Dryforge
GitHubPrivacy Policy
Effective October 31, 2026
This Privacy Policy describes the personal information Dryforge processes through the Dryforge plugin (the "Plugin"), the Dryforge landing page (the "Landing Page"), the Dryforge account page (the "Account Page") and the Dryforge desktop app (the "App"), the purposes of processing and the retention periods.
1. The Plugin
The Plugin does not collect or transmit any information.
2. The Landing Page
The Landing Page uses a single cookie to store your language preference (one year) and measures visits with Vercel Web Analytics, which does not use cookies.
3. The Account Page
① Information processed
Dryforge processes the following information to perform its contract with you.
| Information | Purpose | Retention |
|---|---|---|
| Account information: email address, name and profile photo, Google account ID | Identifying and signing you in; showing your account in the App; sending service emails | Within one year after account deletion |
| Beta application and approval details | Approving and operating the beta | Within one year after account deletion |
| App download records | Delivering the App and updates | 365 days |
| IP address (one-way hashed) | Preventing abuse | 30 days |
Accounts that are not approved or not used are deleted within one year.
② Google sign-in
Information received through Google sign-in is used only to sign you in, to show your account in the App, and to send service emails. Dryforge's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You may revoke access at myaccount.google.com/permissions.
③ Cookies
The Account Page uses only cookies strictly necessary for signing in. If you refuse them, you cannot sign in to the Account Page.
4. The App
① Information not collected
The following stays on your device only and is not collected by Dryforge.
| Item | Where it is kept | Sent to Dryforge's servers |
|---|---|---|
| Your work: chats, code, files, prompts, AI responses | Your computer | No. AI requests go directly from your computer to the AI provider you connect, never through Dryforge's servers. |
| AI provider API keys, and logins and payment methods you entrust to agents | Encrypted in the operating system's credential storage (such as the macOS Keychain), on your device only | No. API keys go from your device to the AI provider only. Entrusted logins and payment methods are selected by agents by name only, and the App enters the actual values into the input fields itself, so they are not provided to AI models either. |
② Required information
The following information is required to provide the App and is processed to perform the contract with you.
| Information | Purpose | Retention |
|---|---|---|
| Account email address; device name (the computer's name, which you may change), device model and operating system; App version; hashed device identifiers; last active time; feature rollout group; license records (registration, transfer, removal and Dryforge service usage); terms agreement records (version, time and device) | Registering devices, verifying licenses, displaying your registered devices, delivering updates and features | Within one year after account deletion |
③ Optional information
Usage statistics and crash reports are anonymous. They are enabled by default and can be turned off in Settings › Privacy without affecting your use of the App. Crash reports are sent only with your consent, which is requested each time a crash occurs.
| Information | Purpose | Retention |
|---|---|---|
| Usage statistics: feature and model usage counts, token counts, response times, errors, weeks of use, App version, device type, operating system version, feature rollout group, country | Improving the service | 90 days, then retained only as aggregate totals |
| Crash reports: App version, device type, operating system version, the location and cause of the error | Fixing errors | 180 days, then retained only as aggregate totals |
IP addresses are used only to determine the country and are not stored. The statistics server does not keep request logs.
5. Dryforge Connect
Dryforge Connect works only when you link your own devices. What passes between them is end-to-end encrypted, and Dryforge cannot read it.
To connect them, we process your IP address and connection time without storing them, and keep the names of the phones and browsers you link only until you unlink them.
6. Disclosure to Third Parties
Dryforge does not sell or provide your personal information to third parties.
7. Service Providers and International Transfers
Dryforge uses Cloudflare (servers, data storage, security and relaying Dryforge Connect), Resend (service emails) and Vercel (Landing Page hosting and visit statistics). These providers are located in the United States, and Cloudflare processes requests in data centers worldwide. Information is transmitted over encrypted connections.
If you are in the EEA or the UK, Dryforge processes required information on the basis of its contract with you, and optional information on the basis of its legitimate interest in improving the service. International transfers rely on the Standard Contractual Clauses in Dryforge's providers' terms.
8. Deletion
Dryforge deletes personal information automatically each day once its retention period has expired.
9. Your Rights
You may request access to, correction or deletion of, or restriction of the processing of your personal information by emailing contact@dryforge.dev. You may delete your account in the App or on the Account Page. If you are in the EEA or the UK, you may also request a portable copy of your data and lodge a complaint with your local data protection authority.
10. Security
Stored information is encrypted, and email addresses, names, profile photos and beta applications are additionally encrypted with a key held only by Dryforge's servers. Information is encrypted in transit, and access to personal information is restricted.
11. Contact
contact@dryforge.dev