paystack: payment processing. Paystack is an independent controller of your payment details; see its privacy policy.
• Google: only if you choose “Continue with Google”.
• Upstash: temporary rate-limit counters.
• Our hosting provider: serves the website.

We may also disclose information where the law requires it, to respond to valid legal requests, or to protect our rights and users. These providers may process data outside Ghana. Where they do, we rely on their contractual and security safeguards.

• Account and library data: for as long as your account exists.
• Purchase and payment records: up to 7 years, for tax and accounting.
• Download logs: up to 12 months.
• Support emails: up to 2 years after the last message.

When you delete your account we remove or anonymise your personal data, except records we must legally keep.

Under Ghana's Data Protection Act, 2012 (Act 843), and similar laws that may apply to you, you may ask us to: tell you what we hold about you, correct it, delete it, limit or object to how we use it, or give you a copy. To use any of these rights, email cradlepremiernetwork@gmail.com from the address on your account. We will respond within 30 days. If you are unhappy with our response, you may complain to the Data Protection Commission of Ghana.

We use encrypted connections (HTTPS), access controls, hashed passwords, and short-lived download links. No system is perfectly secure. If a breach affects your personal information, we will notify you and the regulator as the law requires.

Forge is for people aged 18 and over (or the age of majority where you live). We do not knowingly collect information from children. If you believe a child has given us information, tell us and we will delete it.

We may update this policy. The date at the top shows when it last changed. See also our Terms of service and Refund policy.