Policy file · 01

Privacy policy

This policy explains what personal information Koru Forge may collect, why we use it, and the choices available to you.

Effective and last updated: 12 August 2026

1. Who we are and scope

Koru Forge (“we”, “us”, or “our”) operates koru-forge.com, an independent editorial website that helps people discover free-to-play online games. This policy applies to information handled through our website and direct communications with us.

Koru Forge is not a game publisher, payment provider, gambling operator or financial service. We do not create player accounts, accept deposits, award real-money prizes or provide withdrawals. When you follow a link to a publisher or game store, that third party’s privacy policy applies.

Current static-site notice: the email form on the homepage validates only in your browser. Until a newsletter provider is connected and identified in this policy, the form does not transmit or retain the address you type.

2. Information we may collect

Information you choose to provide

  • Your name, email address and the contents of a message when you contact us.
  • Your email address and subscription preferences if a newsletter service is activated and you choose to subscribe.
  • Feedback, correction requests or review suggestions you send to our editorial team.

Information created by your browser

  • Your saved-game choices and cookie preference. These are currently kept in your browser’s local storage and are not sent to us.
  • Basic server logs that a hosting provider may create, such as IP address, browser type, request time, referring page and requested URL, for security and reliable delivery.
  • Aggregated usage data only if optional analytics are introduced and you consent where required. We do not currently load an analytics service.

We do not intentionally collect payment-card data, government identifiers, precise location, game account passwords, health data, or information about deposits and withdrawals.

3. How we use information

We may use information to:

  • operate, secure, troubleshoot and improve the website;
  • answer enquiries and respond to privacy, legal or editorial requests;
  • send a requested newsletter, if that service is enabled, with an unsubscribe option in every message;
  • understand site performance using aggregated or consented analytics;
  • prevent abuse, investigate security incidents and comply with lawful obligations; and
  • maintain records needed to demonstrate consent or handle a complaint.

We do not sell personal information. We do not use it to make decisions about credit, employment, insurance or eligibility for real-money rewards.

4. Reasons for processing

Our handling of personal information is guided by New Zealand’s Privacy Act 2020 and its information privacy principles. Depending on the interaction and where you live, we rely on one or more of the following reasons:

  • Your consent, for example for an optional newsletter or non-essential analytics.
  • Our legitimate interests in publishing, securing and improving an editorial website, where those interests do not override your rights.
  • Contract steps when you ask us to provide a service you have requested.
  • Legal obligations and the establishment, exercise or defence of legal claims.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before it was withdrawn.

5. When information may be shared

We limit access to people and providers who need information for the purposes above. That may include website hosting, security, email delivery and professional advisers. Any provider must handle information under appropriate confidentiality and data-protection terms.

We may also disclose information where required by law, to protect people or the service from harm, or as part of a business reorganisation with suitable safeguards. We do not give publishers your saved-game list; it stays on your device.

International processing

Some service providers may operate outside New Zealand. Before activating such a provider, we will take reasonable steps to ensure appropriate privacy safeguards and update this policy where the transfer is material.

External game links

“Play free” links open third-party websites. Their operators independently decide what data to collect. Review their notices before creating an account or making an optional purchase.

6. How long information is kept

We keep personal information only for as long as needed for the purpose collected, including reasonable legal, accounting, security and dispute-resolution needs. Typical targets are:

  • general enquiries: up to 24 months after the conversation closes;
  • newsletter details: until you unsubscribe, plus a minimal suppression record where needed to honour that request;
  • security logs: normally up to 90 days, unless an incident requires longer investigation; and
  • browser local storage: until you clear site data or remove a saved game.

We may retain de-identified information that can no longer reasonably identify you.

7. Your privacy choices and rights

Under New Zealand privacy law, you may ask whether we hold personal information about you, request access to it, and ask us to correct it. Depending on your location, you may also have rights to deletion, restriction, objection, portability or withdrawal of consent.

Email privacy@koru-forge.com with enough detail for us to understand the request. We may need to verify your identity. We will respond within the period required by applicable law and explain any lawful limitation.

You can clear saved games and consent choices through your browser’s site-data controls. You may reopen our consent panel using “Cookie settings” in the footer.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner.

8. Security and privacy incidents

We use proportionate administrative and technical measures intended to prevent unauthorised access, alteration, loss or disclosure. No internet service can guarantee absolute security, so please avoid sending sensitive account, identity or payment details by email.

If a privacy breach is likely to cause serious harm, we will assess and notify affected people and the New Zealand Privacy Commissioner as required by law.

9. Children and families

Koru Forge is a general-audience editorial site and is not designed to collect personal information from children under 13. If you are under 13, do not send personal information to us. A parent or guardian who believes a child has provided information may contact us for review and deletion.

Game age ratings, chat features and purchase controls vary. Parents and guardians should check the publisher’s rating, privacy settings and platform parental controls before a child plays.

10. Changes and contact

We may update this policy when our services, providers or legal obligations change. A material update will be highlighted on the website, and the date at the top will change. Earlier versions may be requested where available.

For privacy questions or requests, contact our privacy contact at privacy@koru-forge.com. For general editorial matters, use hello@koru-forge.com.