Privacy & Cookie Policy

Forbizmail is architected on a strict Privacy-First, Zero-Tracking principle. We do NOT load Google Analytics, Meta Pixels, TikTok pixels, invasive session replay recorders, or any third-party behavioral advertising scripts.

We do not construct cross-site behavioral profiles, we do not fingerprint devices, and under no circumstances do we sell, rent, or monetize your personal data to ad networks or data brokers.

Account & Identity Data: If you create an account via Supabase Auth, we store your email address, unique user UUID, display handle, and timestamps solely for authentication, cryptographic verification of payout reviews, and dispute ownership attribution.

Public Contributions: Payout proof receipts, review consensus votes, community letters, and turnkey playbooks submitted by you are published openly on the platform as public community records.

Infrastructure & Bot Filtration: Requests pass through Cloudflare Edge for DDoS defense and automated bot mitigation (Cloudflare Turnstile). Ephemeral server logs record IP address, user agent, and request timestamps solely for rate limiting, DDoS mitigation, and security diagnostics (retained max 30 days).

We use only strictly necessary first-party cookies essential for core application operations:

• Supabase Auth session token (maintains your cryptographically authenticated session).

• Dark/Light Theme preference state (prevents UI flicker on page reload).

Because our infrastructure utilizes zero marketing, third-party advertising, or cross-site tracking cookies, no invasive cookie consent banner is required under GDPR and EU ePrivacy directives.

Regardless of your physical location, you possess full sovereignty over your personal data under our global privacy standard:

• Right to Access: You may request a complete export of all account records and transaction proofs associated with your identity.

• Right to Erasure (Right to be Forgotten): You may request the permanent deletion of your private account identifiers and email records.

• Right to Rectification: You may correct inaccurate profile information or submitted payout proof documentation at any time.

To exercise any of these statutory rights, email privacy@emailforums.biz. We process and confirm verified Data Subject Requests (DSR) within 14 business days.

Our infrastructure operates with trusted enterprise infrastructure providers bound by strict Data Processing Agreements (DPA) and Standard Contractual Clauses (SCC):

• Supabase Inc. (PostgreSQL database, Auth, and Row-Level Security isolation).

• Cloudflare Inc. (Global Anycast DNS, SSL termination, Edge caching, and DDoS defense).

• Resend Technologies (Transactional verification emails only).