Privacy Policy

Dual-Forge is a habit-building and habit-breaking platform currently available in Open Beta.

Depending on how you use Dual-Forge, information you provide may include:

• Your email address, used to create and sign in to your account.
• A password you choose during sign-up. Passwords are processed by our authentication provider and Dual-Forge staff cannot view your password.
• Profile fields you fill in, such as a display name or timezone, where offered.
• Messages, feedback, bug reports, or privacy and account requests you voluntarily send to Dual-Forge Support.

Dual-Forge uses Supabase to handle account creation, email confirmation, sign-in sessions, password recovery, and the internal identifiers that tie your account to your profile. Your email and hashed authentication credentials, along with a short profile record, are stored in the Dual-Forge database operated on Supabase.

Google Sign-In is offered as an optional way to create or access your Dual-Forge account. If you choose Continue with Google, Google shares your email address, basic profile information, and a stable provider identifier with Dual-Forge through Supabase Auth so we can create or sign you in. We do not receive your Google password. Google's handling of your information is governed by Google's own privacy practices.

Your habits, check-ins, and daily notes are currently stored in your browser, not in your Dual-Forge cloud account, and are isolated to the currently signed-in account.

What that means in practice during Open Beta:

• Each signed-in account has its own local habit data on this device. If multiple people share this browser, they should each sign into their own account; signing in as another account will not display the previous account's habits.
• If you switch browsers or devices, your habit history may not follow you.
• If you clear your browser's site data for Dual-Forge, your habits and check-ins for every account stored locally on this device may be removed, depending on how your browser scopes the clearing action.
• Private or incognito browsing sessions may not preserve habit data between visits.
• Creating an account does not guarantee that every habit is backed up online.
• Signing out does not automatically delete the local habit data stored for that account on this device.
• Deleting your Dual-Forge account may not automatically clear habit data that is stored locally on your device — you may need to clear your browser data separately.

Dual-Forge does not currently promise complete cross-device synchronization, offline operation, or automatic backup of your habit data.

When you complete a successful daily check-in — a Build habit marked completed, or a Break habit marked avoided — Dual-Forge records a protected event in its database. These raw event records are not shown publicly.

Public "Habits Built" and "Habits Broken" totals on the site are calculated as aggregate counts across all users. Duplicate events for the same habit and date do not increase the totals.

Public totals reflect activity inside Dual-Forge and do not independently verify real-world behavior. If you delete your account, the association between historical counter events and your user ID may be removed while a de-identified record of the event is retained so that lifetime aggregate totals remain accurate. Because events are tied to a user ID before deletion, they are pseudonymous rather than anonymous.

When you use Dual-Forge, limited technical information is processed to make the service work and to keep it secure. This may include:

• Authentication session data stored in your browser so you stay signed in.
• Local browser storage used for habit data, cached community totals, and a queue of pending counter events.
• Essential technical information — such as your IP address, browser type, and request logs — that our hosting, authentication, and database providers process to deliver and secure the service.

Dual-Forge does not currently use advertising cookies, third-party analytics trackers, tracking pixels, or cross-context behavioral advertising technologies, so no consent banner is shown for those categories.

Dual-Forge uses information to:

• Create and maintain your account.
• Authenticate you and keep sessions secure.
• Send confirmation and password-reset emails.
• Provide habit-tracking features.
• Calculate aggregate community progress totals.
• Secure and troubleshoot the service.
• Respond to your support and privacy requests.
• Improve the Open Beta based on real-world usage and feedback.

Dual-Forge relies on the following third-party providers to deliver core functionality:

• Supabase — hosted authentication, database, and transactional authentication email delivery (such as confirmation and password-reset emails).
• Our hosting provider — serves the Dual-Forge website and processes standard request information such as IP addresses in the ordinary course of delivering web traffic.

These providers process information under their own terms and privacy practices. Dual-Forge does not share your personal information with providers beyond what is necessary to run the service.

Dual-Forge does not sell personal information and does not currently use personal information for cross-context behavioral advertising.

Different types of information are retained differently:

• Account and profile information is retained while your account exists.
• Authentication and security logs kept by our providers are retained according to those providers' policies.
• Transactional email records (such as confirmation and password-reset emails) are retained by our email provider as needed to deliver messages and troubleshoot delivery issues.
• Local habit data stored in your browser generally remains until you, your browser, your device, or the application removes it.
• Support correspondence is retained as needed to answer your question and keep a record of the request.
• Aggregate community counter events may be retained indefinitely; if your account is deleted, the association between those events and your user ID may be removed while the de-identified events remain so lifetime totals stay accurate.

Self-service account deletion is not yet available in the Dual-Forge interface. To request deletion of your Dual-Forge account, or to make another privacy request, contact Dual-Forge Support (see Get Support).

When your account is deleted:

• Your account and profile records are removed from the Dual-Forge database.
• Historical community counter events tied to your user ID may be updated to remove that association, leaving a de-identified record so aggregate totals remain accurate.
• Habit data stored locally in your browser is not affected by cloud deletion; you can clear your Dual-Forge site data in your browser to remove it.
• Limited records may be retained where necessary for security, fraud prevention, or to comply with legal obligations.

Dual-Forge does not promise immediate deletion. Requests are processed manually during Open Beta.

Dual-Forge uses reasonable technical and organizational safeguards, including authentication and database access controls provided by Supabase, to help protect account information. No online service can guarantee perfect security, and Dual-Forge does not claim end-to-end encryption or immunity from breaches.

Dual-Forge is not directed to children under 13. Users under 13 may not create an account or provide personal information through the service. If you are between 13 and the age of legal majority in your location, you should use Dual-Forge only with the permission of a parent or guardian where required by law.

A parent or guardian who believes a child under 13 has submitted personal information may contact Dual-Forge Support so the information can be removed.

Dual-Forge is operated from the United States. If you access the service from another country, your information may be processed in the United States or in other locations where our service providers operate.

You may submit access, correction, deletion, or other privacy questions through Get Support.

Dual-Forge may update this Privacy Policy as the Open Beta, data practices, providers, or legal requirements evolve. When changes are made, the "Last updated" date at the top of this page will be revised.

For privacy questions or requests, please use Get Support. You can also review the Terms of Service for how Dual-Forge is provided during Open Beta.