Privacy Policy

STL Forge is responsible for the personal data processed through the STL Forge website and its associated store services.

For privacy-related questions, requests, or concerns, you may contact us at [email protected] or through the Contact page available on STL Forge.

Privacy requests may include requests to access, correct, delete, restrict, object to, or obtain information about the processing of your personal data, subject to applicable law.

The information we collect depends on how you interact with STL Forge.

We may process account information such as your name, email address, username, account identifiers, and authentication-related information.

When you place an order, we process the information required to complete and manage that order, including your contact information, billing information provided during checkout, purchased products, order status, payment status, transaction references, and purchase history.

We may also process information associated with digital product access, such as which STL models, packs, collections, or other digital products your account is entitled to access.

If you contact support, leave a review, subscribe to marketing communications, participate in Forge Points or other reward features, or use other interactive features, additional information described below may be collected.

Customer accounts allow users to manage orders, digital purchases, account information, downloads, Pack Library access, rewards, and other account-based features.

Account information may be retained while the account remains active and for as long as it is reasonably necessary to preserve access to purchased digital content, provide customer support, resolve disputes, prevent fraud, or comply with legal obligations.

Deleting an account does not necessarily require the immediate deletion of every record associated with previous transactions where retention is necessary for contractual, legal, security, accounting, or dispute-resolution purposes.

STL Forge uses WooCommerce to manage orders and digital purchases.

Payment transactions may be processed by third-party payment providers such as PayPal and Mercado Pago, depending on the payment option selected at checkout.

These providers may independently collect and process payment information required to authorize transactions, prevent fraud, comply with financial regulations, manage disputes, and provide their payment services. Their own privacy policies govern information processed directly by them.

STL Forge does not intentionally store full payment card numbers or card security codes in its WordPress database.

Order records may be retained for customer service, transaction history, access verification, fraud prevention, refunds, disputes, accounting obligations, and continued access to purchased digital products.

STL Forge sells downloadable digital products, including individual models, packs, collections, Ultimate Packs, and Master Vault access.

Once an eligible purchase is confirmed, the customer's account may receive access through Pack Library or other account-based areas of STL Forge.

Purchase records and entitlement information may therefore need to remain associated with an account for as long as the customer is entitled to access purchased content.

Some digital files are stored or delivered using third-party storage infrastructure, including Dropbox. When files are accessed through external infrastructure, the external provider may process technical information necessary to deliver the requested file in accordance with its own privacy practices.

STL Forge does not use Dropbox as the customer account system itself; it is used as part of the underlying file-storage and delivery infrastructure.

When you contact STL Forge through a contact or support form, we may collect the information needed to identify, understand, and resolve your request.

Contact-form submissions and associated attachments are generally retained for up to 365 days.

They may be kept longer where reasonably necessary to resolve an ongoing support request, dispute, fraud or security investigation, or legal obligation.

STL Forge has configured its current contact form so that new submissions do not store the submitter's IP address through Fluent Forms.

Customers may leave product reviews through STL Forge.

Internally, a review may be associated with information such as the reviewer's account, full name, email address, country, reviewed product, review date, rating, review content, purchase-verification status, and voluntarily uploaded images or videos.

For public display, STL Forge currently reduces the reviewer's displayed name to first name and the initial of the last name. The reviewer's country may also be displayed to show the international community of STL Forge customers.

Reviews may include a Verified Buyer indicator where the account or purchase information confirms that the reviewer purchased the relevant product.

Review images and videos are voluntarily submitted by the reviewer and may be publicly displayed alongside the review.

Reviews and the information necessary to operate them may generally be retained for as long as the review remains active or published.

Users may be permitted to edit or delete their reviews. STL Forge may also remove reviews that violate applicable rules, contain inappropriate content, disclose information that should not be public, or otherwise require moderation.

STL Forge may operate rewards, loyalty, or gamification features such as Forge Points.

Information about qualifying purchases, account activity, rewards earned, rewards redeemed, and related account activity may be processed to operate these features.

Customers may optionally provide their date of birth in connection with birthday-related Forge Points, STL rewards, or special promotions.

Providing a date of birth is optional and is not required to purchase standard STL Forge products.

During checkout, customers may separately choose whether they would like to receive review reminders and potentially earn Forge Points for sharing their experience.

This choice is optional and is separate from both the purchase itself and the newsletter subscription.

Where this option is not selected, STL Forge does not treat the customer as having consented to receive optional review-reminder marketing solely because they completed a purchase.

STL Forge uses Hostinger Reach for newsletter and email-marketing communications.

Customers and visitors may voluntarily subscribe to receive communications such as new STL releases, important collection updates, seasonal free STL models, special offers, and STL Forge news.

When someone subscribes, Reach may process information such as first name, last name, email address, subscription status, and campaign engagement information.

Newsletter consent is separate from the acceptance of STL Forge's Terms and Conditions and from completing a purchase. The newsletter checkbox is not intended to be mandatory for checkout.

Subscribers can unsubscribe at any time using the unsubscribe mechanism included in marketing emails.

After an unsubscribe request, STL Forge may retain the minimum information necessary to record the opt-out and prevent accidental future marketing.

STL Forge uses WP Statistics to understand general website usage and improve the store.

Analytics information may include page views, referral sources, approximate geographic information, and limited browser or device characteristics.

Our current WP Statistics configuration is designed to reduce identifiable analytics data. IP addresses are anonymized and hashed, full User-Agent strings are not stored, and page-view activity is not associated with logged-in WordPress User IDs.

