Privacy
Last updated 22 June 2026
Who we are
Forjling is a logo and icon generation service operated by a sole trader based in the United Kingdom, who is the data controller for the personal data described here. You can reach us at yaki@budiaffa.co.uk; our postal address is available on request via that email.
What we store
Forjling stores account details (your name and email), project briefs, uploaded reference images, generated assets, billing events, and credit ledger records to provide the service. Card details are handled by our payment provider — we never see or store your full card number.
Why we use it & our legal bases
- To run your account and generate and store your assets — performance of a contract.
- To take payment and keep financial records — contract and legal obligation.
- To understand usage and improve the product via analytics — consent, which you can withdraw at any time.
- To keep the service secure and prevent abuse — legitimate interests.
Processors we rely on
We use a small number of trusted third parties to run Forjling. Authentication is handled by Clerk, payments by Stripe, database storage by Neon, and asset storage by Vercel Blob. Your prompts and reference images are sent to our image-generation providers, OpenAI and fal.ai, to produce assets. Each processes data only to deliver the part of the service it powers.
Some providers process data outside the UK/EU (for example OpenAI and fal.ai in the United States). Where they do, the transfer is covered by appropriate safeguards such as Standard Contractual Clauses. Our analytics provider, PostHog, is hosted in the European Union.
Analytics & cookies
Analytics are off until you accept them in our cookie banner. If you accept, we use PostHog to understand how Forjling is used so we can improve it. PostHog stores a cookie and uses your browser’s local storage to recognise your browser across visits.
It records product-usage events — such as signing up, creating or deleting a project, starting and completing a generation, checking out, and downloading assets — along with the type and configuration of each action (for example asset type, output format, credits, and the credit pack purchased). It also captures pages visited, your device and browser, the referrer and any campaign (UTM) parameters, and an approximate location derived from your IP address. When you are signed in, this activity is tied to your account using your account ID, email, and name.
To diagnose and fix bugs, we also capture client-side error reports, which can include the error message, a stack trace, and the page where the error occurred.
We do notsend full prompts, private project brief text, or the contents of generated assets to analytics, and session recordings mask all on-screen text and inputs. We do record short labels you choose — project names, icon-pack names, and downloaded file names — together with your email and name as described above. See our Cookie Policy to change your choice at any time.
How long we keep it
We keep your account and content while your account is active. If you delete your account or ask us to, we delete your personal data and generated assets, except billing records, which we retain for around six years to meet tax and accounting obligations.
Your rights
Under UK GDPR you have the right to access, correct, delete, or port your data, to object to or restrict processing, and to withdraw consent (including for analytics). To exercise any of these, email yaki@budiaffa.co.uk. You can also complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.
Your choices
Projects are private by default. We may feature generated assets in showcases and marketing unless you opt out during account creation or later in your account settings. Deleting a project removes its assets. You can accept or decline analytics in the cookie banner or on the Cookie Policy page at any time.
Children
Forjling is not intended for anyone under 18, and we do not knowingly collect data from children.
Contact
Questions about this policy or your data? Email yaki@budiaffa.co.uk.
Changes to this policy
If our data practices change, we’ll update this page and the “last updated” date above.