Privacy
The short version: your projects are yours, nothing is sold, and nothing is tracked.
What this is
Reforge is a portfolio demo, not a commercial service. There is no billing, no analytics, no advertising and no third-party tracking of any kind.
What is stored
Your email address and a hashed password, held by Supabase Auth. For each project: the URL you submitted, the description and target customer you typed, the analysis and concept the model returned, and the text of every refinement instruction.
Who can read it
Only you. Every table is protected by Postgres row-level security, enforced per query at the database rather than by a filter in application code.
What is sent to the AI provider
The text of the page you asked Reforge to analyze, plus your description and target customer, are sent to Google’s Gemini API to produce the analysis. Your email address is never included in a model call.
Sites you analyze
Reforge fetches the URL you submit from its own server and reads the page text. It only follows public HTTP(S) addresses, and requests to private network ranges are blocked.
Deletion
Deleting a project removes its analysis, concept and refinement history. To have an account and everything in it removed, email the address on the GitHub repository.
Last updated 26 August 2026.