Privacy Policy

This policy covers photonforge.io and the PhotonForge product hosted there, operated by Horizon Digital Engineering LLC("we", "us"), a Florida limited liability company. PhotonForge is one of several brands operated by HDE — Cyphera, Lunarosa, and the HDE corporate site each have their own privacy policies.

The categories of personal information we collect depend on how you use PhotonForge — visitor analytics on the marketing pages (only with consent), account + billing data inside the product, and standard server logs everywhere. Each category is described below.

From the marketing site (logged-out visitors)

Cookies and similar. When you accept the cookie banner, we set a small cookie recording your consent state. We use no advertising cookies, no cross-site tracking pixels, and no third-party fingerprinting.

Analytics. If you accept analytics, we use PostHog (proxied through t.photonforge.io) and Vercel Analytics to record page views, the page you came from, your approximate location (city-level, derived from IP), your browser type, and the device class. We do not enable session replay, heatmaps, or autocapture.

Server logs. Our hosting provider (Vercel) keeps standard web-server logs containing your IP address, requested URLs, and user agent. These are used for operational debugging and security (rate-limiting, abuse detection).

From the product (logged-in users)

Account data. Email address, organization name, and any profile fields you provide during signup or in account settings.

Product usage data. The pages and features you use within PhotonForge, configuration of your status pages, incidents and components you create, and similar product-operation metadata.

Billing data. If you become a paying customer, our payment processor (Stripe) handles your card details — we never see them. We retain billing metadata (amounts, dates, invoice IDs) for tax compliance.

Identified analytics. If you accept analytics, PostHog associates your user ID with your interactions so we can understand product usage by user or org. This is separate from the anonymous marketing-site analytics.

• Cookies / consent state— so we don't show you the banner on every page load.
• Analytics— to understand which content and features are useful and which aren't; to improve the product.
• Server logs — to keep the site up, secure, and rate-limited against abuse.
• Account + product data — to provide the service you signed up for.
• Billing data — to charge you for paid features and meet tax obligations.

We do not use any of this data for advertising, profiling for sale, automated decision-making with legal effects, or to train AI models.

We use a small number of third-party services to operate the site and product. These are our subprocessors:

• Vercel — hosting, edge CDN, performance analytics. Vercel privacy policy.
• PostHog — page-view + product analytics, if you accept analytics. PostHog privacy policy.
• Stripe — payment processing, if you become a paying customer. Stripe privacy policy.
• Resend — transactional email delivery (verification, notifications). Resend privacy policy.

We do not sell your personal information. We do not share it with advertisers, data brokers, or any party for cross-context behavioral advertising. See Do Not Sell or Share below.

• Consent cookies — 12 months, then re-prompted.
• PostHog analytics — 12 months at the source, then aggregate-only.
• Server logs — 30 days, then rotated.
• Account data — for the lifetime of your account. Deleted within 90 days of account closure (or sooner on request), except where retention is required by tax or legal obligation.
• Billing records — 7 years (US tax requirement).

Wherever you live, you can email privacy@horizondigital.dev and ask us to:

• Tell you what we have about you (right of access)
• Correct anything wrong
• Delete it (right to erasure)
• Stop processing it (right to object)
• Send it to you or another provider (right to portability)

We respond within 30 days. We won't ask you to prove your identity beyond what's reasonable to confirm you're the person whose data you're asking about (usually replying from the email address on the account is enough).

If you're in California (CCPA / CPRA):in addition to the above, you have the right to opt out of "sales" or "shares" of your personal information. We don't do either — but the right is yours regardless. You also have the right to limit the use of sensitive personal information; we do not collect any of the categories CCPA defines as "sensitive personal information" (precise geolocation, race/ethnicity, sexual orientation, biometric data, health data, etc.), so there is nothing to limit. We will not discriminate against you for exercising any of these rights — we will not deny service, charge different prices, or provide a lower quality of service.

If you're in the EU / UK / Switzerland (GDPR / UK GDPR): the legal bases we rely on are (1) consent for analytics cookies, (2) contract for product features you signed up for, and (3) legitimate interests for server logs and replying to your emails. You can lodge a complaint with your local data-protection authority if you think we got it wrong.

We do not sell your personal information to third parties, and we do not share it for cross-context behavioral advertising. There is nothing for you to opt out of in this regard.

If you want to confirm this, or if you want us to delete the data we hold about you anyway, email privacy@horizondigital.dev.

PhotonForge is a developer-tools product. It is not directed at children under 13, and we do not knowingly collect their data. If you believe we have, email us and we will delete it.

When this policy changes, we update the "Effective" date at the top. For material changes (new subprocessor, new category of data) we'll surface a notice in-product or by email to active customers. We won't apply changes retroactively to data already collected without telling you.

Privacy and data-subject requests: privacy@horizondigital.dev

General inquiries: hello@photonforge.io

Postal: Horizon Digital Engineering LLC, Florida, USA. (Specific postal address available on request via the privacy address.)