Privacy policy

OriginForge is the freelance studio of Younes Ouali, based in Dellys (Boumerdès), Algeria. He is responsible for the personal data handled on this website. Contact: [email protected].

This policy follows Algerian Law 18-07 on the protection of personal data. If you live in the European Union, it also gives you the rights of the GDPR.

Your account: name, e-mail, password (stored only as a one-way hash, never readable), and what you choose to add: phone, WhatsApp, company, country, language, display currency, how you heard about the studio, and the channel and username you prefer to be contacted on.

Your projects: requests and drafts, the files you upload, messages and voice notes, proposals, the contract and its electronic signature (the name you type, the date and time, your IP address, your device, and a fingerprint of the exact text), milestones, and payments (amount, method, references and the receipts you upload).

Card details are entered on the secure pages of Chargily or PayPal and never reach this website.

Reviews: your rating, your words and the name you choose to show. They are published only if you tick the consent box and the review is approved.

Technical data: the sign-in and security cookies described in the cookie policy, and server logs (IP address, browser, pages, time) used to keep the service secure.

To run your project and the contract you sign: proposals, work, payments, delivery and maintenance.

To meet legal duties, mainly accounting: invoices and payment records must be kept.

To keep the service secure and prevent fraud (a legitimate interest): rate limits, an activity log, abuse checks.

With your consent: publishing your review. You can withdraw it at any time.

There is no advertising, no profiling and no selling of data, ever.

Only the services needed to run the platform: the hosting provider of the server, Google (to send e-mails), Chargily (card payments in Algeria) and PayPal (international payments), and a content delivery network for images and videos.

Some of these providers are outside Algeria. They only get what their task needs.

Nobody else, unless the law requires it.

Your account and projects: as long as your account exists.

Contracts, invoices and payment records: 10 years, as accounting law requires, even after an account is deleted (then without your name).

Server logs: up to 90 days.

Unsent drafts: until you send or delete them.

Every connection is encrypted (HTTPS, with strict transport security). Passwords are hashed. Sign-in attempts and forms are rate-limited.

Your files are private: each download checks that you are allowed to see it. Contracts are fingerprinted, so any change would show.

Important actions are written to an activity log. The studio account is the only one with access to client data.

You can see, correct and download your data, object to a use, and delete your account, at any time.

Most of this is self-service in Settings. For anything else, write to [email protected]: you will get an answer within 30 days.

You can also complain to the Algerian authority (ANPDP) or, in the EU, to your data protection authority.

The platform is for people of 18 and over. Accounts of minors are deleted when found.

If this policy changes in a way that matters, you will be told by e-mail and on the website before it applies.