Privacy Policy
This is an informative translation. In case of discrepancy, the Spanish version prevails.
Data controller: M2DRENTOS, S.L.U., Tax ID B-13859582, address Calle Aconcagua 58, 18008 Granada (Spain), email privacidad@forjium.com.
Data we process on this website
- Waitlist: email address, preferred language, signup origin (web/shop) and the date and proof of your consent.
- Analytics: when enabled, we use PostHog in its European region to measure page visits. This website configuration does not store analytics identifiers in cookies or persistent storage, does not record sessions, and excludes URL parameters and form fields. The provider receives technical data necessary for the connection.
- Contact: the data you provide if you write to us by email.
- Time capsule: if you use this feature, the email and audio or video content you choose to submit to store your capsule and manage its opening.
The waitlist form does not request health data. If you record a capsule, avoid including unnecessary sensitive information or other people's data. Processing of training and health data inside the app is explained in its specific policy before you create an account.
Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Managing your waitlist signup and notifying you when the beta opens | Your consent (art. 6.1.a GDPR) |
| Sending you communications about the launch and Forjium news | Your consent (art. 6.1.a GDPR) |
| Answering your enquiries | Legitimate interest / pre-contractual measures (art. 6.1.b and f) |
| Aggregated site analytics | Legitimate interest (art. 6.1.f) |
Retention
Waitlist data is kept until the product launches and, at most, 24 months from your signup, or until you withdraw your consent, whichever happens first.
Recipients and processors
We do not sell or share your data with third parties. We use providers acting as data processors with the guarantees of art. 28 GDPR: Supabase (database, EU hosting), Vercel (web hosting), Resend (email delivery), PostHog (web analytics, European region). Where a provider involves transfers outside the EEA, they are covered by Standard Contractual Clauses or the EU-US Data Privacy Framework.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to privacidad@forjium.com with the subject "Data protection". You can also withdraw your consent at any time (unsubscribe link in every email) without affecting the lawfulness of prior processing. If you believe we have not handled your rights correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Minors
This service is not aimed at people under 18.
Security
We apply appropriate technical and organisational measures: encryption in transit, role-based access control and per-user data isolation at the database level.
Technical information last updated: 8 September 2026.