Privacy Policy
Last Updated:
1. Introduction & Overview
At OmniForge Studio ("OmniForge", "we", "us", or "our"), we believe that great software starts with respecting user privacy and fostering trust. This Privacy Policy governs your use of our primary website (omniforgestudio.com) and details how we handle information across our digital software ecosystem. We are committed to transparency and compliance with global privacy regulations, including the European Union General Data Protection Regulation (GDPR) and the Republic of Türkiye Law on the Protection of Personal Data (KVKK Law No. 6698).
2. Applications & Local-First Architecture (CatchSpace & LofiForge)
Our software ecosystem is built on a fundamental architectural principle: privacy by design and local execution. When you use our downloadable desktop utility CatchSpace (CatchSpace.exe) or our interactive web audio utility LofiForge, your data stays entirely under your control:
- CatchSpace: CatchSpace operates 100% locally on your computer. Files dragged onto the desktop dropzone shelf or manipulated via the clipboard are never read, uploaded, analyzed, or transmitted to any remote servers or cloud infrastructure. CatchSpace stores your active shelf items (file paths, text snippets, and URLs) strictly on your local device in
%APPDATA%\CatchSpace\catchspace_data.jsonto persist your shelf across sessions. When you remove an item from the shelf, it is permanently deleted from your local storage. Furthermore, CatchSpace includes a system tray option to run on Windows startup (configured locally via the Windows Registry atHKCU\Software\Microsoft\Windows\CurrentVersion\Run) so your shelf is immediately available on boot; you can toggle this feature on or off at any time directly from the system tray menu. CatchSpace contains zero telemetry or background reporting services. - LofiForge: Audio synthesis and ambient track playback run locally in your web browser utilizing the client-side Web Audio API. No listening data, ambient sound combinations, or volume configurations are transmitted to our servers.
3. Website Telemetry & Google Analytics 4 (GA4)
Our website utilizes Google Analytics 4 (GA4), a web analytics service operated by Google Ireland Limited (for users in the European Economic Area and Switzerland) and Google LLC (for users elsewhere). Google Analytics uses cookies and client identifiers to collect information regarding your interaction with our site, including pages viewed, session durations, referring URLs, approximate geographic location (country and city derived from anonymized IP addresses), browser specifications, and device operating systems.
Our implementation utilizes GA4 Measurement ID G-7J8SGWLF0B. We have enabled privacy-first configurations: IP anonymization is permanently enabled by default, and raw IP addresses are never written to disk or permanently retained by Google. In accordance with Google Consent Mode v2, analytics cookies (such as _ga and _ga_*) are set on your device only after you grant affirmative consent through our Consent Management Platform (CMP). You can withdraw your consent at any time via our cookie settings or install the Google Analytics Opt-out Browser Add-on.
4. Advertising & Google AdSense Disclosures
We partner with Google AdSense to display advertisements on select pages of our website. Google and its certified third-party vendor networks use cookies (such as __gads, __gpi, and IDE) to serve advertisements based on your prior visits to our website or other sites across the internet.
Our AdSense integration operates under Publisher ID ca-pub-3614084721427076. In strict compliance with Google's EU User Consent Policy and IAB TCF v2.2 standards, users residing in the European Economic Area (EEA), the United Kingdom, and Switzerland are served personalized advertisements only when explicit consent is granted via our certified Consent Management Platform. If consent is refused, non-personalized or contextual advertisements are served that do not rely on tracking cookies. You can manage your personalized advertising preferences at Google Ads Settings or through aboutads.info.
5. Contact Inquiries & Form Processing (Web3Forms)
When you contact us using our contact form on contact.html, your inquiry is securely processed and routed via Web3Forms (an automated email relay service, endpoint: https://api.web3forms.com/submit, using Access Key: d9114321-27d5-42c8-bfd3-92741a41c796). The personal data transmitted includes your name, email address, message body, and transient technical headers necessary for anti-spam verification.
This submission is transmitted over an encrypted TLS connection directly to our administrative email inbox ([email protected]). Web3Forms acts as a transient data processor and does not sell or maintain persistent copies of your contact information. We retain inquiry correspondence only as long as necessary to resolve your request and maintain support continuity.
