Privacy Policy
Last updated: 23 August 2026.
Who we are (controller)
Upload‑Ready is operated by ForgeLumen Limited (“we”, “us”). This Privacy Policy explains how we collect, use, share, and protect personal data when you use Upload‑Ready (the “Service”). Contact: forgelumen6@gmail.com. Company website: https://www.forgelumen.com/.
Information we collect
Account data: if you sign in with Google, we receive your Google account ID, email, and profile name or photo as provided by Google. Service data: credits balance, plan/subscription status, compression history metadata (for example file names and sizes you choose to store when signed in), and technical logs needed to run the Service. Payment data: card and wallet details are processed by Stripe; we receive limited billing metadata (for example customer ID, subscription or checkout IDs, amount, currency, and status) to fulfill orders and prevent fraud. We do not store full payment card numbers. Usage/analytics: on public pages we may collect approximate device, browser, and usage metrics via Google Analytics (GA4). We do not upload your images to our servers for compression.
Local image processing
Image compression is designed to run in your browser on your device. We do not receive your image files for the purpose of compressing them. If you use account, payment, or other server features, related account and technical data are processed as described in this policy.
How we use data and legal bases (EEA/UK)
We use personal data to provide and secure the Service, authenticate you, manage credits and subscriptions, process payments via Stripe, communicate about the Service, improve the product, and comply with law. Where the EU/UK GDPR applies, we typically rely on: (a) performance of a contract (providing the Service you request); (b) legitimate interests (security, fraud prevention, product improvement, limited analytics) balanced against your rights; (c) legal obligation; and (d) consent where required (for example certain non-essential cookies or analytics in jurisdictions that require it). You may withdraw consent where processing is consent-based without affecting prior lawful processing.
Cookies, analytics, and third parties
We use cookies and similar technologies for sign-in sessions and security (these are necessary for the Service). We use Google Analytics (GA4) on public pages only after you accept analytics cookies in our cookie banner; Google may set cookies and process data under Google’s policies. You can change your choice anytime via “Cookie settings” in the footer. Sign-in uses Google OAuth. Hosting and related infrastructure may be provided by Cloudflare. Payments are processed by Stripe. These providers act as independent controllers or processors under their own terms and privacy policies. Blocking necessary cookies may limit sign-in or other features.
International transfers
We and our providers (including Cloudflare, Google, and Stripe) may process data in countries other than where you live, including the United States and other locations. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or the provider’s approved transfer mechanisms. Contact us if you need more information about transfers.
Retention
We keep account and billing records for as long as your account is active and as needed for operations, dispute resolution, security, and legal/tax obligations. Compression history and similar optional records may be deleted when you delete your account or earlier according to product limits. You may request deletion as described below.
Your rights (GDPR, UK GDPR, CCPA/CPRA)
Depending on where you live, you may have rights to access, correct, delete, or export personal data; to restrict or object to certain processing; and to withdraw consent. EEA/UK residents may lodge a complaint with a supervisory authority. California residents may have rights under the CCPA/CPRA to know, delete, and correct personal information, and to not be discriminated against for exercising those rights. We do not sell personal information for money. If we use analytics or advertising technologies that could be considered “sharing” under California law, you may request to opt out by contacting us. To exercise rights, email forgelumen6@gmail.com. We may need to verify your request.
Children
The Service is not directed to children under 16 (or under 13 where that is the applicable threshold, such as under COPPA in the United States). We do not knowingly collect personal data from children. If you believe a child has provided data, contact us and we will take appropriate steps to delete it.
Changes and contact
We may update this policy from time to time; the “Last updated” date will change. Material changes may be highlighted on the Service or by email where appropriate. Questions or privacy requests: forgelumen6@gmail.com.