Privacy Policy
Last updated: February 28, 2026
NexusForge is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights. The short version: we collect almost nothing, we don't track you, and we never sell your data.
1. What We Collect
NexusForge collects minimal data. Here is exactly what we collect and why:
When You Make a Purchase
Our payment processor, Stripe, collects:
- Email address -- Used to send your purchase receipt and download link
- Payment information -- Credit card details are handled entirely by Stripe. We never see, store, or have access to your card number
- Billing address -- If provided during Stripe checkout, used for payment processing and tax compliance
When You Browse Our Website
Nothing. Our website is a static site hosted on GitHub Pages. We do not use:
- Cookies
- Analytics scripts (no Google Analytics, no Mixpanel, no Hotjar)
- Tracking pixels
- Fingerprinting
- Session recording
When You Contact Us
If you email us at [email protected], we receive your email address and the content of your message. We use this solely to respond to your inquiry.
2. How We Use Your Information
Your email address (collected via Stripe during purchase) may be used to:
- Deliver your purchased product (download link)
- Send your purchase receipt
- Respond to support requests you initiate
- Process refund requests
- Send product-related updates (usage tips, new product announcements)
You can opt out of product update emails at any time by replying with "unsubscribe" or contacting us.
3. Payment Processing
All payments are processed by Stripe, a PCI DSS Level 1 certified payment processor -- the highest level of certification in the payment industry.
When you click a "Buy" button on our site, you are redirected to Stripe's secure checkout page. Your payment data is transmitted directly to Stripe over encrypted connections. We never see, process, or store your credit card information.
Stripe's handling of your data is governed by their Privacy Policy.
4. Third-Party Services
We use the following third-party services:
- Stripe -- Payment processing. Collects payment and email data. Stripe Privacy Policy
- GitHub Pages -- Website hosting. GitHub may collect standard server logs (IP address, browser type, referring page) as part of their hosting infrastructure. GitHub Privacy Statement
- Google Fonts -- Web fonts (Inter). Google may collect anonymized usage data when fonts are loaded. Google Privacy Policy
5. Data We Do NOT Collect
To be explicit about what we don't do:
- We do not sell your data to anyone, ever
- We do not share your email with third-party marketers
- We do not run advertising or retargeting
- We do not use cookies or browser fingerprinting
- We do not track your browsing behavior on our site
- We do not store credit card information
6. Data Security
We take reasonable measures to protect your information:
- All data transmission occurs over HTTPS (TLS encryption)
- Payment processing uses Stripe's PCI DSS Level 1 certified infrastructure
- We do not store sensitive financial data on our servers
- Content Security Policy headers are implemented on all pages
7. Your Rights
Regardless of where you live, you have the right to:
- Access -- Request a copy of any personal data we hold about you
- Correction -- Request correction of inaccurate personal data
- Deletion -- Request deletion of your personal data
- Opt-out -- Unsubscribe from any marketing communications
To exercise any of these rights, email [email protected]. We will respond within 30 days.
8. Children's Privacy
NexusForge products are designed for business professionals. We do not knowingly collect data from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, contact us immediately and we will delete it.
9. Changes to This Policy
We may update this privacy policy from time to time. Changes take effect when posted on this page. The "Last updated" date at the top reflects the most recent revision. Since we collect minimal data, changes are unlikely to be significant.
10. Contact
For privacy-related questions or to exercise your data rights, contact us at [email protected]. We respond to all inquiries within 2 business days.