6. Data Retention Schedule
We adhere to strict data minimization principles. Below is our formal data retention schedule matrix:
| Data Category | Service / Processor | Purpose | Retention Schedule |
|---|---|---|---|
| Analytics Data | Google Analytics 4 | Usage aggregation and traffic metrics | User & event-level data retained for 2 months (up to 14 months maximum), then automatically deleted |
| Advertising Cookies | Google AdSense | Ad delivery and frequency capping | Cookies expire after 13 months unless cleared earlier by user |
| Contact Inquiries | Web3Forms / OmniForge Mailbox | Support inquiries and direct communication | Retained for 12 months post-resolution, then permanently deleted |
| Local Application Data | CatchSpace & LofiForge | Client-side shelf persistence and web audio mixing | Stored strictly locally on your device (in catchspace_data.json); zero server transmission. Shelf data is permanently erased locally when the user deletes an item or uninstalls the application. |
7. European Data Protection Rights (GDPR)
If you reside within the European Economic Area (EEA), the United Kingdom, or Switzerland, processing of your personal data is governed by the General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR) and applicable national laws.
7.1 Legal Bases for Processing (Article 6)
We process your data under the following legal bases: (a) Consent (Article 6(1)(a)) for analytics cookies and personalized advertising; (b) Legitimate Interests (Article 6(1)(f)) for server security, honeypot spam prevention, and service stability; and (c) Performance of a Contract / Pre-contractual steps (Article 6(1)(b)) for answering contact submissions and fulfilling software download requests.
7.2 Catalog of Data Subject Rights (Articles 15-22)
Under GDPR Articles 15 through 22, you possess the following actionable rights:
- Right of Access (Article 15): You have the right to request confirmation of whether your personal data is being processed, along with copies of that data.
- Right to Rectification (Article 16): You have the right to have inaccurate personal data corrected or incomplete data completed without undue delay.
- Right to Erasure ("Right to be Forgotten", Article 17): You have the right to obtain the erasure of your personal data where grounds apply (e.g., data is no longer necessary, consent withdrawn).
- Right to Restriction of Processing (Article 18): You have the right to restrict our processing of your personal data under specified statutory conditions.
- Right to Data Portability (Article 20): You have the right to receive personal data you provided to us in a structured, commonly used, and machine-readable format.
- Right to Object (Article 21): You have the right to object at any time to processing based on legitimate interests or direct marketing.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.
- Right to Lodge a Complaint: You have the right to file a complaint with a competent supervisory authority in your EU member state of residence.
To exercise any of these rights, please email us directly at: [email protected].
8. Turkish Data Protection Rights (KVKK Madde 11)
6698 Sayılı Kişisel Verilerin Korunması Kanunu (KVKK) Kapsamında Aydınlatma Metni
OmniForge Studio olarak ("Veri Sorumlusu"), 6698 sayılı Kişisel Verilerin Korunması Kanunu ("KVKK") uyarınca, web sitemiz ve iletişim kanallarımız üzerinden elde edilen kişisel verilerinizi (iletişim formunda ilettiğiniz ad-soyad, e-posta adresi ve mesaj içeriği) yalnızca iletişim taleplerinizi yanıtlamak ve meşru menfaatlerimiz kapsamında işlemekteyiz. Çerezler ve analiz verileri, KVKK Madde 5/1 uyarınca açık rızanız doğrultusunda işlenmektedir.
İlgili Kişi Hakları (KVKK Madde 11): Kanunun 11. maddesi uyarınca veri sahibi olarak şu haklara sahipsiniz:
- Kişisel verilerinizin işlenip işlenmediğini öğrenme,
- Kişisel verileriniz işlenmişse buna ilişkin bilgi talep etme,
- Kişisel verilerinizin işlenme amacını ve bunların amacına uygun kullanılıp kullanılmadığını öğrenme,
- Yurt içinde veya yurt dışında kişisel verilerinizin aktarıldığı üçüncü kişileri bilme,
- Kişisel verilerinizin eksik veya yanlış işlenmiş olması hâlinde bunların düzeltilmesini isteme,
- KVKK 7. maddede öngörülen şartlar çerçevesinde kişisel verilerin silinmesini veya yok edilmesini isteme,
- Düzeltme, silme ve yok edilme işlemlerinin kişisel verilerin aktarıldığı üçüncü kişilere bildirilmesini isteme,
- İşlenen verilerin münhasıran otomatik sistemler vasıtasıyla analiz edilmesi suretiyle aleyhinize bir sonucun ortaya çıkmasına itiraz etme,
- Kişisel verilerinizin kanuna aykırı olarak işlenmesi sebebiyle zarara uğramanız hâlinde zararın giderilmesini talep etme.
KVKK kapsamındaki başvurularınızı ve taleplerinizi [email protected] adresine iletebilirsiniz.
9. Contact Information & Data Controller
For questions, requests, or privacy notices regarding this Privacy Policy or our software applications, please contact our Data Controller at:
OmniForge Studio
Email: [email protected]
Website: https://omniforgestudio.com