Anonymous browsing
Public browsing does not require an account. Cloudflare and Forge may process timestamps, requested routes, network addresses, device and browser information, cache data, and abuse signals needed to deliver and protect the service. Application rate-limit records expire after their short enforcement window; infrastructure security logs are retained only as long as reasonably needed for reliability, abuse response, or legal obligations.
ChatGPT sign-in and consent
Forge uses ChatGPT / OpenAI as its identity provider. Sign-in can provide an account subject identifier, email address, and display name. Signing in alone does not create a Forge creator record: the account page first discloses the fields and asks you to accept the current Forge terms. After consent, Forge stores those identity fields, the accepted policy version and time, roles, profile, drafts, upload records, moderation state, and audit history.
Uploads and reports
Submitted files are stored privately in quarantine while integrity, format, and archive-safety checks and human review are completed. These checks are not an antivirus guarantee. Forge records declared and verified hashes, sizes, check results, review decisions, and immutable public-release metadata. Reports contain the target, reason, details, optional contact information, and staff decision. Only authorized staff can access private uploads and cases.
Public information
An approved creator profile, credited display name, creation metadata, selected license, version details, file hash, release notes, and approved public files may be visible to everyone. Do not submit private information for publication.
Retention, export, and deletion
Private abandoned uploads may be deleted after an operational cleanup period. Security and moderation audit records may be retained when needed to prevent abuse, establish publication history, satisfy attribution, or respond to legal requests. Account deletion removes or anonymizes profile and contact data where compatible with those duties; public content may be withdrawn rather than reassigned. Signed-in creators can submit an export or deletion request from Account, and anyone may use Support.
Service providers
Cloudflare provides application delivery, D1 database, R2 object storage, caching, and security services. OpenAI provides ChatGPT sign-in. Links to Steam, Discord, creator sites, and other services follow those providers’ privacy notices. Forge does not use sign-in as proof of Steam ownership.
Your choices
You may browse without signing in, sign out without creating a Forge workspace, decline creator onboarding, withdraw unpublished drafts, report unsafe content, or request access, correction, export, or deletion through Account or Support.