Detailed analytics records are retained for approximately 180 days.

After that period, older analytics information is aggregated so that general historical visitor and page-view totals can remain available without preserving the same level of detailed visitor information.

STL Forge does not use WP Statistics to build advertising profiles about individual customers.

STL Forge processes limited technical information when necessary to protect the website, customer accounts, digital products, and infrastructure from fraud, spam, bots, unauthorized access, brute-force attacks, or other abusive behavior.

Security tools may process information such as IP addresses, attempted usernames or email addresses, timestamps, successful or failed login events, password-reset events, registration events, request information, and security-related technical logs.

STL Forge currently uses security tools including All-In-One Security (AIOS) and infrastructure/security services provided through Cloudflare.

AIOS security audit records are generally retained for approximately 90 days.

Specific IP addresses associated with repeated malicious or abusive activity may be retained for longer where necessary to maintain an active security block or investigate a security incident.

Automated security systems may temporarily restrict suspicious traffic. These protections are intended to secure the website and do not make decisions about a person's contractual, employment, credit, or similar legal rights.

STL Forge and the services integrated with the website may use cookies, local storage, session identifiers, or similar technologies.

Some are required for essential functions such as keeping items in a shopping cart, maintaining login sessions, processing checkout, securing accounts, remembering website preferences, or preventing malicious activity.

Third-party services integrated into payment, security, email, or other website functionality may use their own technologies in accordance with their respective privacy policies.

Where applicable law requires consent for a non-essential technology, STL Forge will apply the appropriate consent mechanism.

STL Forge relies on third-party providers where necessary to operate the store.

These may include Hostinger for hosting and related infrastructure, Hostinger Reach for optional email marketing, PayPal and Mercado Pago for payment processing, Cloudflare for network protection and security services, and Dropbox for parts of the digital-file storage and delivery infrastructure.

STL Forge may also use WordPress, WooCommerce, and related plugins installed within its website infrastructure to manage accounts, purchases, analytics, reviews, security, forms, rewards, and digital access.

Providers may receive only the information reasonably necessary for the service they perform, subject to their respective roles and privacy terms.

STL Forge serves customers internationally and uses service providers that may operate infrastructure outside Chile.

As a result, certain personal data may be processed, stored, or transmitted in countries other than the country where the customer resides.

Where required by applicable law, STL Forge will use appropriate safeguards or service arrangements for international processing and transfers.

STL Forge follows the principle that personal data should not be retained longer than reasonably necessary for the purpose for which it was collected.

Where an exact period cannot reasonably be fixed in advance, information is retained according to the purpose for which it is needed and applicable contractual or legal requirements.

Depending on the activity, STL Forge may process personal data because it is necessary to perform a contract with you, to take steps requested by you before entering into a transaction, to comply with legal obligations, because you have provided consent, or because STL Forge has a legitimate interest in activities such as protecting the website, preventing fraud, maintaining service security, or providing customer support.

Optional marketing communications and other activities that specifically rely on consent can be stopped by withdrawing that consent.

Withdrawal does not affect processing that was lawfully carried out before the withdrawal.

Depending on applicable law and your location, you may have rights concerning your personal data.

These may include rights of access, rectification, deletion/suppression, objection, portability, and temporary blocking of processing, subject to the requirements and exceptions established by applicable law.

You may also withdraw consent where processing is based on consent.

To exercise a privacy right, contact [email protected] or use the STL Forge Contact page.

We may need to verify your identity before completing a request in order to protect your account and personal data.

Some information may not be immediately deleted where continued processing or retention is required to perform a contract, preserve purchased digital access, meet a legal obligation, investigate fraud or security issues, or establish, exercise, or defend legal claims.

Users may request the deletion of personal information associated with their STL Forge account.

Deletion requests are assessed according to the type of information involved.

Information that is no longer required may be deleted or anonymized. Transactional records, fraud/security information, digital entitlement records, or other information may need to remain where deletion would conflict with applicable law, ongoing obligations, legitimate security needs, dispute resolution, or the continued provision of purchased content.

A request to delete marketing data or unsubscribe from marketing does not require deletion of the customer's purchase history or STL Forge account.

STL Forge currently uses certain automated workflows for operational purposes, including email automations based on events such as newsletter subscription, purchase activity, or abandoned-cart activity.

STL Forge does not currently use those marketing automations to make solely automated decisions that produce legal or similarly significant effects concerning customers.

Security systems may also automatically identify and block traffic that appears malicious or abusive.

STL Forge uses technical and organizational safeguards intended to protect personal information from unauthorized access, misuse, alteration, loss, or disclosure.

Measures may include account-access controls, security monitoring, anti-spam systems, bot protection, firewalls, login protections, limited data retention, access restrictions, software maintenance, and secured hosting infrastructure.

No internet-based service can guarantee absolute security. Users should also protect their account credentials and notify STL Forge if they believe an account has been compromised.

STL Forge does not intentionally seek to collect personal information from children who are not legally permitted to enter into the relevant online transaction in their jurisdiction without appropriate authorization.

If you believe personal data relating to a minor has been provided in circumstances where it should not have been collected, contact STL Forge so that the situation can be reviewed.

STL Forge may update this Privacy Policy when website features, integrations, legal requirements, or data-processing practices change.

The current version and its update date will remain available on the STL Forge website.

Where a change materially affects how personal data is processed, additional notice may be provided where appropriate or legally required.