Frequency Forge applies data minimisation by design: we ask for the minimum, keep sensitive data out of general flows and separate contact capture from any future safeguarding case handling.
Frequency Forge operates a Spain-wide community. Its headquarters and operational base are at Pompeu Fabra 13 · Manresa · Catalonia. Frequency Forge is currently an association project being constituted as Asociación Frequency Forge; registration and tax details will be added when they exist. Privacy contact: info@frequencyforge.org.
In FF Scene Toolkit, answers, selected role, boundaries, incidents, scores and results remain in the browser and are not sent to the server. To unlock the result/resource pack we process email, language, the requested tool transiently and the separate communications choice. Email is encrypted by the application before it is stored in the database and an HMAC is used for lookup/deduplication. We do not store the individual role in the database. General contact forms ask for name, email, route of interest and an optional message.
Do not enter medical history, diagnoses, detailed violence or trauma narratives, sexual information, identity documents, criminal history or allegations, incident images, third-party names or other particularly sensitive information into the Toolkit or general forms. If a situation requires safeguarding, it must use a separate restricted route when operational.
Toolkit email is processed to provide the requested service: unlock the result and send the resource pack. Later communications about tools, training or Safer Scene require a separate opt-in and rely on consent. General contact data is used to respond to the request. We do not use Toolkit answers or results for automated decisions, suitability profiling, hiring, sanctions or determining wrongdoing.
A Toolkit contact without communications opt-in is automatically deleted from the identifiable database after 7 days. With opt-in, encrypted email is kept until withdrawal/deletion or a maximum of 12 months from the last interaction, unless validly renewed. Merch leads have a maximum operational retention of 12 months. Toolkit answers/results are never stored. Non-identifying aggregate counters may be retained to measure use.
We classify information by level: L0 public; L1 non-identifying operational; L2 encrypted personal contact; L3 sensitive data prohibited from the Toolkit database; L4 any necessary safeguarding case data, which must be held in a separate restricted system. Lead CPTs are non-public, not exposed through REST and require administrative privileges. Toolkit applies no-cache, anti-framing, restrictive permissions and CSP controls. Encryption reduces risk but cannot guarantee absolute security.
Frequency Forge does not store raw IP addresses, user-agent, referrer or device identifiers in Toolkit lead records. A short-lived HMAC-derived IP token is used only for rate limiting. Hosting and network infrastructure may process technical connection logs for security and service operation.
Hosting, email and necessary software providers may be used under the appropriate safeguards and processor arrangements. The formal processing register, provider inventory, processing locations and any transfers must be documented before scaling acquisition or processing special categories. Gelato is not connected and the store does not accept orders. FF Direct can email a message to info@frequencyforge.org without storing it in WordPress. Crisp remains disabled until Website ID, DPA and Total Privacy Mode controls are complete; if activated, it loads only after explicit user action and must be included in the processor inventory.
You may request access, rectification, erasure, restriction, objection or portability where applicable and withdraw communications consent by writing to info@frequencyforge.org. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).
The frequencyforge.org/en/your-data/ centre lets a verified email holder review encrypted Toolkit and merch records, withdraw communications and request deletion. It uses a 20-minute temporary link and creates no permanent account.
Current public flows are designed for adults. Any future programme involving minors or real handling of sensitive cases requires a specific framework, accountable leads, legal basis, access control, retention rules and professional review before those data are processed.