LocalForge

LocalForge Privacy Policy

Draft — have it reviewed before publishing.

Last updated:

LocalForge is a PHP development environment that runs on your Windows computer. It is made by Clavix Digital, a BIR-registered business in the Philippines. Contact: hello@clavixdigital.com.

The short version

LocalForge has no telemetry: no analytics, no crash reporting, no tracking, no ads, no account. Your projects, databases and settings stay on your computer. LocalForge only connects to the internet for the four things below.

When LocalForge connects to the internet

  1. Downloading runtimes you choose (PHP, Apache, MySQL, MariaDB, Node.js, Composer and so on). Files come from our download mirror (localforge.mjdc1337.workers.dev) or directly from the vendor (for example downloads.php.net, apachelounge.com, cdn.mysql.com, archive.mariadb.org, nodejs.org, getcomposer.org, wordpress.org, xdebug.org, github.com, curl.se, Microsoft). As with any download, these servers see your IP address and the file requested.
  2. App updates (direct-download edition only). LocalForge asks localforge.mjdc1337.workers.dev whether a newer version exists at startup (you can turn this off in Settings) and when you check manually. The Microsoft Store edition is updated by the Store under Microsoft's privacy statement.
  3. License activation (paid licenses only). When you enter a license key, LocalForge sends the key and a device label (LocalForge on <your computer name>) to Lemon Squeezy to activate it, then re-checks it at most about once a week. Lemon Squeezy's answer includes the license status and the email address used for the purchase; LocalForge stores it encrypted on your computer (Windows DPAPI). Free personal use sends nothing. See the Lemon Squeezy privacy policy.
  4. Commands you run. Composer, npm, git, WordPress, your own sites and other tools you run through LocalForge connect to whatever services they use, under those services' policies.

Our server

The download mirror and update server run on Cloudflare Workers. Cloudflare may log request details such as IP address, user agent and requested URL to operate and protect the service. We do not use these logs for analytics or advertising or to identify you. See the Cloudflare privacy policy. [DECIDE: state how long Worker logs are kept, or that Worker logging is off.]

Purchases

Purchases are processed by Lemon Squeezy, the merchant of record: they handle payment, tax and invoices. We receive the order details they share with sellers (such as your name, email, country and what you bought) to provide your license and support. We keep a sales log (order number, email, product, amount, status and license key) in our Cloudflare database to support you and meet tax record-keeping rules. We never see your full card details.

This website

localforge.clavixdigital.com uses no analytics, tracking or advertising cookies. The only cookies are set when our staff sign in to the admin area (with Google sign-in).

Email

If you email us, we keep the conversation to answer you.

Your rights

Depending on where you live (for example under the EU GDPR or the Philippine Data Privacy Act of 2012) you may ask to see, correct or delete personal data we hold about you. Email hello@clavixdigital.com. Purchase records may have to be kept for tax law.

Changes

If this policy changes, we will update it here and change the date at the top.