Who is responsible
Frontline Forge is operated by Dolonne Limited (company no. 78081452), Unit 1113, 11/F, Peninsula Centre, 67 Mody Road, Tsim Sha Tsui, Hong Kong. You can reach us at support@frontline-forge.com or through the contact form.
What this notice covers
This notice covers the Frontline Forge marketing site and the training app. It describes the information we handle, why we handle it, who else receives it, and how long we keep it.
Information we collect
Your account. To create an account, you give us your e-mail address and a password. We store the password only as a one-way hash, never in readable form. We also record the dates of your sign-ins. If you came to the app from a link on the marketing site, we record on your account the site page you came from.
Your training. When you play an Activity, we save your score, the time taken, the date, and the Exam and Activity it belongs to. We count the free attempts you use in each Space. We also store the access you hold to each Exam and when it ends.
Your messages. Messages you send to Support in the app, including Feedback, are kept as a conversation with our replies. You can attach images to them. The contact form on the marketing site collects your name, e-mail address, subject, and message.
Your reviews. A review holds a rating, your comment, and the display name you choose.
Your payments. Purchases are processed by Sold through Link, LLC, a Stripe affiliate, acting as merchant of record. It collects your payment details under its own privacy notice. From a purchase, we receive your e-mail address, the product bought, the amount, and the payment status. We never receive or store your card number.
Technical data. Our web server and hosting provider record standard request information, such as your IP address, the page requested, your browser, and the time. The contact form keeps an IP-based record to limit spam. Signup uses Google reCAPTCHA to check that a person, not a script, is creating the account.
Usage data. The marketing site and the app use PostHog to record how they are used. On the site, this covers pages viewed, clicks, how far you read, videos played, and answers to sample questions. In the app, it covers steps such as signup, activation, starting a purchase, and starting or finishing a practice session. PostHog also records sessions, in which the text you type is masked, so a recording never shows your e-mail address or password. Once you have an account, this data is linked to your account number, never to your e-mail address. When a payment succeeds, our server tells PostHog the plan, its duration, and the amount paid, never your card details.
Cookies and browser storage
The training app sets a session cookie while you are signed in. It also sets a sign-in cookie that keeps you signed in on that device. That cookie holds a random token. We store only a hash of it. The token lasts 30 days and is renewed each time you come back. It ends when you sign out, after 30 days without a visit, or when your password is changed from another device.
The app also uses your browser's storage for interface state, such as the Space you last chose or a simulator setting. That data stays in your browser.
PostHog sets its own cookie on frontline-forge.com and its subdomains, and also uses your browser's storage. It recognizes the same browser from one visit to the next, and from the marketing site to the app. You can block it with your browser settings or a content blocker. Neither the site nor the app uses advertising pixels.
When you reach the site through an ad, the site keeps the click identifier that Google attached to the link, with the campaign and the search term, in a cookie on frontline-forge.com for 90 days. The app reads that cookie when you create an account or open a payment, and keeps the click on your account.
How we use your information
- To run your account and give you access to the Activities you are entitled to.
- To compute your results. Each score is compared with the scores of other test-takers on the same Activity. Rankings use counts of scores only and never show who earned them.
- To answer your messages and Feedback.
- To publish reviews that we have approved.
- To send account e-mails. These are the activation e-mail at signup and the password reset e-mail you request. When you use the contact form, we reply by e-mail. We send no marketing e-mail.
- To understand how the marketing site and the app are used, so we can improve them.
- To know which of the ads we buy bring applicants, and which do not.
- To prevent abuse, spam, and fraud, and to keep the service secure.
Who else receives it
Sold through Link, LLC handles your payment as merchant of record. Google receives data from reCAPTCHA at signup. When an ad brought you to the site, we send Google Ads the identifier of that click, with the fact that it led to an account, a first practice session, or a purchase and its amount. PostHog Inc. receives the usage data, along with your IP address, and stores it in the United States. Our hosting provider stores the service, and our e-mail provider delivers our e-mails. These providers process your information to provide their service to us. We do not sell your information. We do not use advertising pixels.
Approved reviews are public. They appear on the marketing site and in the app under the display name you chose.
Retention and deletion
We keep your account data while your account exists. You can delete your account in Settings. Deletion is immediate and final. It removes your account, your scores, your sign-in tokens, and your Support conversations with their attachments. Your reviews are wiped of their rating, comment, and display name.
One record survives deletion. It holds a keyed fingerprint of your e-mail address, the access you held to each Exam, the free attempts you used, and the deletion date. The fingerprint cannot be turned back into your e-mail address. If you sign up again with the same e-mail, this record restores any access still running and the free attempts already used. Scores already counted in the rankings stay in those counts, with no link to you.
We keep contact form messages as long as reasonably needed to respond, maintain the support history, prevent abuse, and meet legal requirements. Server logs, rate-limit records, and usage data in PostHog follow the retention settings of the systems that hold them. Deleting your account does not remove usage data already recorded in PostHog.
Your choices
You can read the marketing site without giving us your name or e-mail address. You can delete your account at any time in Settings. To correct your e-mail address or ask about your information, write to support@frontline-forge.com or use the contact form.
Children
You must be at least 13 to create an account. If you are under 18, a parent or guardian must make any purchase. We do not knowingly collect information from children under 13. If you believe a child under 13 has given us information, contact us and we will delete it.
Changes to this notice
We may update this notice when our data practices change. The date at the top shows the latest revision.
Contact
For any privacy question, write to support@frontline-forge.com or use the contact form.