Who we are
This policy covers the EvoForge desktop application, the account service at account.evoforge.cc and the website evoforge.cc, all operated by PIXALIFE LIMITED, a company incorporated in Hong Kong (“we”).
LEGAL / PRIVACY
Privacy
in plain terms.
Your work stays on your computer. This page lists the little we do hold, why, who else handles it, and how to have it removed.
01 / POLICYCOLLECTION · USE · RIGHTS
What stays on your computer
Your sessions, prompts, files, memory, skills, activity history and model API keys stay on your computer; the keys are kept in your operating system’s credential store. We do not receive, store or read any of it, and we never use it to train models.
Model providers you choose
When you use a cloud model or a service you connect, EvoForge sends the request from your computer directly to that provider, using your own key. The provider handles it under the terms and privacy policy you agreed with them. We are not part of that traffic and cannot see it.
Your account
Using the app requires signing in. We keep your email address; if you sign in with Google or GitHub, that provider’s account identifier, so the same person always reaches the same account; and the records sign-in needs (one-time codes and session tokens, stored only as hashes). We use them only to sign you in, to issue the licence the app checks, and to prevent abuse.
Daily usage counts
While you are signed in, the app sends a heartbeat every ten minutes that carries only its licence. For each account we store how many heartbeats arrived on each day, and nothing else: no content, no file names, no record of what you did. We use the counts only to know how many people use EvoForge each day and roughly for how long.
Payments
Add-on modules are paid through Stripe. Card details go to Stripe and never reach us; we give Stripe your email address and account ID so it can bill you. We keep your Stripe customer ID and, for each subscription, the module, its status and when the current period ends. Stripe handles payment data under its own privacy policy.
Updates and server logs
The app checks release.evoforge.cc for new versions; that request carries no account information. As with any website, our hosting providers may keep IP addresses and request times in short-lived logs for security and operations.
This website
The website has no accounts and no forms. It uses Google Ads conversion measurement to learn which ads lead to a download, as set out in the cookie notice. It is never used to personalise ads. The account pages at account.evoforge.cc set only the cookies that sign-in needs.
Who else handles data
Cloudflare (account service, database, downloads and website delivery), Netlify (website hosting), Stripe (payments), Resend (sign-in code emails), Google and GitHub (only if you sign in with them) and Google Ads (website measurement). Cloudflare, Netlify and Resend process data on our behalf; Stripe, Google, GitHub and Google Ads also act as independent controllers under their own privacy policies. Some are located outside Hong Kong, including in the United States; where data leaves the EU or UK, we rely on the providers’ standard contractual clauses.
Why we may use it
Where data-protection law such as the GDPR applies, we rely on: performing our contract with you (account, licence, payments); our legitimate interests in keeping the service secure, preventing abuse and counting daily use; your consent for advertising measurement on the website; and legal obligations for billing records.
How long we keep it
Account data, sign-in records and daily usage counts are kept while your account exists and deleted with it, or earlier on request. Sign-in codes stop working after ten minutes and tokens when they expire. Billing records are kept for as long as tax and accounting law requires.
Your rights
You can ask for a copy of your account data, have it corrected, have your account and its data deleted, receive your data in a portable format, or object to processing based on our legitimate interests, by writing to [email protected] from the email address on the account. We reply within 30 days. When we delete an account, we cancel its subscriptions. If you live in the EU, the UK or another place with data-protection law, you also have the rights that law gives you, including complaining to your local authority.
Children and changes
EvoForge is not meant for children under 16 and we do not knowingly hold their data. If this policy changes, we update this page and its effective date before the change takes effect.