Privacy policy

Last updated October 22, 2026

Rengi Forge ("we") is run by an independent game developer. This page says exactly what the service stores and why. Questions: support@rengi.dev.

When you sign in

We receive from Google your account ID, email address and name, and nothing else (no contacts, no Drive, no Gmail). We use them to identify your account, show who is signed in, and contact you about the service if we need to.

When you use a tool

• Usage records: for each call we store the tool name, time, credits used, whether it succeeded, how long it took and an error code if any. This powers your daily allowance and the history on your account page. We do not store the arguments you sent in these records.
• Files: files you send and the files we produce are stored on our server only to run the call and give you download links. They are deleted automatically after 7 days. Links are random and not listed anywhere.
• Access tokens: stored only as one-way hashes. Access tokens expire after 1 hour, refresh tokens after 60 days of no use.
• IP addresses: used in memory for rate limiting; not saved to our database.
• Visit counts: we count requests per day by page and by kind of client (browser, AI assistant, script, crawler). To count unique visitors we use a hash of the IP address and browser name with a random key that changes every day and is never written to disk, so visits cannot be linked across days or back to you. No cookies are used for this. Outbound links on the rengi.dev home page go through a short redirect (/go/...) so we can count clicks per day in the same way, with no cookies.

Who else processes data

• Netcup GmbH (Germany): hosts our server.
• Google: sign-in.
• Paddle.com: payments for the Pro plan. Paddle is the merchant of record: it takes your card or PayPal details and billing address directly, and we never see them. We receive from Paddle only your subscription ID, its status and dates, and the email you paid with.
• Background removal runs on our own server; your images are not sent to any AI provider.
• Anthropic: only the level design tools, and only when you give a text instruction such as "make the market denser". The instruction and a text description of the level are sent to Anthropic's API to plan the layout. Your files are not sent.
• Coinbase Developer Platform: only for wallet payments through x402, which signed-in Claude users do not use.

What we never do

We do not sell or rent personal data, show ads, use your files to train any model, or share data with anyone not listed above, unless the law requires it.

Your choices

You can see your usage on your account page and delete your account there at any time; that removes your account, usage history and all access tokens at once. You can also disconnect Rengi Forge in Claude's connector settings, or email us to get a copy of your data or have it deleted.

Security

All traffic uses HTTPS. The server accepts connections only through its web proxy, tokens are hashed, and sessions are signed.

Children

The service is not directed at children under 13, and we do not knowingly collect their data.

Changes

If this policy changes in a way that matters, we will update the date above and, for significant changes, email signed-in users.