Privacy Policy

• Account: Your email address and (optionally) a display name. Passwords are handled and hashed by our authentication provider — we never see or store your plaintext password.
• Learning data: Course progress (which chapters you complete), lab topologies you choose to save, and ARIA usage counts used to enforce daily limits.
• ARIA conversations: On the Free and Pro plans, ARIA runs entirely in your browser (on-device) — those messages never leave your device and we never see them. Only the Max plan uses the hosted cloud: there your messages are sent to our AI provider (Google Gemini) to generate a reply, and a rolling history is stored so you can resume a conversation.
• Billing: If you subscribe to Pro, payments are processed by PayPal. We store a PayPal subscription reference and your subscription status — we do not store your card number; PayPal handles payment data directly.
• Analytics: We use Vercel Web Analytics to understand how the site is used — page views and Core Web Vitals performance metrics. It is cookieless and privacy-first: it sets no cookies, does not collect or store your IP address or any cross-site identifier, and cannot be used to track you across other websites. Analytics data is never linked to your account.

• Operate the lab, course, and ARIA tutor, and save your progress.
• Enforce Free vs Pro entitlements and daily ARIA limits.
• Process subscription payments and prevent abuse.
• Diagnose errors and keep the service reliable and secure.

We only use strictly necessary cookies. An essential cookie keeps you signed in (your authentication session), and a short-lived session cookie (nf_sid) helps us de-duplicate anonymous page views within a single visit — it is cleared when you close your browser. Our analytics are cookieless, and we use no advertising or cross-site tracking cookies. Because we set no non-essential cookies, no cookie-consent banner is required.

We share data only with the processors required to run NetForge-AI:

• Supabase: Authentication, database, and hosting of your account data.
• PayPal: Subscription billing and payment processing for Pro.
• Vercel: Hosting and cookieless site usage analytics (page views, Core Web Vitals performance). See Vercel's privacy policy.
• AI providers: Cloud ARIA messages are processed by Google's Gemini solely to generate replies; Google may retain prompts and responses in accordance with its Gemini API terms. Community posts may also be screened by Gemini for moderation. We do not use your ARIA conversations to train our own models.

Each processor handles your data under its own terms and security controls. We do not sell your personal data to anyone.

We keep your data while your account is active. You can delete your account at any time from Account → Danger zone; this removes your profile, progress, lab saves, and ARIA history. Billing records may be retained by PayPal as required for legal and accounting obligations.

Every account's data is isolated at the database level with row-level security, so one user can never read or modify another's data. Traffic is encrypted in transit, and sensitive keys are kept server-side only.

You can view and update your profile, see your stored progress and saves, and delete your account and its data — all from your account page. Depending on where you live, you may have additional rights to access, correct, or port your data; contact us to exercise them.

NetForge-AI is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal data, please contact us at support@netforge-ai.com and we will delete it promptly.

We'll update this page when our practices change and revise the date above. Questions about privacy? Email support@netforge-ai.com. See also our Terms of Service.