SteelForge — Privacy Policy

Last updated: 22 October 2026

1. Introduction

SteelForge (“we”, “us”, or “our”) is a hobby project that provides an AI-powered tool for generating Minecraft-related builds from text prompts, images, or a combination of both.

This Privacy Policy explains how personal information may be collected, used, stored, and shared when you visit or use SteelForge.

We aim to handle personal information in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch privacy laws.

2. Who to contact

For privacy questions, data requests, or other enquiries, contact:

SteelForge

Email: [email protected]

Where required by law, the identity and contact details of the person responsible for processing personal data will be provided here.

3. Information We May Collect

The information we collect depends on the features you use and how SteelForge is technically configured.

A. Prompts and uploaded content

When you use the build generator, we may process:

• Text prompts and build instructions.
• Images uploaded as references.
• Generation settings and options.
• Generated build plans and downloadable schematic files.
• Technical information associated with generation requests.

Please avoid uploading sensitive personal information or images containing personal information that is not necessary for generating a build.

B. Account information

When you create an account we store your email address, a display name derived from it, a securely hashed version of your password (never the password itself), the date the account was created, and a one-way hashed version of your IP address at sign-up (used only to give the free welcome credits once and to prevent abuse). If you sign in with Google, we also receive your Google account identifier, name and verified email address. We also keep a log of your credits (welcome bonus, purchases, builds, refunds) and a list of your builds.

C. Payment information

Credit purchases are processed by PayPal. We do not receive or store your card or bank details. We receive and store the PayPal order and transaction identifiers, the credit pack, amount, currency, payment status and the payment confirmation returned by PayPal.

Depending on the payment integration, we may receive transaction identifiers, payment status, purchase history, and subscription or credit information.

PayPal processes your payment under its own privacy statement.

D. Technical and usage information

Depending on our configuration, we may process IP addresses, browser information, error logs, usage statistics, and security-related information.

We will only collect information that is necessary for specified purposes and supported by an appropriate legal basis.

4. How We Use Information

We may process personal information to:

• Generate builds requested by users.
• Provide downloads and other requested features.
• Maintain and secure the service.
• Diagnose technical errors and prevent abuse.
• Respond to support requests.
• Process payments and refunds if paid features are available.
• Comply with legal obligations.
• Improve the service where a valid legal basis exists.

We rely on an appropriate legal basis for each processing activity, such as performing a contract, complying with a legal obligation, pursuing a legitimate interest, or obtaining consent where required.

5. AI Providers and Other Service Providers

SteelForge may use external providers for AI processing, hosting, databases, file storage, authentication, or payments.

The providers currently used are:

• AI processing: OpenAI (model GPT-6.1 Sol).
• Hosting: the operator's own computer in the Netherlands, reachable through Cloudflare (Cloudflare Tunnel), which passes the traffic to the website.
• Database and file storage: accounts, credits and generated files are stored in a local database and local files on the operator's computer.
• Payment processing: PayPal.
• Sign-in (optional): Google, only if you choose "Sign in with Google".
• Analytics and security: none.
• Website resources: fonts are loaded from Google Fonts (Google) and a 3D-preview library from cdnjs (Cloudflare); your browser connects to these services, which receive your IP address when you open the website.

Prompts and uploaded images may be sent to an external AI provider when necessary to generate a requested build.

The handling of that information depends on the provider's terms, privacy policy, and applicable configuration. We will not claim that prompts or images are never retained or used for model training unless this has been verified.

6. Sharing Personal Information

We may share personal information with service providers when necessary to operate SteelForge, process requests, provide payments, or protect the service.

We may also disclose information when required by law or when necessary to establish, exercise, or defend legal claims.

We do not sell personal information as a data product.

7. International Data Transfers

Some providers may process information outside the European Economic Area (EEA).

Where applicable, we will use a lawful transfer mechanism and appropriate safeguards in accordance with the GDPR.

The countries and safeguards involved depend on the providers actually used by SteelForge.

8. Cookies and Similar Technologies

SteelForge may use necessary cookies or similar technologies to provide essential website functionality and maintain security.

If we use analytics or advertising technologies that require consent, we will request consent before activating them where required by law. Users must be able to withdraw consent as required.

SteelForge uses only necessary cookies: sf_session keeps you signed in (up to 30 days, removed when you sign out) and sf_gstate protects the Google sign-in (10 minutes). The website also remembers your language choice and beta code in your browser (local storage). When you buy credits, PayPal loads its own payment window and may set its own cookies. SteelForge uses no analytics or advertising cookies.

9. Data Retention

We retain personal information only for as long as necessary for the relevant purpose or as required by law.

Account information and your credit log are kept as long as your account exists; you can ask us to delete your account at [email protected]. Payment records are kept as long as required for tax and accounting obligations. Generated builds and server logs are kept for operation, support and abuse prevention and are removed when no longer needed.

Where information is no longer needed, we will delete or anonymise it where appropriate and technically possible.

10. Your Privacy Rights

Subject to applicable legal conditions, you may have the right to:

• Request access to your personal information.
• Correct inaccurate information.
• Request deletion of your information.
• Request restriction of processing.
• Object to certain processing activities.
• Request data portability where applicable.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

To exercise your rights, contact [email protected].

We may request reasonable information to verify your identity where necessary to protect your information.

11. Children's Privacy

We do not knowingly process children's personal information unlawfully. If you believe that personal information has been collected inappropriately, contact us at [email protected].

Any age restrictions and parental-consent requirements will be determined according to applicable law and the intended audience.

12. Security

We aim to use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, or disclosure.

No system can guarantee absolute security. We will respond to security incidents in accordance with applicable legal requirements.

13. Changes to This Policy

We may update this Privacy Policy when SteelForge's features, data processing, or legal obligations change.

The latest version and its update date will be published on this page.

14. Contact

For privacy-related questions or requests:

Email: [email protected]

SteelForge will provide any additional identity information required by applicable law.