Privacy Policy

This is the plain-English version. We tried to make it actually readable.

1. Who we are

FanForge AI is a brand and product of sellfast.now (sole proprietor: Roger Grubb) — the legally registered operator of this site and the SMS messaging program. References to "FanForge AI", "we", "us", or "our" in this policy mean sellfast.now d/b/a FanForge AI. We run www.fanforgeai.com, a worldwide K-pop fan community platform with a live globe, chat, news wire, newsletter, and (Super Fan tier) opt-in SMS alerts.

Legal entity: sellfast.now (sole proprietorship, Roger Grubb)
Brand / DBA: FanForge AI
Site: https://www.fanforgeai.com
Contact: roger@grubb.net

2. What we collect

What we do NOT collect: phone numbers, government IDs, credit card numbers, biometric data, contacts/address books, full street addresses, or content from other apps.

3. Where it lives

Most of your "profile" — XP, badges, photocards, daily check-in streak, era progress — is stored only in your own browser's localStorage. We never see it. Clear your browser data and it's gone.

Things that DO touch our servers:

• Newsletter signup — your email + prefs (and phone, only if you consented to SMS) go to a Supabase database we control, accessible only to us. SMS texts will only ever go to numbers that explicitly opted in via the SMS consent checkbox at signup, in compliance with the U.S. TCPA and Canada's CASL. Reply STOP to any text to unsubscribe SMS instantly.
• Wall posts you publish — sent to Supabase so other fans can see them
• Standard server logs — IP address, timestamp, page accessed (kept ~30 days for security/abuse prevention)

4. Who we share it with

We use a small number of processors (vendors who run on our behalf). They're contractually limited to acting on our instructions:

• Vercel — hosts the website. Sees standard request logs. Their privacy policy
• Supabase — hosts our database. Stores newsletter subscribers + wall posts. Their privacy policy
• YouTube (Google) — embedded video players. Setting their own cookies if you click play. Google's privacy policy
• jsdelivr/Cloudflare — serves some JavaScript libraries. CDN-level only.
• Twilio — sends SMS texts only to numbers that explicitly opted in (Super Fan tier with consent checkbox). Twilio sees the recipient phone number and message content for delivery. Their privacy policy

We do NOT sell your data. We do not run paid advertising on the site. We do not share your email with third parties for marketing.

5. Your rights

Depending on where you live, you have some or all of these rights. We honor them globally regardless of your jurisdiction:

• Right to know what we have about you — email roger@grubb.net
• Right to delete your data — click "Delete My Data" in your profile, or email us
• Right to correct incorrect data — visit our preferences page with your unsubscribe link, or email us
• Right to opt out of marketing — unsubscribe link in every email, instant
• Right to portability — we'll export your data to JSON/CSV on request
• Right to non-discrimination — exercising your rights doesn't degrade your experience on the site

EU/UK residents have additional rights under GDPR (lawful basis: consent for the newsletter, legitimate interest for site analytics). California residents have rights under CCPA/CPRA. Other US states (Virginia, Colorado, Connecticut, Utah, Texas, etc.) have similar laws — same rights, same email to invoke them.

6. Cookies & similar tech

We use:

• localStorage (functional, required) — stores your profile, game state, preferences. We can't deliver the experience without it. No cross-site tracking.
• Session cookies (functional) — only when you use the admin dashboard.
• YouTube/Google cookies (third-party) — only set if you actively interact with an embedded YouTube player.

We do not run Google Analytics, Facebook Pixel, TikTok Pixel, hotjar, or any other tracking SDK. See our Cookie Policy for details.

7. Children's privacy

K-pop has young fans. We take this seriously.

• FanForge AI is intended for users 13 years of age or older.
• Newsletter signup requires you to confirm you are 13+.
• If you believe a child under 13 has provided us information, email roger@grubb.net and we will delete it.
• We comply with the Children's Online Privacy Protection Act (COPPA) in the US.

8. International transfers

Our servers are in the United States. By using FanForge AI from outside the US, you understand your data crosses borders. We rely on Standard Contractual Clauses (GDPR Art. 46) where applicable for EU/UK residents.

9. Data retention

• Newsletter subscribers — kept until you unsubscribe + 30 days for log purposes; then deleted
• Wall posts — kept until you delete them, or until we close that feature
• Server logs — ~30 days then auto-purged
• Browser localStorage — under your control entirely

10. Security

We use HTTPS site-wide. Database access is restricted by row-level security (RLS) — anonymous browsers can only insert their own newsletter signup, never read the full list. Admin dashboard is password-gated. We don't store passwords for fan accounts because we don't have fan accounts in the password sense.

11. "Do Not Sell or Share My Personal Information"

We don't sell or share your personal information. Period. If you'd like written confirmation of that for your records, email us. (CCPA Sec. 1798.135.)

12. Changes

If we change anything material in this policy, we'll update the "Last updated" date at the top and announce it via the newsletter (if you're subscribed) and a banner on the site.

13. SMS / text-message program (TCPA, CTIA, A2P 10DLC)

Opt-in (how you join): SMS messaging is strictly opt-in. You join only by visiting https://www.fanforgeai.com, completing the signup splash modal that appears on first visit, choosing the Super Fan tier on the tier picker, entering your mobile number in the dedicated phone field that only appears for Super Fan, and explicitly checking the SMS-consent checkbox that says: "I consent to receive SMS texts from sellfast.now (FanForge AI) for breaking K-pop news, comeback drops, and tour alerts. Up to ~10 messages per month. Message & data rates may apply. Reply STOP to cancel, HELP for help. Consent is not a condition of any purchase." Our server records the consent timestamp.

Message frequency: Approximately 10 messages per month per subscriber (cap enforced server-side).

Message & data rates: Message and data rates may apply, depending on your carrier and plan.

Opt-out (how to leave): Reply STOP (or UNSUBSCRIBE, CANCEL, END, QUIT, STOPALL, OPTOUT, REVOKE) to any message and you will be unsubscribed immediately. You can also unsubscribe through the preferences link in the welcome email or by emailing roger@grubb.net.

Help: Reply HELP (or INFO, AYUDA) to any message for help. You can also email roger@grubb.net.

No purchase / no condition: Consent to receive SMS messages from sellfast.now (FanForge AI) is not a condition of any purchase or use of the FanForge AI website or any other service.

Carriers: Carriers (T-Mobile, AT&T, Verizon, etc.) are not liable for delayed or undelivered messages.

Data sharing for SMS: Mobile phone numbers, opt-in status, opt-out status, and consent timestamps collected as part of the SMS program are not shared, sold, or rented to any third party for marketing, promotional, or any other purpose. The only third party that processes SMS data is Twilio Inc., our delivery provider, which sees the recipient phone number and message content solely for the purpose of delivering the SMS on our behalf. (See section 4.)

By subscribing, you agree to our Terms of Service and to receive recurring automated SMS messages from sellfast.now (FanForge AI) at the mobile number you provided. See also: Terms.

14. Contact

Email (preferred): roger@grubb.net
Subject lines that reach a human fastest: "Privacy", "GDPR", "CCPA", "Delete my data", "Data access request"