Last updated: April 23, 2026
ThreatForge stores all progress data (completed labs, scores, streaks, XP) locally on your device using your browser's localStorage. This data does not leave your device.
ThreatForge uses Firebase Anonymous Authentication to generate a random, anonymous user identifier (UID). This UID is not linked to any personal information such as your name, email, or phone number. The UID is used to manage in-app purchase entitlements through RevenueCat (see Section 5) and may support features such as progress sync in the future. Firebase may collect basic technical data (IP address, device type) as part of its standard operation — see Firebase Privacy for details.
ThreatForge does not collect, store, or transmit any personally identifiable information. No account creation is required. No email addresses, names, or phone numbers are collected.
The current version of ThreatForge does not include any analytics, tracking pixels, advertising SDKs, or third-party data collection tools beyond Firebase Authentication and RevenueCat (see Section 5).
ThreatForge offers optional in-app purchases — a Pro subscription and a lifetime Pro product — processed through Google Play Billing. All payment information is handled directly by Google Play. ThreatForge does not collect, store, or see your payment card details.
We use RevenueCat, a third-party service, to manage in-app purchase entitlements and enable purchase restoration across devices. When you make or restore a purchase, RevenueCat receives your Firebase UID (used as an anonymous appUserID), purchase event data from Google Play (such as product identifier, purchase date, and transaction status), and the resulting entitlement state. RevenueCat does not receive your payment card details, name, email address, or any personally identifiable information beyond the anonymous UID. See RevenueCat's privacy practices for details on how they handle this data.
ThreatForge is designed for users aged 18 and older. We do not knowingly collect data from children under 18.
You can delete all locally stored progress data at any time using the "Reset Progress" option in the app's Settings screen.
When cloud sync or other new features are added in future versions, this privacy policy will be updated to reflect those changes. Continued use of the app after policy changes constitutes acceptance.
Questions about this privacy policy can be directed to: threatforge.app@gmail.com