Privacy policy
VialForge is a personal log for injections and related measurements. This policy explains what it stores, why, and how to get rid of it.
What VialForge collects
- Account details: username, an optional display name, an email address, and a password stored only as a scrypt hash. The password itself is never stored and cannot be recovered.
- Health data you enter: the compounds you log, amounts, dates and times, injection sites, effectiveness ratings, notes, side effects and their severity, body weight, body fat, waist measurement and blood glucose.
- Inventory: vials you add, their strength, diluent volume, dates and cost.
- Where you came from: when you create an account we save the site or link that sent you (for example google.com), any campaign tag on that link (such as utm_source), the page you landed on, and your answer to the optional "How did you hear about VialForge?" question. It stays with your account and is used only to see which channels bring people in.
- Technical data: a session cookie, and server logs containing IP addresses and request paths, kept for troubleshooting.
There is no analytics SDK, no advertising SDK, and no third-party tracker in VialForge. The source note above is first party: it is kept in your own browser until you sign up (if you follow one of our links into the app, the note is passed along in that link), then stored with your account. Nothing you log is sold, rented, or shared for marketing.
To count visits to our pages, our server turns each visit into an anonymous code that changes every day. We delete the codes the next day and keep only the daily totals. This count doesn't store your IP address or browser details, and visits from the Android app aren't counted at all.
Why
Solely to provide the app: to show you your own history, calculate concentrations and estimates from figures you supply, and send reminders you have asked for.
Who else sees it
- Nobody, by default. Your log is visible only to your account.
- Household sharing is opt-in and narrow. If you mark a vial as shared, other members of a household you joined can see that vial and draw doses from it. Your own doses, peptide library, protocols, weight and side effects are never shared.
- Service providers. Email is sent through Resend solely to deliver email-confirmation links, password reset links, username reminders, and security notices about your account (such as a change of email address), plus one short goodbye note when you delete your account. Payment, if you subscribe on the website, is handled by Stripe; purchases in the Android app are made through Google Play. VialForge receives only whether a purchase is active and when it renews, and never sees your card details. When you create an account, the sign-up form may use Cloudflare Turnstile to check that you are not a bot; Cloudflare receives your IP address and browser details for that check only.
Where it lives
On a private server operated by the developer, not a third-party cloud database. Traffic is encrypted in transit with HTTPS.
Your choices
- Export: your data is downloadable from the app at any time.
- Delete: see deleting your account. Deletion is immediate and permanent.
- Email: needed to create an account, so we can confirm it is yours and so you can reset your password. Reset links and username reminders are only sent to an address you have confirmed from the link we email you. Accounts made before this was required may not have one; without one, password reset is not possible.
- Notifications: off until you turn them on, and revocable in your browser or device settings.
Children
VialForge is not intended for anyone under 18 and is not directed at children.
Changes and contact
Material changes will be announced in the app. Questions, or requests about your data: info@getforgeworks.com.