Privacy Policy
What WristForge collects, why, and how to get rid of it. Written to describe what this site actually does rather than what a template assumes.
Last updated 16 August 2026
The short version
If you join the waitlist we store your email address so we can tell you when WristForge opens. If you create an account we store your email and a scrambled version of your password. We count visits without cookies and without being able to identify anyone. We do not sell anything about you to anybody, and there is no advertising on this site.
The rest of this page is the detail behind those sentences.
Who we are
WristForge is operated by Stone Golem Studios. For data protection purposes we are the data controller, meaning we decide what is collected and why.
The best way to reach us about anything on this page is email: support@stonegolemstudio.com. We read it, and we answer.
What we collect
If you join the waitlist
| What | Why |
|---|---|
| Your email address | To email you when WristForge is available |
| Which form you used | To learn which parts of the page work |
| The website that sent you here, if any | To learn where people find us |
| Your browser identification string | To spot automated signups |
| The date and time | To keep the list in order |
| Whether you want to build a game or an app, if you tell us | To decide what to build first |
| Where you heard about us, if you tell us | To learn which of our efforts are working |
The last two are optional questions asked after you have joined, not part of the form. Skipping them changes nothing.
If you create a developer account
Your email address, a display name if you choose to give one, and your password. Passwords are handled by our authentication provider and stored only as a cryptographic hash. Nobody at Stone Golem Studios, including us, can see or recover your password.
When anyone visits a page
We run our own visitor counting rather than using a third-party analytics service. For each page view we record the page address, the hostname of the site that referred you (never the full URL), your country as reported by our network provider, whether you are on a phone, tablet or desktop, and the time.
To count unique visitors we create a fingerprint from your IP address and browser, combined with a secret key we hold and a salt that changes every day. The result is a one-way hash. We cannot reverse it to recover your IP address, and because the salt rotates daily we cannot connect your visit today to your visit tomorrow. We never store your IP address itself.
If your browser sends a Do Not Track signal we record nothing at all for that visit.
Cookies
This site sets no advertising cookies, no analytics cookies, and no third-party cookies. That is why you have not been shown a cookie banner: the only cookies here are the strictly necessary kind, which do not require consent.
| Cookie | Purpose | Lifetime |
|---|---|---|
| Authentication session | Keeps you signed in to your developer account | Until you sign out |
| Site access | Remembers you entered the pre-launch password, if one is set | 7 days |
We also self-host our fonts rather than loading them from Google. Visiting this site does not send a request to Google, or to any other third party, on your behalf.
Why we are allowed to do this
If you are in the UK or the European Economic Area, the law requires us to name a lawful basis for each use.
| Use | Lawful basis |
|---|---|
| Waitlist email | Your consent, given when you submit the form |
| Running your account | Performance of a contract with you |
| Visitor counting | Our legitimate interest in knowing whether the site works, balanced against your privacy by collecting no identifiers and no cookies |
| Blocking abuse and spam | Our legitimate interest in keeping the service usable |
Who else sees it
We do not sell, rent, or trade your personal information. We do not share it for advertising. The only third parties involved are the companies that run our infrastructure, acting on our instructions:
| Company | What they do |
|---|---|
| Vercel Inc. | Hosts the website and serves it to you |
| Supabase Inc. | Runs the database that stores the waitlist and accounts |
| Resend (Plus Five Five, Inc.) | Delivers account emails such as confirmations and password resets |
We may also disclose information if the law requires it, or to protect our rights or someone's safety.
Where your data is held
We are based in the United States and our providers process data there. If you are in the UK or EEA, your information is transferred outside your country. Our providers rely on Standard Contractual Clauses and the EU-US Data Privacy Framework for these transfers.
How long we keep it
- Waitlist emails: until you ask us to remove you, or until we have finished the launch announcements the list exists for.
- Account data: for as long as your account exists, then deleted.
- Visit records: 12 months, then deleted.
Your rights
Wherever you live, you can email us at support@stonegolemstudio.com and ask us to show you what we hold, correct it, or delete it. We will respond within 30 days.
If you are in the UK or EEA
Under the UK GDPR and the EU GDPR you have the right to access your data, to have it corrected, to have it erased, to restrict how we use it, to receive a copy in a portable format, to object to processing based on legitimate interests, and to withdraw consent at any time. Withdrawing consent does not affect anything done before you withdrew it.
You also have the right to complain to your national data protection authority. In the UK that is the Information Commissioner's Office.
If you are in California
Under the CCPA as amended by the CPRA you have the right to know what personal information we collect and why, to request deletion, to request correction, and not to be discriminated against for exercising those rights.
We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined in California law. There is therefore nothing to opt out of.
Children
WristForge is not intended for children. You must be at least 16 years old to create an account or join the waitlist. We do not knowingly collect information from anyone younger. If you believe a child has given us their information, email us and we will delete it.
How we protect it
- All traffic to this site is encrypted in transit.
- Passwords are stored as cryptographic hashes and are never visible to us.
- Database access is restricted at the database itself, so one account cannot read another's data even if the application had a bug.
- Administrative credentials are held on the server and are never sent to your browser.
No system is perfectly secure, and we cannot promise otherwise. If a breach affects you we will tell you and the relevant authority as the law requires.
Changes to this policy
We will update this page when what we do changes, and change the date at the top. If a change materially affects you and we hold your email address, we will email you.
Contact
Questions, requests, or complaints: support@stonegolemstudio.com.