Privacy Policy

NorwegianSpark SA (“we”) operates contentforger.com. This policy explains what we collect and why.

Data we collect

Email and name (Supabase Auth), payment metadata (Stripe), project content you create (Supabase), and anonymous usage analytics (PostHog Inc., United States — only with your consent).

Analytics and transfers outside the EEA

If you accept analytics, usage data is sent to PostHog Inc. and processed in the United States. PostHog states in its Data Processing Agreement that it participates in the EU-U.S. Data Privacy Framework, the UK Extension to it and the Swiss-U.S. Data Privacy Framework, and the agreement also incorporates the EU Standard Contractual Clauses. If you decline, nothing is sent to PostHog.

Who processes your data

We use these service providers to run ContentForger:

• Anthropic PBC (United States) — the prompts you submit (in the app, the demo, briefs and the API) are sent to Anthropic's Claude API to generate the code.
• Supabase — sign-in, your account, and your generations and projects.
• Stripe — subscriptions and payments. We never see or store card numbers.
• Resend — account, billing and newsletter emails, and messages you send us through the contact form.
• Sentry — error reports, so we can fix what breaks.
• Cloudflare — hosting and delivery of the site.
• Upstash — rate limiting, which keeps your IP address in a short-lived counter (hours, not days).
• PostHog Inc. (United States) — analytics, only if you accept them (see above).
• Google (AdSense) — shows ads on our articles and tutorials. Google uses cookies to serve and measure ads; in the EEA, UK and Switzerland it asks for your consent first. See how Google uses data from sites that use its services.

How we use it

To run your account, process payments, and improve the product. We never sell your data.

Your code is yours — never used to train AI

We do not use your prompts, project briefs or generated code to train AI models, and we don't sell or share them for training. Anthropic, which runs Claude for us, does not train its models on data sent through its commercial API either (Anthropic Commercial Terms). Your builds are private: only you can see them, unless you choose to publish one to the Library or share a 7-day preview link — and you can remove either at any time.

Your rights

Access, export, or delete your data any time via your data rights, or email thomaslien@norwegianspark.com. We respond within 30 days (GDPR Art 12(3)). Signed in, you can also download your data or delete your account under Settings. You may complain to the Norwegian Data Protection Authority (Datatilsynet).

Who we are

NorwegianSpark SA, Org no: 834 984 172, Tveitagarden 4, 5357 Fjell, Norway — the controller for the data described here.

Cookies

We use essential cookies for authentication, analytics only with your consent, and Google AdSense advertising cookies on our articles (with Google's own consent message in the EEA, UK and Switzerland). Full list and how to change your choice: cookie policy.