telep forge · privacy
privacy.
what the forge studio stores, where your content goes, which cookies it sets, and how to reach us. last updated .
what we store
This describes the hosted studio at studio.telep.tools. When you use it, the Forge server stores:
| data | what it is |
|---|---|
| GitHub identity | Your GitHub account ID and login. |
| Provider credentials | Access tokens for GitHub and Vercel and, where those providers supply them, refresh tokens and expiry times. |
| Vercel team information | Which Vercel account or team you connected. |
| Website drafts | The content of each website you create, a snapshot of the previous saved state for undo, and the GitHub synchronization baselines used to detect conflicts. |
| Publishing identifiers | The repository, Vercel project, and deployment identifiers for each website. |
| Recent AI chat history | Your recent conversation with the AI editor, if you use it. |
| Session records | Your sign-in session and temporary state used during GitHub and Vercel authorization. |
We do not collect payment details. Forge does not have your GitHub or Vercel passwords.
why
- To sign you in and keep your websites separate from other users'.
- To act on your behalf on GitHub and Vercel: creating the repository, pushing content, creating the project, and reading deployment status.
- To keep your drafts, support undo, and detect when GitHub and your draft have diverged.
- To run AI chat with enough context to make the edit you asked for.
- To secure and fix the service.
We do not sell this data or use it for advertising.
where your content goes
GitHub
When you deploy, your website content is committed to a private repository on your GitHub account. Credentials and chat history are never included in the repository. GitHub's own privacy policy applies to what it holds.
Vercel
Vercel builds and hosts the site in your account or team. The deployed pages and the images they reference are public. Vercel's privacy policy applies to hosting and to the visitors of your site.
OpenAI
If you use AI chat, Forge sends the current website content, your recent conversation, and your requested edit to OpenAI to generate the edit. Forge makes these requests with OpenAI's storage option turned off, which asks OpenAI not to retain the request for later use. This is not a guarantee that OpenAI keeps no logs. OpenAI's own data policies govern what it does with requests. If you do not use AI chat, nothing is sent to OpenAI.
Image hosts
Images are added by URL. When someone views your site, or when you preview it, their browser requests each image directly from the host you linked, and that host can see the request. Forge does not proxy or copy images.
cookies
The studio sets a session cookie to keep you signed in, and short-lived cookies that hold state while you are being redirected to and from GitHub or Vercel during authorization. These are needed for the service to work. The studio does not use advertising or tracking cookies.
security
Saved records and provider credentials are encrypted on the Forge server. Access to provider accounts is limited to the permissions you granted on the GitHub and Vercel authorization screens, and you can revoke it from those providers at any time. No system is perfectly secure, and we cannot promise that data will never be exposed.
retention and deletion
- Forge keeps your drafts, identifiers, and credentials for as long as your account is connected, so that your websites remain available when you come back. We have not set fixed retention periods and do not want to claim ones we do not enforce.
- Revoking Forge's access in GitHub or Vercel stops Forge from acting on your account, but does not by itself delete the records Forge holds.
- There is no self-service deletion or disconnection control in the studio today. To have your records deleted, contact us with the GitHub login you signed in with. Deleting Forge records does not touch the repositories, projects, or sites in your own accounts.
these information pages
The pages under telep.tools/forge are static. They set no cookies and include no analytics scripts. They load fonts from Google Fonts, so your browser makes requests to Google when they render. The site is hosted on Vercel, whose infrastructure handles the requests.
contact
Questions, access requests, and deletion requests go through telep.io/contact. This page describes what Forge actually does. It is not a statement that Forge satisfies any particular privacy law, and it will be updated as the service changes.