01
Who we are
RWP Ventures operates Forged Fitness (https://forgedfitness.cloud). This notice explains affiliate relationships, cookies, first-party analytics, and privacy rights under U.S. law, including the California Consumer Privacy Act as amended by the CPRA (“CCPA”).
02
Affiliate disclosure (FTC)
Some links on this site are affiliate links to 1st Phorm and related pages. If you click through and purchase, we may earn a commission at no extra cost to you. Recommendations are use-case based; commissions help fund content production. Affiliate links are marked with sponsored relationship attributes where applicable.
03
Categories of information we collect
Depending on your choices and how you use the site, we may collect: (1) device and browser data (user agent, language, timezone, screen/viewport size); (2) usage data (pages viewed, referrers, UTM/ad click IDs when present in the URL, scroll depth, engaged time, internal CTA clicks, outbound and affiliate clicks); (3) approximate network data (IP address and derived hash, and any coarse geo header supplied by infrastructure); (4) first-party identifiers (visitor ID and session ID cookies after you accept measurement); (5) consent and Do Not Sell/Share preferences. We do not intentionally collect government IDs, precise geolocation, or payment card data on this site.
04
Sources of information
Information comes from your browser when you visit the site, from cookies/local storage you allow, from server request logs required to operate the service, and from signals such as the Global Privacy Control (GPC) header when your browser sends it.
05
Business and commercial purposes
We use information to: operate and secure the website; measure content and conversion performance; improve product recommendations and on-site funnels; attribute affiliate clicks; detect fraud/abuse; and create traffic intelligence (including aggregated and, where permitted, consented first-party event datasets) that may be licensed or otherwise commercially provided to marketing agencies and partners. De-identified or aggregated reports that cannot reasonably be linked to you may be used without restriction under applicable law.
06
Cookies and consent
Essential operation does not require marketing cookies. Optional measurement cookies (ff_cookie_consent, ff_visitor_id, ff_session_id) are used only after you click Allow measurement, unless a Do Not Sell/Share or GPC signal blocks them. You can change your mind anytime via Cookie preferences in the footer.
07
Sale / Share of personal information (CCPA)
Under CCPA, “sale” and “sharing” can include certain disclosures of personal information for cross-context behavioral advertising or valuable consideration. When you allow measurement, we may disclose first-party analytics events (for example page paths, UTMs, device class, hashed identifiers, and affiliate-click outcomes) to agencies or data partners for analytics, media planning, or audience insights. We do not sell children’s personal information. You can opt out of sale/share at any time using Do Not Sell/Share in the cookie banner or footer controls. We honor GPC signals as an opt-out of sale/share for that browser.
08
What happens if you opt out
If you reject cookies, enable Do Not Sell/Share, or send GPC, optional measurement events stop and visitor/session cookies are cleared in that browser. Server security and operational request logs may still be retained as needed to run and protect the site. Opt-out does not delete historical records already written, but future sale/share of your browser’s optional measurement stream stops.
09
Your privacy rights (California and similar U.S. state laws)
Depending on your state, you may have rights to know/access, delete, correct, and opt out of sale/share of personal information, and to non-discrimination for exercising rights. To submit a request, email privacy@forgedfitness.cloud with “Privacy Request” in the subject and enough detail to locate your records (for example approximate visit dates). We will verify requests as required by law. Authorized agents may submit requests with proof of authority.
10
Retention
Consented analytics events are retained for up to 24 months for performance analysis and commercial traffic intelligence, unless a shorter period is required or a valid deletion request applies. Server security logs are retained on a rolling operational schedule (typically 30–90 days unless needed longer for security investigations).
11
Security
We use HTTPS, hardened server configuration, access controls, and rate limiting on analytics endpoints. No method of transmission or storage is 100% secure.
12
Children
This site is directed to adults interested in training and supplements. We do not knowingly collect personal information from children under 16 for sale. If you believe a child provided information, contact us to request deletion.
13
Changes
We may update this notice as our practices evolve. The “Last updated” date below will change when material updates publish. Continued use of the site after updates constitutes notice of the revised practices to the extent permitted by law.