← Back

Privacy Policy

Last updated: September 2026

Data Controller

Forge Industries — Sole Proprietorship registered in France (SIRET: 101 228 617 00011).

Data We Collect

Email address — collected when you join the waitlist or purchase a license.

Payment information — processed directly by Creem.io. We do not store card details.

Installation telemetry — when you install the desktop app, it reports how the installation and setup went. This covers a random installation identifier, the app version, your operating system, its version and architecture, your language setting, and which steps of the installation and onboarding were reached, failed, or abandoned.

Update checks — the desktop app asks our server whether a newer version exists. That request records the same installation identifier, the version you are running, and your operating system, so we can tell how many installations are still in use and how quickly a new version is adopted. Repeated checks from one installation within the same hour are recorded once.

Usage statistics: the desktop app reports how its features are used, as counts and settings. Requests it makes to our server include the installation identifier. None of this contains the sites or apps you block or the contents of your lists.

Uninstall feedback: if you remove the desktop app, a page may ask why. What you answer is stored.

The installation identifier is generated at random on your machine. It is not derived from your hardware, your network, or any account.

Desktop App — Local Data

The sites and apps you block and the contents of your lists stay on your device. They are never sent to our servers or to any third party.

Referral Links & Cookies

We sometimes hand out a tracked link of the form coregent.app/r/name so we can tell which video, article or newsletter actually brought people here. If you arrive through one, we store two first-party cookies for 30 days: the name of the source you came from, and a random identifier that lets us count one browser once instead of counting every visit as a new person.

That identifier is generated at random. It carries no name, no email address and no account, it is not shared with the source that referred you, and it is never used to build a profile or to show you advertising. If you later give us your email address to download the app or join the waitlist, we record that the source you came from produced one download — storing a one-way fingerprint of your address rather than the address itself, so that the same person is not counted twice.

These are internal audience-measurement cookies, strictly limited to producing anonymous statistics, with no cross-site tracking and no third party involved, which is why the site does not ask for consent before setting them. Legal basis: legitimate interest. You can delete them at any time from your browser settings.

Purpose & Legal Basis

Your email is used solely to notify you about the product launch and deliver your license. Legal basis: legitimate interest and contractual necessity.

Installation telemetry, update checks, usage statistics and uninstall feedback are used to improve the product and to count how many installations are in use. Legal basis: legitimate interest.

Advertising Measurement (Reddit)

We advertise on Reddit, and this site loads the Reddit Pixel to measure which ads lead to visits, downloads and purchases. The pixel is a script served by Reddit: it reports the pages you visit here and sets a Reddit cookie (_rdt_uuid) on this site. If you arrived from a Reddit ad, we also keep that ad's click identifier in a first-party cookie (cg_rdt_cid) for 30 days.

When you download the app, join the waitlist or buy Gold, our server tells Reddit that it happened, along with a one-way SHA-256 fingerprint of your email address, your IP address, your browser's user agent and the identifiers above. Reddit uses them to match the event to an ad; it never receives your email address itself. For a purchase, the amount and currency are included.

Reddit processes this data under its own privacy policy. You can block the pixel with any content blocker, or delete its cookies from your browser settings.

Third-Party Processors

  • Brevo — email delivery (France/EU)
  • Creem.io — payment processing
  • Vercel — website hosting (US)
  • Neon — database (US, encrypted)
  • Reddit — advertising measurement (US)

Browser Extension

The Coregent browser extension communicates exclusively with the Coregent desktop application running locally on your device via localhost. No browsing data, visited URLs, or any other information is transmitted to our servers or any third party. The extension cannot function without the desktop app running locally.

Data Retention

Waitlist emails are deleted upon your request or within 12 months of the product launch. Purchase records are retained for 10 years as required by French accounting law. Telemetry events are deleted after 90 days. A summary per installation is kept after that.

Your Rights (GDPR)

You have the right to access, correct, or delete your personal data at any time. To exercise these rights, contact us at contact@coregent.app. You may also lodge a complaint with the CNIL (cnil.fr).