Privacy Policy
Last updated: October 6, 2026
This Privacy Policy explains how ForgEd, operated by Omnistrata, LLC ("ForgEd," "we," "us"), collects, uses, and shares information when you use forgedlearn.com (the "Site").
Information we collect
- Account information. Your name, email address, username, and hashed versions of your password and security answers. We never store passwords in plain text.
- Sign in with Google or GitHub. If you choose to sign in with Google or GitHub, we receive your verified email address, your name, and your account ID from that provider. We use this only to create and sign in to your ForgEd account. We do not receive your password, and we do not access your contacts, files, repositories, or any other data from those accounts. You can revoke access at any time from your Google or GitHub account settings.
- Learning activity. Your course progress, quiz and lab results, XP, streaks, achievements, and certificates.
- Helix conversations. Your questions to our Helix learning assistant and its answers, used to keep context between sessions. Don't share sensitive personal information with Helix.
- Usage data. Standard server logs such as IP address, browser type, pages visited, and timestamps, used for security and to keep the Site running.
We do not knowingly collect information from children under 13. If you are under 18, use ForgEd with a parent or guardian's permission.
How we use information
- To provide your account, courses, progress tracking, and certificates
- To let anyone you share a certificate with verify it
- To communicate with you about your account
- To improve courses and Helix
- To protect the Site from fraud and abuse, and to comply with the law
How we share information
We do not sell your personal information. We share it only with:
- Service providers that help us run the Site, such as hosting (Netlify) and data storage (Google Sheets)
- Law enforcement, when required by valid legal process
- A successor company in the event of a merger, acquisition, or sale of assets
Data retention
We keep account and learning data while your account is active and for up to 30 days after you delete it. Issued certificates stay verifiable unless you ask us to revoke them.
Your choices and rights
You can ask us to access, correct, delete, or export your personal information by emailing chandler@syntrix.solutions. We respond within 30 days. California residents have the right to know what we collect, request deletion, and not be discriminated against for exercising these rights.
Security
We use encryption in transit, hashed passwords, and limited access to production systems. No system is perfectly secure; if a breach affects your information, we will notify you promptly.
Changes
We will post changes on this page and update the date above.
Contact
Questions about privacy: chandler@syntrix.solutions.