Last updated 10 October 2026.
This policy covers Wiki Forge, including Fan Forge, Hobby Forge and their wikis ("we"). We collect as little as we can: enough to let you sign in, to credit your edits, and to stop abuse. We don't show ads, don't sell or share data for marketing, and don't track you across other sites.
Reading a wiki#
You don't need an account to read. When you visit:
- Cloudflare hosts and delivers the site. Like any host, it handles your IP address and browser details to serve pages and stop attacks. Its privacy policy: https://www.cloudflare.com/privacypolicy/
- Cloudflare Web Analytics counts page views and measures page speed while Wiki Forge is being tested. It doesn't use cookies or identify you; we see totals (pages, countries, browsers, referring sites), not individuals.
- No other third parties load on wiki pages. Images come only from our own media host; we don't embed images, fonts or scripts from other sites.
We set no cookies when you read. (Cloudflare may set a short-lived security cookie to tell people from bots.)
Your account#
When you sign in we keep:
| What | Why | How long |
|---|---|---|
| Your email address | Signing in, sign-in links, and messages about your account or wiki requests | Until you delete your account |
| Your name and profile picture from Discord or Google, if you sign in with them | They come with the sign-in; we don't show them | Until you delete your account |
| Your Discord or Google account ID, and the sign-in tokens they give us | Linking that sign-in method to your account | Until you remove the method or delete your account |
| Passkeys | The public part of each passkey (never anything secret, and never your fingerprint or face) | Until you remove it |
| Your handle, and old handles | Shown publicly with your edits; an old handle points to your new one for 90 days | As long as your edits exist (see "Deleting your account") |
| Sign-in sessions: when, your browser's user-agent string, a hashed IP address | Keeping you signed in; spotting stolen sessions | Up to 30 days on a wiki; accounts-site sessions expire after 7 days unused |
Hashed IP addresses. Where we record an IP address (sign-in sessions, edits, some logged actions), we store a hash made with a key that changes every day, never the address. That lets moderators see that two actions on the same day came from the same place, which is what stops vandals and spammers making fresh accounts. Hashes are deleted after 30 days.
What you contribute#
- Edits are public: the text, the time, your handle and your edit summary. They stay in the page's history, as the CC BY-SA licence needs them credited. Moderators can hide a revision with personal information in it.
- Uploads: we re-encode every image, which removes hidden data such as camera details and GPS location. The image, its details and your handle are public.
- Reports you send go to that wiki's moderators, who see your handle. Reports aren't public.
- Wiki requests are seen by the site admin.
- Moderation actions (blocks, role changes, deleted pages) are listed in each wiki's public moderation log, with the moderator's handle and reason.
Cookies#
We only use cookies needed to sign you in. No analytics or advertising cookies.
| Cookie | Where | What for |
|---|---|---|
__Host-wf_session |
Each wiki you sign in to | Keeps you signed in to that wiki (up to 30 days) |
__Host-wf_user |
Each wiki you sign in to | Your handle, to show your account menu |
better-auth.* |
accounts.wikiforge.wiki | Your sign-in session and sign-in steps |
wf_next |
accounts.wikiforge.wiki | Where to return after signing in (30 minutes) |
Each wiki gets its own cookie and can't read another wiki's, so a problem on one wiki can't reach your sessions elsewhere.
Who else handles data#
Everything runs on Cloudflare: hosting, the database, file storage, email for sign-in links, and the human check (Turnstile) shown to new accounts and new editors. If you sign in with Discord or Google, they know you signed in to Wiki Forge; their own privacy policies apply. We don't share data with anyone else, except where the law requires it.
Data may be stored and processed in any country where Cloudflare operates.
Your choices#
- See or download your data: write to admin@wikiforge.wiki. Wiki owners and admins can download a wiki's text and history at any time.
- Change your handle, passkeys or sign-in methods: on your account page. To change your email address, write to admin@wikiforge.wiki.
- Delete your account: on your account page. Your email, sign-in methods, passkeys and sessions are deleted. Your edits stay, credited to "deleted user", because the licence lets others keep using them. Your old handle is held for 90 days so no one can impersonate you, then released.
- Ask us to correct or remove something, or object to how we use your data: admin@wikiforge.wiki. Depending on where you live (for example in the EU or UK) you have legal rights over your data, and can complain to your data protection authority.
Age#
Wiki Forge isn't for children under 13, or under the minimum age for consent where you live if that's higher. If you believe a child has made an account, write to admin@wikiforge.wiki.
Changes#
We'll date each version of this policy and tell you about significant changes before they apply.
Questions: admin@wikiforge.wiki.