Privacy Policy

How ModlForge handles contact enquiries, technical logs, cookies, the forecast dashboard, and embedded third-party content.

Last updated: March 2026

1. Who we are

ModlForge Inc.
Registered office: 330 Bay St, Suite 1400, Toronto ON M5H 2S8, Canada
Email: [email protected]

We are the controller of personal data described in this Privacy Policy.

2. Hosting and infrastructure

Provider Role Regions used Typical log retention
Microsoft Azure Web hosting and forecast tool infrastructure United States Up to 30 days
Cloudflare CDN, DNS, WAF, DDoS protection and traffic filtering Global edge network Up to 7 days

When your browser contacts our infrastructure partners, they receive the usual HTTP request metadata, such as your IP address, the page requested, the time and date, and your browser type. They process this information only to route traffic, defend against abuse, and keep the service reliable.

3. What data we collect and why

Category Purpose Legal basis (GDPR) Retention
Contact data you send us, such as email address and message content To respond to your enquiry Legitimate interests, or pre-contractual steps at your request Until the request is resolved, then up to 6 months unless longer retention is needed
Server, CDN, and security logs To protect the site, prevent abuse, and investigate incidents Legitimate interests Typically 7 to 30 days
Forecast input values entered into the dashboard To provide the requested real-time forecast calculation Necessary to provide the functionality you request Not stored after processing
Cookies and similar technologies To operate the site securely and, where applicable, load optional third-party content Legitimate interests or consent, depending on purpose See section 4

We do not use your data for automated decision-making with legal or similarly significant effects.

4. Cookies and similar technologies

We do not currently use analytics or advertising cookies on the site.

Category Provider Purpose Legal basis Typical duration
Strictly necessary ModlForge hosting infrastructure To keep the forecast dashboard or other core site functions working during your visit Legitimate interests Session (tab closes)
Strictly necessary Cloudflare Security, bot protection, rate-limiting, and safe delivery of the site Legitimate interests ≤ 24 h
Optional YouTube To play embedded videos after you choose to start them Consent According to YouTube’s policies

Our site fonts are served locally from our own infrastructure rather than requested from Google’s font servers.

You can block cookies in your browser settings, but strictly necessary cookies may be required for some site features to function properly.

5. Forecast dashboard

The embedded forecast dashboard processes the numbers you enter only in memory to perform the requested calculation and return the result to your browser.

To keep the dashboard functioning during your visit, our hosting infrastructure uses a strictly-necessary session-affinity cookie or a similar mechanism. This cookie falls under our legitimate interest basis (see table above).

We do not store or log the values you enter, and we do not use dashboard data for analytics or advertising.

6. Third-party content

Some pages include embedded YouTube videos in privacy-enhanced mode.

A static thumbnail is shown first. The YouTube player loads only after you choose to start the video. Once loaded, YouTube and its affiliates may process technical data and set cookies according to their own policies.

7. International transfers

Personal data may be processed in Canada, the United States, and the European Economic Area, depending on the service involved.

Where personal data is transferred outside the EEA or UK, we rely on applicable legal safeguards, which may include adequacy decisions, Standard Contractual Clauses, and, where applicable, a provider’s certification under the EU-US Data Privacy Framework.

8. Security measures

We use technical and organisational measures appropriate to the nature of the data and the risks involved. These may include transport encryption, firewalling, access controls, restricted administrative access, traffic filtering, and encryption for supported stored data and backups.

No method of transmission or storage is completely secure, but we work to protect personal data appropriately.

9. Children’s privacy

Our site is not intended for children under 16, and we do not knowingly collect personal data from children under 16.

10. Your rights

Where applicable under data protection law, you may request access to your personal data, rectification, erasure, restriction of processing, or data portability. You may also object to certain processing and withdraw consent at any time where processing is based on consent.

We will respond within the time required by applicable law, which is generally within one month for GDPR-based requests.

To exercise your rights, contact: [email protected]

11. Complaints

If you believe your data has been handled unlawfully, you may lodge a complaint with your local data protection authority in the EEA, with the UK Information Commissioner’s Office if you are in the UK, or with the Office of the Privacy Commissioner of Canada where Canadian privacy law applies. If you are in another jurisdiction, you may also contact us directly at [email protected]. We will review your request and respond in accordance with applicable law.

12. Changes to this policy

We may update this Privacy Policy from time to time.

If we make material changes, we will post a clear notice on the site before or when the updated policy takes effect. The “Last updated” date at the top of this page shows the latest revision.