Privacy Policy

1. What we collect

When you create an account, we collect:

• Email address. Used for sign-in, account recovery, team invites, and important account or security notices.
• Display name. Shown on your designs and team rosters. You don't have to use your real name.
• Authentication credentials. Either a password (stored as a salted hash, never in plain text) or, if you sign in with Google, an opaque identifier from your Google account.
• Account preferences. Your unit system (metric or imperial) and similar settings.

As you use the service, we also collect:

• Your content. Rocket designs, simulation runs, team memberships, and shared-design configurations you create.
• Usage events. Internal logs of meaningful actions you take (such as creating a rocket, running a simulation, importing a file). Used to understand how the product is used and to debug problems.
• Technical information. When something goes wrong, our error tracking captures details about the error, the request, your browser, and an approximate location derived from your IP address. This helps us fix bugs.
• Aggregate analytics. Page views and basic visit data, collected by Vercel Analytics in aggregated, anonymized form.

2. How we use it

• To operate, maintain, and improve the service.
• To authenticate you and keep your account secure.
• To send you transactional emails: verification codes, password resets, team invites, and important service notices.
• To respond when you contact us.
• To diagnose bugs, investigate abuse, and protect the service.
• To understand how features are used so we can prioritize what to build next.

We do not use your designs, simulation results, or other content for advertising, profiling, or to train machine learning models.

3. Service providers we use

We rely on a small set of trusted infrastructure providers (sometimes called “subprocessors”) to run the service. They process limited information on our behalf, under their own privacy commitments:

• Vercel hosts our website and provides aggregate analytics.
• Railway hosts our backend API and database.
• Sentry records error and performance data when something fails.
• Resend delivers transactional emails (verification, invites, password reset).
• Google handles sign-in if you choose “Sign in with Google.”
• Ko-fi powers the optional donation widget on some pages.

We do not sell your personal information, and we do not share it with third parties for advertising or marketing.

4. Cookies and local storage

RocketForge uses your browser's local storage to keep you signed in (we store JWT access and refresh tokens there). We do not set advertising cookies and we do not use third-party tracking pixels. Some embedded widgets, such as Ko-fi, may set their own cookies if you interact with them.

5. Data retention and deletion

We keep your account data for as long as your account is active. You can delete your account at any time from the settings page. When you do, we delete your designs, simulations, team memberships, and personal information from our active systems. Backups are retained for a short period before being overwritten.

We may retain limited records (such as sign-up timestamps or security logs) for legitimate operational reasons, for example to investigate abuse or comply with legal obligations.

6. Your rights

Depending on where you live, you may have rights to access, export, correct, or delete the personal information we hold about you, and to object to or restrict certain processing. You can exercise most of these rights directly from your account settings. For anything you can't do in the app, email us at contact@rocketforge.space and we'll help.

7. Children

RocketForge is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you are a parent or guardian and believe your child has created an account, please contact us at contact@rocketforge.space and we will close the account and delete any associated information.

8. International users

RocketForge is operated from the United States, and the information we collect is processed and stored in the United States and in regions where our service providers operate. By using RocketForge, you understand that your information may be transferred to and processed in countries with data-protection laws that differ from those in your country.

9. Security

We use industry-standard practices to protect your information: HTTPS for all traffic, hashed passwords, encrypted data transit, and limited internal access to production systems. No service is perfectly secure; if you find a vulnerability, please report it to contact@rocketforge.space.

10. Changes to this policy

We may update this policy as RocketForge evolves. If we make material changes, we'll let you know in the app or by email. The “Last updated” date at the top of this page always reflects the current version.

11. Contact

Questions or concerns about this policy? Email contact@rocketforge.space. See also our Terms of Service.