Privacy Policy
Last updated: October 2026
This Privacy Policy explains how {{LEGAL ENTITY}} ({{LEGAL FORM}}, registration number {{REGISTRATION NUMBER}}), registered at {{REGISTERED OFFICE}} ("we", "us", "OnePageForge") collects, uses and protects your personal data when you use OnePageForge at https://onepageforge.com.
1. Data controller
The data controller is {{LEGAL ENTITY}}, {{REGISTERED OFFICE}}. For privacy-related questions, email support@onepageforge.com.
2. What data we collect
Account data
When you create an account, we collect your name, email address and a hashed version of your password. We never store your password in plain text.
Payment data
Payments are handled by Stripe. Stripe collects your card number, expiry date and billing address. We receive only your email, the plan purchased, the amount paid and a transaction reference. We do not see or store your full card details.
Generated content
When you use the website generator, we store the business description you enter, the style you choose and the HTML output. This data is linked to your account.
Contact messages
If you contact us through our form, we collect your name, email, subject and message.
Technical data
Our hosting provider (Cloudflare) automatically logs IP addresses, browser type, referring URL and timestamps for every request. These logs are managed by Cloudflare under their own privacy policy and are typically retained for 72 hours.
3. Why we process your data
| Purpose | Legal basis |
|---|---|
| Create and manage your account | Contract performance |
| Process your payment and activate your plan | Contract performance |
| Generate websites on your behalf | Contract performance |
| Host your generated websites | Contract performance |
| Send you account-related emails (receipts, security alerts) | Contract performance |
| Respond to your support requests | Legitimate interest |
| Prevent fraud and abuse | Legitimate interest |
| Comply with legal obligations | Legal obligation |
4. Sub-processors
We share your data with the following third parties, each acting as a sub-processor:
| Sub-processor | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting, CDN, D1 database, Workers AI | USA (global edge network) |
| Stripe, Inc. | Payment processing | USA |
We do not sell your personal data. We do not share it with anyone beyond these sub-processors.
When we disclose data
Beyond the sub-processors above, we disclose personal data only to comply with a legal obligation or valid legal request, to protect the rights, safety or property of our customers or the service, or to a successor if the business is sold or reorganised, in which case this policy continues to apply to your data until you are told otherwise.
5. International transfers
Your data may be processed in the United States and at Cloudflare edge locations worldwide. Where data is transferred outside the UK or EEA, it is protected by Standard Contractual Clauses or equivalent safeguards.
6. How long we keep your data
We keep your data for the duration of your access period plus 30 days. After that, your generated websites and account data are deleted.
Contact messages are kept for up to 12 months after we resolve them, then deleted. Payment records (transaction reference, amount, date) are kept for 7 years for accounting and tax compliance.
7. Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (you can delete your account from your account page, which removes your profile and all generated websites)
- Export your data in a portable format
- Object to processing based on legitimate interest
- Restrict processing while a complaint is being resolved
To exercise any of these rights, email support@onepageforge.com. We respond within 30 days.
8. Security
We protect your data with HTTPS encryption in transit, hashed passwords (PBKDF2 with 100,000 iterations), HttpOnly session cookies and Cloudflare's network security. For more detail, see our Security page.
9. Cookies
OnePageForge uses a single, strictly necessary session cookie to keep you signed in. We do not use tracking cookies, analytics cookies, or advertising cookies. See our Cookie Policy for details.
10. Children
OnePageForge is not intended for anyone under the age of 18. We do not knowingly collect data from minors. If we learn that a user is under 18, we will delete their account and data.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we update the "Last updated" date at the top. If the changes are material, we notify you by email.
12. Contact
For any privacy-related questions or requests, email support@onepageforge.com.
{{LEGAL ENTITY}}
{{REGISTERED OFFICE}}