Privacy notice for visitors.

Who we are

This site is Forge by Dominus Foundry, run by Dominus Foundry LLC, New Mexico (“Foundry”, “we”). This notice covers people who visit buildwithforge.app, use the chat or leave their details here.

If your company uses Forge, how we handle your company’s data inside the product is described on the current processing and privacy details page and in your agreement, not here.

What we collect

Every visit. Like any website, our hosting provider records each request in its server logs: your network (IP) address, your browser’s user agent, the page requested and the page you came from.

Fonts and software libraries. To show some pages, your browser fetches typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com), and the Forge page also fetches two standard software libraries from unpkg.com. Those services receive your network address, your browser’s user agent and the name of our site, as any web request does. This happens on every visit to those pages and is not analytics.

Analytics. On the public pages of this site, three things. In what this notice calls the ask-first region, they are off until you choose to allow them. The ask-first region is the European Union, the wider EEA, the United Kingdom and Switzerland; the places with their own country code that are part of the EU (Åland, French Guiana, Guadeloupe, Martinique, Réunion, Mayotte and Saint Martin); Gibraltar, Guernsey, Jersey and the Isle of Man; and any visit where we cannot tell which country you are in. Everywhere outside the ask-first region they are on unless you turn them off with Your privacy choices or your browser sends a Global Privacy Control signal.

Google Analytics counts page views on the home page and the main product, pricing, blog, learning and reference pages of buildwithforge.app. It receives each page’s address without its query string or anything after the #, the page’s title, the site you came from (its name only, never the page), and the device, browser and approximate location information Google Analytics works out from your browser and network address. It sets its own cookies (named _ga) in your browser to recognise a returning visit. Its advertising features (Google signals and ad personalisation) are turned off. It runs only at buildwithforge.app itself: it does not run at www.buildwithforge.app, and it does not run on the one-page and thesis pages or on this notice.

Vercel Web Analytics counts page views. It receives each page’s address without its query string or anything after the #, the page you came from as its site and path only, and the standard device and browser information it collects. It does not set cookies.

Our own page-view log records each page view on most of our pages: this site’s name, the page path without its query string or anything after the #, the page you came from as its site and path only, your browser’s user agent, and the approximate location our hosting provider works out from your network address (country, region, city and an approximate latitude and longitude). It is stored in Foundry’s database. The home page and the Core, Hyperion, Ariadne, Forge, field guide, one-page and thesis pages do not use this log.

The sign-in page and the Forge app. These are for customers and are not covered by the visitor analytics choice above. They use Vercel Web Analytics and our page-view log under the product’s own policy, and not Google Analytics. Entering or leaving the public pages starts a fresh page load so each surface uses its own policy.

The chat with Sabina. What you type is sent to Foundry’s own servers so Sabina can answer, with your network address so we can limit abuse.

The Talk to Sabina page. What you type in the console is sent to Foundry’s servers so Sabina can answer. If you leave your details there, we receive the name, phone number, email address and message you enter.

The Forge sandbox. The sandbox is closed to new visitors: its address on this site now takes you to hiresabina.ai, and starting a new sandbox is paused. Any records retained from earlier sandboxes may include answers to the optional “how did you hear about us” question.

Our press page. The link to an outside article passes through this site, so the click appears in our hosting provider’s server logs like any other request. Only if you chose Allow analytics do we also record it as a separate press-click measurement, with the page you came from, your browser’s user agent and your network address.

On your device. We store your light or dark theme and your analytics choice in your browser. Each public page you load also sets a cookie named __Host-consent_region, from the country our hosting provider works out from your network address, so the page knows whether to ask before analytics run. It records only that decision and the time it was made, and lasts a day at most. When analytics run, Google Analytics adds its own cookies, and turning analytics off clears them. If your browser sends a Global Privacy Control signal, a short-lived cookie records that, so the signal is honoured on every public page. Customers who sign in get a sign-in cookie.

Why we use it

To run the site and keep it secure, to show its pages as designed, to answer you in the chat, to follow up when you leave your details, and, unless you turn analytics off (or, in the ask-first region, only if you allow it), to understand which pages are useful and where our visitors are. We do not sell your personal information, and there is no advertising tag on this site: Google Analytics is used only to count visits, with its advertising features turned off.

Who receives it

Foundry’s own systems, which run the chat and handle your details.

Service providers that run this site for us: Vercel, which hosts this site and keeps its server logs, and Supabase, which hosts Foundry’s database, including the page-view log.

Google Fonts and unpkg.com, which your browser contacts directly for fonts and software libraries, as described above.

When analytics are on, under the choice described above: Vercel Web Analytics, and Google, which runs Google Analytics.

How long we keep it

Details you leave, earlier sandbox records and the page-view log are kept while they are useful to us. We have not set a fixed deletion date. You can ask us to delete them at any time, and we will.

Vercel Web Analytics data is kept under Vercel’s retention settings for this site, and Google Analytics data under the retention setting of our Google Analytics property. Server logs are kept under our hosting provider’s retention settings. Google Fonts and unpkg.com keep their request logs under their own policies.

Your analytics choice

In the ask-first region (described under What we collect), a bar asks whether to allow analytics when you first visit a public page. No analytics data is sent from the public pages until you choose, and choosing no analytics sends none.

Everywhere outside the ask-first region, analytics are on when you first visit and you are not asked. You can turn them off at any time with Your privacy choices, at the foot of every public page, or with the control below.

Your choice is kept in this browser only, in two places, a cookie (named __Host-forge-consent) and a copy in your browser’s local storage, and each is honoured for 180 days from when you chose. After that the regional default applies again: in the ask-first region you are asked again, and everywhere outside it analytics are on again unless you turn them off.

You can change your mind at any time with Your privacy choices or the control below. Turning analytics off after they were on stops them at once, clears the Google Analytics cookies and reloads the page, so nothing that was already running keeps sending.

Global Privacy Control

If your browser sends a Global Privacy Control signal, we treat it as a choice of no analytics on the public pages, wherever you are and even if you allowed analytics before: nothing analytic is loaded or sent from them, and you are not asked.

Your rights and how to reach us

Email mark@dominusfoundry.com to ask what we hold about you, to correct it, to have it deleted, or to stop hearing from us. Depending on where you live you may have further rights, and you may complain to your local data protection authority.