Skip to content
Launch Sale 20% off everything sitewide Shop the sale →

Privacy Policy

Updated 2026-07-22

Fantasy Forgeworks (“we,” “our,” or “us”) explains here how we collect, use, and share personal information when you use fantasyforgeworks.com and related products (the storefront, downloads, browser extension, and Foundry VTT module) (the “Service”). By using the Service, you acknowledge this Policy and our Terms of Service.

Contact and mailing address: see our Terms of Service, or email [email protected].

Information we collect

Depending on how you use the Service, we may collect:

We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

How we use information

We use personal information to:

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising as those terms are commonly used under the CCPA. We do not use your email for third-party advertising audiences unless we clearly ask and you opt in.

Product updates and email

If you have purchased a token or linked Patreon to your account, we may email you about new pack releases and similar product updates. Accounts with no purchase and no Patreon link are not added to that list. These messages include an unsubscribe link (handled through Resend’s suppression list). Transactional messages such as magic-link sign-in and order confirmations are separate and may still be sent when needed to operate your account.

Service providers (processors)

We share information with vendors who process it on our behalf to run the Service:

These providers process data under their own terms and privacy policies. We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, sale, or similar business transfer (in which case we will require the recipient to honor this Policy or give you notice).

Cookies and similar technologies

We use cookies and similar technologies for:

You can block cookies in your browser, but sign-in and checkout may not work without strictly necessary cookies. We do not place advertising trackers as a core part of the Service.

EEA / UK note: cookies that are strictly necessary to provide the Service (sign-in, cart, security) do not require consent. Where analytics cookies require consent under local law, you may use browser controls to block them, or contact us if you want us to help limit analytics associated with your use. We do not currently show a separate cookie-consent banner.

Browser extension and Foundry module

Our browser extension and Foundry VTT module talk to Fantasy Forgeworks APIs to browse and download content you are entitled to. They store connection settings (such as an API key and server URL) locally on your device. We store only a hash of module API keys on our servers, plus usage metadata such as last-used time. Neither companion app ships third-party advertising or analytics SDKs as part of the Service.

International transfers

We are based in Canada. Vendors may process data in Canada, the United States, and other countries. By using the Service, you understand that your information may be transferred to and processed in those locations, which may have different privacy laws than your home country.

Retention

We keep account, order, and entitlement records as long as needed to provide the Service, maintain your library, handle disputes/refunds, and meet legal or accounting obligations. If you delete your account, we remove or de-identify personal data we no longer need, except records we must retain (for example paid invoices and order history needed for tax, fraud, or accounting) for a limited period.

Security

We use industry-standard safeguards such as HTTPS/TLS in transit and access controls on production systems. Card payments are handled by Stripe; we do not store full payment card numbers. No method of transmission or storage is perfectly secure.

Your choices and rights

You can update account details through the Service where available, disconnect Patreon from your account settings, revoke module API keys, unsubscribe from product-update emails, and contact us to correct information or request deletion. You may also have rights under applicable privacy laws (for example access, correction, deletion, or portability under PIPEDA in Canada, GDPR if you are in the EEA/UK, or CCPA if you are a California resident).

To exercise a rights request, email [email protected]. We may need to verify your identity. We aim to respond within 30 days (or sooner if required by law). We will not discriminate against you for exercising privacy rights. If we refuse a request where the law allows, we will explain why.

EEA / UK (GDPR) notes

Where GDPR applies, we process personal data to perform a contract with you (account, purchases, downloads), with your consent where required, and for legitimate interests such as securing and improving the Service and sending product updates to existing customers, balanced against your rights. You may have rights to access, rectify, erase, restrict, object, or port your data, and to lodge a complaint with a supervisory authority.

California (CCPA) notes

We collect the categories described above (identifiers, commercial information, and internet / technical activity) from you and from sign-in or payment partners, and use them for the purposes listed in this Policy. We do not sell personal information and we do not share personal information for cross-context behavioral advertising. California residents may request know/access and delete rights via the contact email above.

Third-party links

The Service may link to sites we do not control (for example Patreon or payment pages). Their privacy practices apply once you leave Fantasy Forgeworks.

Changes

We may update this Policy to reflect the Service or legal requirements. We will change the “Updated” date above and, for material changes, provide notice through the Service when practical. Continued use after an update means you accept the revised Policy.

Contact

Privacy questions or requests: [email protected]