Privacy Policy

Doughnut Forge is built on a zero-knowledge, local-first architecture. This means we do not collect, transmit, store, or have any access to your data, except information you choose to send us directly (see Section 3).

1. Data Storage & Deletion

All cryptographic keys, .vltc2 identities, and .vlt2 files generated by Doughnut Forge are stored exclusively on your local device. No information leaves your device unless you explicitly export and share a file yourself. Uninstalling the app removes the software, but it does not remove files you have saved elsewhere on your device, or keys held in your system's credential manager (such as the macOS Keychain or Windows Credential Manager). You can delete these manually.

2. Analytics and Telemetry

Doughnut Forge contains no built-in tracking scripts, analytics engines, or crash reporters. If you download the app from the Apple App Store or Microsoft Store, Apple or Microsoft may provide us with aggregated statistics such as download counts and crash statistics. These reports do not contain personally identifiable information. You can control the sharing of diagnostic data in your device settings.

3. Support & Contact

For questions or to report a technical issue, please open a ticket on our GitHub Issues tracker. GitHub is a public platform governed by its own privacy policy, so never include sensitive or decrypted data in issue reports. For privacy-specific enquiries, please use our Privacy Contact Form. Information you submit through that form is processed by Tally (tally.so), which we use to receive your message, and is used only to respond to your enquiry.

4. Changes to this Policy

We may update this policy from time to time. Any changes will be published on this page with an updated Effective Date.

5. Your Rights and Legal Disclosures

For enquiries submitted via our contact form, we process your information on the basis of our legitimate interest in providing support. We keep messages only for as long as reasonably necessary to deal with your enquiry, and we aim to delete them periodically afterwards. If you would like your messages deleted sooner, just ask using the same form. Depending on where you live (for example, under UK data protection law), you may have the right to request access to, correction of, or deletion of your communications with us, and to lodge a complaint with the UK Information Commissioner's Office (ICO). Doughnut Forge is not directed at children under 13. If you believe a child has sent us personal information through our contact form, please let us know and we will delete it. This page is hosted on GitHub Pages. We do not add any tracking or analytics to it, but GitHub may log technical information, such as your IP address, when you visit, for security and to operate the service; see GitHub's Privacy Statement. We do not respond to Do Not Track (DNT) signals because we do not track you.

Published by Darren Corbett.