Privacy Policy

1. Who we are

ForgeID is operated by Webminter LLC, Wyoming, United States. ForgeID turns photos into AI-generated professional headshots and fantasy portraits. This policy covers browsing our website, signing in, generating images, purchasing credits and optional wallet features.

You can read our homepage, this policy and our terms without signing in. Contact info@webminter.com for privacy questions. Our mailing address is 30 N Gould St Ste R 4000, Sheridan, WY 82801, United States.

2. Google sign-in and email accounts

When you choose Sign in with Google, we request the basic identity permissions openid, email and profile. We receive your Google account identifier, email address and verification status, and available profile information such as your name and profile picture. We use these to create or identify your ForgeID account, authenticate you, and associate your credits, portraits and settings with that account.

We do not request Gmail messages, Google Drive files, contacts or calendars. Google does not give us your password. Google profile information is not used as an image-generation reference unless you separately choose to upload that image.

For email sign-in, we collect your email address and send a short-lived verification code. Authentication records include account and provider identifiers, sessions, IP addresses and user-agent information for security. Our authentication system may store provider tokens; OAuth access and refresh tokens are encrypted, and email verification codes are stored in hashed form.

Google user data is used for the account and security purposes described here, not for advertising, sale to data brokers or training generalized AI models. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

3. Photos, prompts and generated content

We process submitted photos, prompts, selected styles, generation settings and generated images to provide the features you request. Browser drafts can include reference images and editing choices stored locally on your device. When you start generation, reference images and instructions are sent to fal.ai for processing. We store job information and completed outputs using our database and image-storage services so you can retrieve your work.

Only upload photos you have permission to use. Photos may identify you or others. Generating a portrait does not verify real-world identity. Ordinary image generation does not automatically publish your Google account details, photos or portraits to a blockchain or IPFS.

4. Other information and its use

• Credits and purchases: account identifiers, balances, credit ledger entries, checkout identifiers and payment status to provide credits, prevent duplicate charges and reconcile payments. Stripe processes card payments; ForgeID does not receive your full card number.
• Optional wallets: public addresses, signed ownership proofs and relevant transaction identifiers to link a wallet and support requested blockchain features. Wallet connection is separate from Google/email sign-in. We do not ask for your seed phrase or private key.
• Support: contact details and messages you send us to answer questions and handle account or privacy requests.
• Technical information: IP addresses, browser/device information, request timestamps, error logs and rate-limit records to operate the service, diagnose failures and prevent abuse. With analytics consent, we also measure page visits and feature usage.

5. Service providers and sharing

We share information needed to operate the requested service with these providers:

• Google: sign-in and, when enabled by your cookie choices, Google Analytics. Loading Google-hosted fonts also sends browser network-request information to Google.
• Vercel and our PostgreSQL database provider: hosting, image storage, account records, generation records and operational logs. Legacy content may also use Netlify storage.
• Emailit: recipient email addresses and sign-in email content to deliver verification codes.
• fal.ai: submitted images, prompts and settings for requested AI processing.
• Stripe: checkout and payment information to process credit purchases.
• Wallet and blockchain infrastructure: connection information and requested signing or transaction data when you use those features. WalletConnect/Reown services may participate in supported wallet connections.

Better Auth is software running inside ForgeID's backend with our database; this integration does not use a separate hosted Better Auth account service. Providers' privacy notices also describe their processing. We may disclose information when required by law, to address fraud or security incidents, or to protect users and the service. We do not sell Google user data.

6. Cookies and local storage

Essential session cookies keep you signed in and protect account actions. Browser storage holds preferences, consent choices and studio drafts. Optional analytics are controlled through the website's cookie preferences; you can reject optional cookies and still use account features. See our Cookie Policy.

Signing out does not necessarily erase local drafts. Clearing this site's browser storage removes local preferences and drafts, but does not delete server-side account records.

7. Security and retention

We use HTTPS, access controls, protected session cookies, verification-code expiration and request limits to help protect information. No storage or transmission system is completely secure.

Account information, linked sign-in records, portraits and credit history are retained while needed to provide your account and saved work, or until a verified deletion request is processed, subject to the exceptions below. Sign-in codes expire after five minutes. Expiration prevents use; it does not promise immediate removal of every associated database or log entry.

Payment records may be retained for accounting, legal obligations and disputes. Security logs and support correspondence may be retained as needed for abuse prevention and the matter concerned. Backup and provider copies may remain until their retention cycles expire. We do not promise permanent storage of ordinary generated images.

8. Your choices, access and deletion

Request access to, correction of, a copy of, or deletion of your personal information and ForgeID account by emailing info@webminter.com with the subject “ForgeID privacy request.” We may verify account control before acting. Never send passwords, private keys or sign-in codes. We handle requests under applicable privacy rules and explain any information we must retain.

You can remove ForgeID's Google access at Google Account connections. Removing access prevents future use of that authorization; it does not itself delete your ForgeID account or stored content. Contact us separately for deletion. The account menu also lets you sign out other devices.

Depending on where you live, you may have rights to restrict or object to processing, withdraw consent, or complain to your data-protection authority. Withdrawing optional analytics consent does not affect processing already performed or essential account operations.

9. Optional public blockchain content

If you choose an available minting or publication feature, wallet addresses, transactions, token identifiers and associated public metadata may become visible on a blockchain or decentralized storage network. Others may copy these records, and ForgeID generally cannot erase them. Account deletion cannot remove independently stored public records. Review publication details before approving a transaction.

10. International processing and children

Webminter LLC is based in the United States. Providers may process information there and in other countries where they operate. Where applicable law requires safeguards for international transfers, those requirements apply to our handling of your information.

ForgeID is not intended for children under 13. Contact us if you believe a child supplied personal information so we can investigate and address it. Additional age or parental-consent requirements may apply where you live.

11. Changes and contact

We update this page when our practices change and revise the date above. Where required, we provide additional notice or obtain consent for material changes. Send questions to info@webminter.com.

About ForgeID · Terms of Service