Privacy Policy

Effective date: April 28, 2026 · Last updated: April 28, 2026

Welcome to ForcedSkin (“the Platform,” forcedskin.com). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the ForcedSkin website and browser extension (together, the “Service”). Please read it before using the Service. By using the Service, you agree to this Policy.

1. Information we collect

1.1 Information you provide

  • When you register: username, password (stored hashed), display name, and optional email
  • When you submit a site adapter: code content and description

1.2 Information collected automatically

  • Login timestamps and IP address (for security auditing only; not shared externally)
  • Theme preference settings stored in the extension via chrome.storage (local only; not uploaded to our servers)

1.3 What we do not collect

We do not collect the contents of pages you browse, browsing history, keystrokes, or other personal data unrelated to applying themes.

2. How we use information

  • To provide sign-in and authentication
  • To save and sync your theme favorites and selections (light / dark preferences)
  • To route adapter submissions through administrator review
  • To improve product experience and security
  • To send service-related notices tied to your account (e.g., password reset)

We do not use your personal information for ad targeting, sell it to third parties, or use it for purposes unrelated to operating the Service.

3. Storage and security

  • Passwords are stored using SHA-256 with a per-user salt; we cannot recover plaintext passwords
  • Sessions use JWT with a 30-day lifetime, delivered via HttpOnly cookies
  • Extension auth tokens are stored in chrome.storage.local and are accessible only on your device
  • We use HTTPS for network transport
  • Server data is hosted in a hardened cloud environment

No internet transmission is 100% secure. If you notice suspicious account activity, contact us immediately.

4. Cookies and local storage

Authorization cookie: Set after login to maintain your session; HttpOnly; SameSite=Lax; 30-day lifetime.

Theme preference cookie: Stores light/dark mode choice; no personally identifying information; 1-year lifetime.

Extension storage: Theme data lives in chrome.storage.local and is not uploaded to our servers.

5. Third-party services

The Platform does not currently integrate third-party advertising, analytics, or social login. If that changes, we will update this Policy and notify you in advance.

6. Children

The Service is not directed at children under 13. If we learn of an underage account, we will delete it.

7. Your rights

  • Access and correction: After login, you can view and edit profile information in account settings
  • Account deletion: Contact us anytime to request deletion of your account and related data
  • Data export: You may request a copy of data we hold about you
  • Withdraw consent: Stop using the Service or uninstall the extension; we will cease processing as described here

8. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be announced on the website homepage or by email at least 7 days in advance. Continued use after changes constitutes acceptance.

9. Contact

Questions about this Privacy Policy: