Information under Articles 13 and 14 of the GDPR, the UK GDPR, and Article 21 of Japan's Act on the Protection of Personal Information.
Daniel Boles
975 Petchasm Rd
Bangkok
10670
Thailand
business@prompt-forge.dev
| Data | Purpose | Legal basis | Kept |
|---|---|---|---|
| Email address, the form it came from, the date | Sending release notes, or telling you the subscription has opened | Consent — GDPR Art 6(1)(a) | Until you unsubscribe |
| Name, email address, order reference | Issuing your licence key, and supporting it afterwards | Performance of a contract — Art 6(1)(b) | As long as tax law requires records to be kept |
| Whatever you write in an email or a public issue | Answering you | Contract, or legitimate interest in support — Art 6(1)(f) | Until it is no longer useful |
Providing an email address is voluntary. Nothing is required of you except an address to send a licence key to, without which the purchase cannot be delivered.
This site uses Google Analytics (GA4, property G-9009G8D7BB) to count page views. It stores a cookie on your device, which is why you are asked first.
Nothing is measured until you agree. Consent Mode is set to deny analytics, advertising, ad personalisation and ad user data by default, and only analytics storage is granted — and only after you press Allow. Declining is a real choice, is remembered, and changes nothing about what you can read or buy. You will not be asked twice.
To change your mind either way, clear this site's storage in your browser and the question is asked again. Google acts as a processor and may transfer data to the United States; IP anonymisation is enabled.
No advertising or fingerprinting is used. Server logs are kept by the host for security and are not used to build a profile of you.
The plug-ins make no network connections of any kind. Activation is offline — a licence key is checked against a public key compiled into the software. There is no telemetry, no usage reporting and no version check, and the software behaves identically on a machine that has never been connected to a network.
| Processor | What for | Where |
|---|---|---|
| Microsoft Azure | Hosting, and the subscriber list | Ireland |
| Kit (ConvertKit) | Sending email and handling unsubscribes | United States |
| PayPal | Taking payment | United States |
| GitHub | The public issue tracker, if you use it | United States |
The subscriber list is stored in Ireland. Sending it to Kit and taking payment through PayPal transfers personal data to the United States. Those transfers rely on the standard contractual clauses those companies incorporate into their own terms.
Your data is not sold, rented, or shared for anyone else's marketing. Under California law: no personal information is sold or shared as those terms are defined there.
Japan: personal data may be provided to third parties in the United States and Ireland as set out above. Information about the data protection systems of those countries is available on request.
No automated decision-making or profiling within the meaning of Article 22 takes place. The only distinction drawn between subscribers is which form they signed up through, so that people waiting for the subscription are not sent release notes they did not ask for.
You have the right to obtain a copy of your data, to have it corrected, to have it erased, to restrict or object to its processing, and to receive it in a portable form. Where processing rests on consent, you may withdraw that consent at any time, which does not affect what was lawful before you withdrew it.
Write to business@prompt-forge.dev. A request is answered within one month. Unsubscribing is faster still — every email carries a one-click unsubscribe link, and using it removes you from the list.
You may also complain to a supervisory authority: in the EU, the authority where you live or work; in the UK, the Information Commissioner's Office; in Japan, the Personal Information Protection Commission.
One limitation, stated rather than buried: a licence key already issued contains the name and email it was issued to, because that is what makes it yours. Erasing you from the records does not reach into a key already sent, and there is no mechanism to recall one.
This is not aimed at children and no data is knowingly collected from anyone under 16.
Last updated 2026-10-11.
Legal notice · Privacy · Terms · Refunds & cancellation · 特定商取引法に基づく表記