Privacy and Cookie Policy

1.1 Welcome to Fralforge ("we", "our", "us"), operated by FARALA LTD (Company Number 17099027), registered office 128 City Road, London, EC1V 2NX, United Kingdom.

We are committed to protecting and respecting your privacy in accordance with:

• The UK General Data Protection Regulation ("UK GDPR");

• The Data Protection Act 2018;

• Where applicable, the EU General Data Protection Regulation ("EU GDPR").

This Privacy and Cookie Policy ("Policy") explains how we collect, use, store, transfer, and safeguard your personal data when you use fralforge.com ("Site").

1.2 By visiting or using the Site, including account creation, browsing, or purchasing digital products, you acknowledge that you have read and understood this Policy.

2.1 Information You Provide. When creating an account, placing an order, or contacting support, we may collect:

• Full name

• Email address

• Billing address

• Payment-related details (processed by secure third-party providers)

• Account preferences

• Communications with support

2.2 Information Collected Automatically. We automatically collect certain technical and usage data, including:

• IP address

• Device type

• Operating system

• Browser type

• Pages visited

• Time spent on pages

• Clickstream data

2.3 Information from Third Parties. We may receive limited data from:

• Payment processors

• Fraud prevention services

• Identity verification providers

This data is used strictly for transaction processing, fraud prevention, and legal compliance.

Under the UK GDPR and EU GDPR, we rely on the following lawful bases:

• Contractual necessity – to process purchases and manage your account.

• Legal obligation – to comply with tax, accounting, and regulatory requirements.

• Legitimate interests – to maintain security, prevent fraud, and improve services.

• Consent – for marketing communications and non-essential cookies.

We use your data to:

• Process purchases and deliver digital keys

• Manage your account

• Provide customer support

• Prevent fraud and unauthorized access

• Improve platform functionality

• Send marketing communications (with consent)

Cookies are small text files stored on your device to improve functionality, security, and analytics.

You may manage cookie preferences via your browser settings or our cookie banner.

Disabling certain cookies may affect Site functionality.

5.1 Main Cookies Used on the Site. Below is a non-exhaustive list of the main cookies used on our Site:

5.1.1 Cookie Name: session_id. Provider: Fralforge. Purpose: Maintains user session and login status. Duration: Session (expires when browser closes).

5.1.2 Cookie Name: auth_token. Provider: Fralforge. Purpose: Authentication and account security. Duration: 7 days.

5.1.3 Cookie Name: XSRF-TOKEN. Provider: Fralforge. Purpose: Security and CSRF protection. Duration: Session.

5.1.4 Cookie Name: _ga. Provider: Google Analytics. Purpose: Distinguishes users for analytics. Duration: 2 years.

5.1.5 Cookie Name: _ga_*. Provider: Google Analytics. Purpose: Maintains session state. Duration: 2 years.

We may update this table periodically to reflect changes in cookies or service providers.

Third-party providers such as Google Analytics process data in accordance with their own privacy policies.

6.1 Security Measures. We implement:

• SSL encryption

• Secure authentication mechanisms

• Restricted internal access controls

• Fraud detection systems

6.2 Data Retention. We retain personal data only as long as necessary for:

• Contract performance

• Legal and tax compliance

• Dispute resolution

• Fraud prevention

When no longer required, data is securely deleted or anonymized.

Where data is transferred outside the UK or EEA, we ensure appropriate safeguards such as:

• Standard Contractual Clauses (SCCs)

• Transfers to countries with adequacy decisions

• Contractual and technical protections

You have the following rights:

• Right of access – to obtain a copy of your personal data.

• Right to rectification – to correct inaccurate data.

• Right to erasure ("right to be forgotten").

• Right to restrict processing.

• Right to data portability.

• Right to object to processing based on legitimate interests.

• Right to withdraw consent at any time.

To exercise these rights, contact us using the details below.

We may request verification of identity before fulfilling your request.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the competent supervisory authority.

In the United Kingdom, this is:

Information Commissioner's Office (ICO). Website: https://ico.org.uk. Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.

If you are located in the European Economic Area (EEA), you may contact your local data protection authority.

We encourage you to contact us first so we can attempt to resolve your concern.

We have appointed a Data Protection Contact responsible for overseeing questions regarding this Policy.

Data Protection Contact, FARALA LTD, 128 City Road, London, EC1V 2NX, United Kingdom. Email: privacy@fralforge.com.

The Site is not intended for individuals under 13 years of age.

We do not knowingly collect personal data from children under 13. If such data is identified, it will be promptly deleted.

We may share personal data:

• With payment providers for transaction processing

• With fraud prevention services

• When legally required

We do not sell or rent personal data to third parties.

We may update this Privacy and Cookie Policy periodically.

The latest version will always be available on the Site. Continued use of the Site constitutes acceptance of the updated Policy.

For general inquiries:

FARALA LTD, 128 City Road, London, EC1V 2NX, United Kingdom.

Email: info@fralforge.com. Support: support@fralforge.com. Support Hours: Monday - Friday: 09:00 - 18:00 (UTC).

© 2025 Fralforge – FARALA LTD. All Rights Reserved.