Privacy and Data Use

Who and what this notice covers #

ForgeWorld Gaming is the public service name operating through fwg.world. This notice covers the marketing pages at that address, the Paymenter billing storefront at billing.fwg.world (accounts, orders, invoices and support), and the game-control panel at panel.fwg.world. Mackenzie Morton (Ottawa, Ontario, Canada) is responsible for personal information at ForgeWorld Gaming. For a privacy request, email support@fwg.world with "Privacy" in the subject, or open a ticket at billing.fwg.world. ForgeWorld Gaming operates from Canada.

The marketing pages #

The pages at fwg.world are static planning content with privacy-minimized first-party click-intent measurement. When you start checkout or open an availability request, the site can send a same-origin event containing normalized source, medium, campaign and content labels. A checkout-start event also includes the catalog version and tier identifier. The first campaign labels seen during a visit can be kept in browser session storage so later click intent stays associated with that visit; the marketing pages set no cookies of their own.

If you arrive through a creator's referral link (a link with ?ref= followed by the creator's code), the site keeps that code and the time you arrived in browser local storage for up to 30 days and adds the code to its links to the billing storefront, so the creator can be credited if you order. It is not a cookie and contains no name, email address or account details.

The site also uses self-hosted, first-party pageview analytics (Umami) to record standard web analytics data: page views, HTTP referrer, approximate location from IP address, and browser and device type. It also counts clicks on a few labelled links and buttons, such as starting checkout or choosing a support channel. These recordings are not used for advertising and no third-party advertising trackers receive this data.

Validated campaign labels can also accompany checkout and be saved with an order, as described in the billing storefront section.

The dedicated event log records only the time, request method, event path and response status. That record contains no cookies, request body, referring page, account, email or card data. ForgeWorld Gaming uses these events to understand whether its own planning pages lead visitors to checkout or the availability desk. There are no Google Analytics, Meta Pixel, advertising tags or third-party trackers, and the campaign labels and event records are not shared with advertising networks.

The billing storefront #

Creating an account, ordering, invoicing and support happen on the billing storefront. It uses existing session and security cookies: a server-side session cookie and a cross-site-request-forgery token, both marked Secure, and the session cookie additionally HttpOnly. These cookies keep you signed in and protect forms; they are not used for advertising. Your account holds the email address you register, your service details and your invoices, so orders can be delivered and supported. The billing storefront also uses self-hosted, first-party pageview analytics (Umami) to record standard web analytics data: page views, HTTP referrer, approximate location from IP address, and browser and device type. These recordings are not used for advertising and no third-party advertising trackers receive this data.

When you arrive with campaign labels, the existing checkout session can retain their validated source, medium, campaign and content until the session expires or for up to 30 days after capture. Those labels and their capture time can be saved with your order so ForgeWorld Gaming can compare acquisition sources with recorded payments. The order record is retained with the order. This feature creates no new tracking cookie, collects no payment-card details and does not share campaign labels with advertising networks.

If you reach the billing storefront through a creator's referral link, it also sets a referral cookie holding that creator's code for 30 days; a newer referral link replaces it. An order you place in that time is recorded as referred by that creator, who earns a one-time commission on what you pay for its first month. The creator sees only totals (visits, sign-ups and earnings), never your name, email address or order details. The referral cookie is not used for advertising.

Payments #

Card details are submitted on the hosted checkout page for credit card payments processed by PayPal and are handled by that provider under its own terms. ForgeWorld Gaming never sees or stores your card number. Do not send card or bank details in a support ticket; the ticket desk never needs them.

Server and security logs #

The web server may record the time, the requested URL path and query, the network address, browser headers and the response status, for operation and security. The web server's access and error logs, which include the network address, the browser's user agent and the page requested, are rotated daily and deleted after about 14 days. These logs are not used to build an advertising profile. Do not put passwords, card details or other sensitive information in a URL or a ticket subject, because URLs can appear in logs.

Where data sits #

The game-server machine is in Iowa, United States, so the game data you put on your server is stored in the United States. ForgeWorld Gaming operates from Canada and bills in Canadian dollars. Some supporting providers — including the payment provider and any outbound-email provider — may process data in the United States or elsewhere. Your billing and contact details may also be processed outside Canada. Game data on your server is yours; ForgeWorld Gaming accesses it only to run and support the service, to investigate an abuse report, or where required by law.

Your choices and requests #

You can ask for access, correction or deletion of your account data by emailing support@fwg.world with "Privacy" in the subject, or by opening a ticket from your account at the billing storefront. State that it is a privacy request. ForgeWorld Gaming does not promise a response time. Some data must be kept for accounting and fraud-prevention reasons even after a deletion request, and game data is deleted with the service it belongs to.

Changes #

The issue date above is the current notice date. A material change to how data is used will update this page before the new use begins. This operational notice is written in plain language; it is not a claim that every applicable law has been reviewed, and it is not legal advice.