Privacy Policy

LFGForge ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

LFGForge is operated as an independent project. For privacy-related enquiries, contact us at support@lfgforge.app.

When you use LFGForge we collect:

• Account data from Discord: your Discord user ID, global display name, and avatar URL — provided by Discord when you sign in via OAuth.
• Profile data you provide: timezone, availability windows, preferred languages, playstyle, communication preferences, and game-specific field selections. These are all structured choices — we collect no free-text input.
• Technical data: your IP address and request logs, collected automatically by our hosting provider (Vercel) for security and operational purposes.
• Terms acceptance record: the date and version of the Terms of Service you accepted.
• Discord server memberships:the names and IDs of Discord servers you belong to, fetched from Discord's API each time you sign in. This data is used to power server-scoped search and visibility controls — it is never shown to other users and is deleted when your account is deleted.

We process your data on the basis of contract (providing the LFGForge service you signed up for) and legitimate interest (operating a secure and functional platform). We do not sell your personal data.

• To display your profile to other authenticated LFGForge users for matching purposes.
• To compute compatibility scores between you and other players.
• To maintain your session and authenticate your identity on return visits.
• To power server-scoped search and per-server visibility controls using your Discord server memberships.
• To enforce our Terms of Service and maintain platform security.

• Discord — provides OAuth authentication and, with your permission, your server membership list. Your use of Discord is subject to Discord's Privacy Policy.
• Vercel— hosts the LFGForge application and database. Data is stored in Vercel's infrastructure (United States).
• Amazon Web Services (AWS) — provides object storage (Amazon S3, United States) where we archive pseudonymized operational telemetry such as feature-usage events and error and request logs. IP addresses are irreversibly hashed before storage and the records are keyed only by an internal account identifier, never your Discord identity. Your use of AWS is subject to AWS's Privacy Notice.

We retain your data for as long as your account is active. If you delete your account (see Section 8), all personal data associated with your account is permanently deleted, including your Discord server memberships and visibility settings. Your server membership list is also refreshed (replaced) on every sign-in. Vercel's infrastructure logs may retain anonymized technical data for up to 30 days in accordance with Vercel's own data retention policy.

Separately, we archive pseudonymized operational telemetry — feature-usage events, error logs, and request logs with irreversibly hashed IP addresses — to Amazon S3 for security, debugging, and product-analytics purposes. Because these records contain no directly identifying information (they reference only an internal account identifier, and IPs are hashed before storage), they are retained indefinitely and are not automatically removed when an account is deleted.

LFGForge is hosted in the United States. If you access the service from the EU or UK, your data is transferred to and processed in the US. These transfers are covered by Vercel's Standard Contractual Clauses and adequacy decisions where applicable.

Depending on your location, you may have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you.
• Right to rectification — update inaccurate data via your profile settings.
• Right to erasure — permanently delete your account and all associated data from the Settings section of your profile page.
• Right to portability — request your data in a portable format.
• Right to object — object to processing based on legitimate interest.

To exercise any right other than account deletion (which is self-serve), contact us at support@lfgforge.app. We will respond within 30 days.

LFGForge uses only strictly necessary cookies — a session cookie maintained by Auth.js to keep you signed in, and short-lived cookies to propagate state changes (such as profile completion or terms acceptance) between server requests. These cookies are essential for the service to function and do not require your consent under applicable law.

We do not use advertising, analytics, or tracking cookies.

We may update this Privacy Policy from time to time. Material changes will be communicated via the LFGForge interface. Continued use of the service after an update constitutes acceptance of the revised policy.

Privacy questions or requests: support@lfgforge.app