1. Who we are

bibforge.com is operated by Binary Ink Studio. If you have questions about this policy or our privacy practices, contact us at contact@bibforge.com or via our contact form.

You have the right to lodge a complaint with a data protection supervisory authority at any time. We would appreciate the chance to address your concerns first — please contact us before escalating.

We keep this policy under regular review. Historic versions are available on request. Please keep us informed if your personal data changes during your relationship with us.

2. Data we collect

BibForge does not require an account and collects minimal personal data. The categories below describe what we may collect:

Contact data — email address, if you provide one for workspace recovery or to contact us.
Technical data — IP address, browser type, time zone, and device information collected automatically when you visit the site.
Usage data — pages visited, features used, and interactions with the service.
Communications data — messages you send us via the contact form.

We collect aggregated, anonymised data (e.g. feature usage statistics) which is not personal data and cannot identify you.

We do not collect special categories of personal data (race, health, religion, biometric data, etc.) and we do not collect data about criminal convictions.

3. How we collect data

Directly from you — when you submit the contact form, set up workspace recovery, or correspond with us by email.
Automatically — via server logs and similar technologies as you interact with the site. We do not use advertising trackers.
Third parties — we do not currently receive personal data about you from third-party sources.

4. How we use your data

We only use personal data where the law allows. Our main purposes are:

PurposeData usedLawful basis

Workspace recoveryContact (email)Performance of service

Responding to contact form messagesContact, CommunicationsLegitimate interest

Improving and securing the serviceTechnical, UsageLegitimate interest

Complying with legal obligationsAny relevant dataLegal obligation

We do not use your data for advertising or share it with third parties for marketing purposes. We do not send marketing emails.

5. Sharing your data

We do not sell your personal data. We may share it only in the following cases:

Infrastructure providers — our hosting provider (DigitalOcean) processes technical data as part of running the service. They are contractually bound to protect your data and may not use it for their own purposes.
Legal requirements — we may disclose data where required by law or to protect the rights and safety of our users.
Business transfer — if we sell or transfer all or part of the service, personal data may transfer to the new operator under the same protections.

6. International transfers

We do not transfer your personal data outside the European Economic Area (EEA). Our infrastructure is hosted within the EEA.

7. Data security

All data is transmitted over HTTPS. Workspaces are isolated by UUID — without your workspace link, no one can access your data.

We have procedures in place to detect and respond to personal data breaches and will notify you and any applicable regulator where legally required.

8. Data retention

We retain personal data only as long as necessary to fulfil the purposes for which it was collected, or as required by law.

Recovery email addresses are retained until you remove them from your workspace settings or delete your workspace.
Contact form messages are retained for up to 24 months to allow us to respond to follow-up queries.
Technical and usage data in server logs is retained for up to 90 days.

We may anonymise data for statistical purposes, in which case it is no longer personal data and may be retained indefinitely.

9. Your rights

Under applicable data protection law you have the following rights. To exercise any of them, contact us at contact@bibforge.com.

Access

Request a copy of the personal data we hold about you and verify we are processing it lawfully.

Correction

Ask us to correct inaccurate or incomplete data we hold about you.

Erasure

Ask us to delete your personal data where there is no good reason for us to continue processing it.

Object

Object to processing based on legitimate interest where you feel it impacts your fundamental rights.

Restriction

Ask us to suspend processing of your data — for example while we verify its accuracy.

Portability

Request your data in a structured, machine-readable format so you can transfer it to another service.

Withdraw consent

Withdraw consent at any time where we rely on consent to process your data. This does not affect prior processing.

We will respond to all legitimate requests within one month. We may need to verify your identity before fulfilling a request. We will not charge a fee unless your request is clearly unfounded or excessive.

10. Third-party links

Our site may link to external websites. We are not responsible for their content or privacy practices. We encourage you to read the privacy policy of any site you visit.

Privacy policy