Privacy Policy

1. Introduction

LogForge Templates Registry ("we", "our", or "us") is operated by Fulcrum Technology Solutions. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services, including browsing templates, downloading packages, providing feedback, and accessing our API.

By using LogForge Templates Registry, you consent to the data practices described in this policy. If you do not agree with the practices described, please do not use our services.

2. Information We Collect

2.1 Account Information

If you create an account on our platform, we collect:

• Username (required)
• Email address (required)
• Password (stored as a secure hash, never in plain text)
• Account creation date
• Last login timestamp
• Account roles and permissions (e.g., admin, user)

2.2 OAuth Authentication

If you choose to sign in using GitHub or Google OAuth, we receive:

• Email address from your OAuth provider
• Username/display name from your OAuth provider

We do not store your OAuth provider passwords or access tokens. Your OAuth session is managed by the respective provider (GitHub or Google).

2.3 API Keys

If you generate API keys for programmatic access:

• API key names/labels you provide
• Hashed API key values (we store only cryptographic hashes, never the actual keys)
• Creation timestamps
• Last used timestamps
• Revocation status

2.4 Usage Data

When you use our services, we automatically collect:

• Download Statistics: Template ID, download type, timestamp, IP address, and user agent
• API Requests: Endpoint accessed, HTTP method, status code, response time, IP address, and user agent
• User Sessions: Login times, IP address, user agent, and session duration
• Feedback: Template ratings (1-5 stars), comments, IP address, user agent, and submission timestamps

2.5 Cookies and Tracking

We use HTTP-only cookies to maintain your authentication session. These cookies contain JWT tokens that expire after 1 hour. We do not use third-party tracking cookies or advertising trackers.

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our template registry services
• Authentication: To authenticate users, manage sessions, and authorize API access
• Analytics: To understand usage patterns, popular templates, and platform performance
• Security: To detect and prevent fraud, abuse, and unauthorized access
• Rate Limiting: To enforce API rate limits and prevent abuse (100 requests/minute for browsing, 10 requests/minute for downloads)
• Communication: To respond to user inquiries and provide support (if you contact us)
• Legal Compliance: To comply with applicable laws and regulations

3.1 Aggregated Statistics

We may publish aggregated, anonymized statistics about template downloads, usage patterns, and platform metrics. These statistics do not identify individual users.

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist in operating our platform (e.g., hosting providers, database services). These providers are bound by confidentiality agreements.
• Legal Requirements: When required by law, court order, or government regulation
• Security: To protect our rights, property, or safety, or that of our users
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)

4.1 Public Information

Template metadata, vendor information, and product details are publicly accessible without authentication. This information is synchronized from our public GitHub repository and is considered open source content.

5. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes described in this policy:

• Account Data: Retained while your account is active. You may request account deletion at any time.
• API Keys: Retained until revoked by you or deleted upon account closure
• Usage Statistics: Retained indefinitely for analytics and platform improvement
• Session Data: Automatically deleted after session expiration or logout
• Feedback: Retained indefinitely to maintain template ratings and community contributions

6. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request access to your personal data
• Correction: Update or correct inaccurate information through your account settings
• Deletion: Request deletion of your account and associated data
• Data Portability: Request a copy of your data in a portable format
• Opt-Out: Withdraw consent for data processing (note: this may limit service functionality)
• API Key Management: Create, view, and revoke API keys at any time through your account dashboard

To exercise these rights, please contact us using the information provided in Section 10.

7. Security

We implement industry-standard security measures to protect your information:

• Passwords are hashed using bcrypt before storage
• API keys are stored as cryptographic hashes
• HTTPS encryption for all data in transit
• Database access controls and security hardening
• Rate limiting to prevent abuse and DDoS attacks
• Input sanitization and XSS protection
• Regular security audits and updates

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Third-Party Services

8.1 OAuth Providers

When you use GitHub or Google OAuth, you are subject to their respective privacy policies:

• GitHub Privacy Statement
• Google Privacy Policy

8.2 Hosting and Infrastructure

Our platform is hosted on third-party infrastructure (e.g., Render.com). These providers have their own privacy and security policies. We recommend reviewing their terms of service and privacy policies.

9. Children's Privacy

LogForge Templates Registry is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete such information promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify users of material changes by updating the "Last updated" date at the top of this page and, when appropriate, through email notification or prominent notice on our website.

Your continued use of LogForge Templates Registry after such changes constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

12. Open Source and Transparency

LogForge Templates Registry is an open-source project. The source code for this platform is available on GitHub. We are committed to transparency in our data practices and encourage community review of our privacy and security implementations.

This Privacy Policy is version-controlled and changes are tracked in our repository. You can view the history of this document to see how our privacy practices have evolved.