Legal

Privacy policy

Last updated: September 21, 2026

This page describes the personal data processed by ZedForge (https://zedforge.app) and by the ZedLoader activation service, why it is processed, how long it is kept and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

In short: no tracker, no analytics, no account to create. The only data tied to your identity is your Discord ID, kept in memory for 24 hours to prevent abuse, then forgotten.

1. Data controller

The data controller is SkyDroxy, publisher of the site (see the legal notice). For any question or to exercise your rights: contact@zedforge.app. No data protection officer has been appointed, as the processing does not require one.

2. Data processed, purposes and retention

Data	When	Why	Legal basis	Retention
Discord ID (numeric) and Discord username	When you activate ZedLoader and sign in through Discord	Verify that a real Discord account is behind the request and limit the number of codes issued per account (anti-abuse)	Legitimate interest (Art. 6(1)(f)): protecting the service against automation and abuse	The ID is kept for 24 h in the server's memory, never written to disk. The username is not kept. The Discord access token is used once and discarded.
Activation code	Generated after the Discord sign-in, sent to ZedLoader on your machine	Activate your installation	Performance of a contract (Art. 6(1)(b)): the ZedLoader EULA	Stored hashed, single-use, expires 1 day after issuance. The code is not linked to your Discord ID.
Installation identity: random identifier (UUID), public key, ZedLoader name and version, creation, last-seen and revocation dates	When ZedLoader activates, then at each start	Recognise an activated installation, revoke an activation, adapt features to the version	Performance of a contract (Art. 6(1)(b))	As long as the installation is active; deleted on request. This identity is generated randomly, never derived from your hardware (MAC address, disk, CPU), and is not linked to your Discord account.
IP address, timestamp, requested URL, user agent	On each request to the site, the API or the downloads	Security (attack detection, rate limiting), troubleshooting	Legitimate interest (Art. 6(1)(f)): security of the service	6 months in technical logs, then automatic deletion
Content of your emails	If you write to us	Answer your request	Legitimate interest (Art. 6(1)(f))	For as long as needed to handle the request, at most 12 months

ZedLoader itself contains no telemetry: diagnostic reports (zedloader report) are written locally on your machine and are never sent automatically. ZedLoader's only outbound connections go to https://zedforge.app (activation), zed-manager-api.zedforge.app (activation, plugin catalogue) and s3-minio-api.zedforge.app (downloads and updates).

3. Recipients and processors

IONOS SARL (7 place de la Gare, BP 70109, 57200 Sarreguemines Cedex, France) hosts the site, the API and the files. Servers located in the European Union (IONOS data centres).
Discord Inc. (United States): when you click "Sign in with Discord", you are redirected to Discord, which authenticates you under its own privacy policy. Discord then acts as an independent data controller. We only receive your ID and username from Discord (the "identify" scope) and send it no data about you. No other data is transferred outside the European Union.

No data is sold, rented or shared for advertising purposes.

4. Cookies and trackers

This site uses no analytics tool and no third-party service loaded in your browser (fonts are served from our own servers). The only cookie set is zedforge_locale, which remembers the language you chose (value fr or en) for one year. It is strictly functional, contains no identifier and is not used for tracking: it falls under the cookies exempt from consent under Article 82 of the French Data Protection Act. No consent banner is therefore required.

5. Your rights

You have the right to access, rectify, erase, restrict and object to the processing of data concerning you, as well as the right to data portability where the legal basis is the contract. To exercise them, write to contact@zedforge.app, stating, as applicable, your Discord ID or the installation identifier shown in ZedLoader — this is what lets us find the data concerned. We reply within one month.

If you believe your rights are not respected, you may lodge a complaint with the French data protection authority (CNIL): www.cnil.fr/en/plaintes, or with the supervisory authority of your country of residence.

6. Security

Exchanges are encrypted (HTTPS/HSTS). Activation codes are stored hashed. Installation identities rely on a cryptographic signature (Ed25519) whose private key never leaves your machine. Access secrets for third-party services are never exposed to the browser. Server access is restricted to the publisher.

7. Minors

Activation requires a Discord account, which is reserved for people aged 13 and over under Discord's terms. We do not knowingly collect any data from a child below that age.

8. Changes to this policy

This policy may evolve with the service (for example if a new ZedForge project processes other data). The date at the top of the page shows the latest version; substantial changes will be announced on the site. In case of discrepancy, the French version prevails.