Privacy policy
This explains what we collect, why, who we share it with, and what you can ask us to do about it.
Who is responsible for your data
Forksecret is a trading name of Incoperation LLC, a Wyoming limited liability company, filing ID 2026-001972293, business address 30 N Gould St Ste R, Sheridan, WY 82801, United States. We are the data controller. Contact us about anything on this page at hello@forksecret.com.
What we collect
When you buy something: your name, email address, billing address, the items you ordered and the amount paid. Card details go directly to our payment provider — we never see or store them.
When you visit the site: IP address, browser and device type, pages viewed, referring site, and how you interact with pages. This comes from cookies and similar technologies.
When you sign up for emails: your email address, and whether you open or click what we send.
When you contact us: whatever you put in your message.
We do not collect sensitive personal information, and we don't ask for health information at any point.
Why we use it, and our legal basis
To deliver your order — sending the download link, handling refunds and support. Necessary to perform our contract with you.
To take payment and prevent fraud — necessary for the contract, and our legitimate interest in not being defrauded.
To send marketing emails — only with your consent, which you can withdraw at any time using the unsubscribe link in any email.
For analytics and advertising — understanding how the site is used and measuring our ads. Based on your consent where consent is required in your country, and otherwise on our legitimate interest in running the business.
To meet legal obligations — keeping records for tax and accounting.
Who we share it with
We do not sell your personal information for money. We use these providers, and each receives only what it needs:
Shopify — hosts our store and processes orders and payments on our behalf.
Shopify Email — sends our marketing emails, if you've subscribed.
Google Analytics (Google LLC) — tells us how the site is used.
Meta Pixel (Meta Platforms) — measures our Facebook and Instagram advertising and can be used to show you ads.
TikTok Pixel (TikTok) — measures our TikTok advertising and can be used to show you ads.
We may also share information where the law requires it, or with professional advisers where necessary.
Advertising cookies, and "sharing" under US state law
The Meta and TikTok pixels can pass details of your activity on our site to those platforms so we can measure ads and reach similar audiences. Under California law and several other US state privacy laws, this may count as "sharing" for cross-context behavioural advertising — or "targeted advertising" — even though no money changes hands.
You can opt out using the Do Not Sell or Share My Personal Information link in our footer, through our cookie banner, or by blocking cookies in your browser. We will not treat you differently for opting out.
Where your information is processed
We are a US company. Our team works from Morocco, and our providers operate in the United States, the European Union and elsewhere, so your information will be transferred and processed outside your own country.
Where information is transferred from the EU or UK, we rely on the safeguards our providers have in place, such as Standard Contractual Clauses.
How long we keep it
Order records: as long as tax and accounting law requires, generally up to 7 years. Marketing contacts: until you unsubscribe, then a minimal record so we don't email you again by mistake. Analytics: according to each provider's retention settings, typically no more than 26 months. Support emails: up to 3 years.
Your rights
Wherever you live, you can ask us to give you a copy of your information, correct it if it's wrong, delete it, restrict how we use it, send it to another provider, or stop using it for a particular purpose. You can withdraw consent at any time.
Email hello@forksecret.com and we'll respond within 45 days, or 30 days if you're in the EU or UK. We won't charge you and we won't treat you differently for asking. We may need to confirm your identity first, usually by checking the email address on your order.
If you're in the EU or UK and you're unhappy with our response, you can complain to your national data protection authority. If you're in a US state with its own privacy law, you may have a right to appeal a refused request — email us and we'll explain how.
Children
Our store isn't intended for children. We don't knowingly collect information from anyone under 16. If you believe a child has given us information, email us and we'll delete it.
Security
Payments are handled by PCI-compliant providers and our site runs over HTTPS. No system is perfectly secure, but we don't hold card details ourselves, which removes the most sensitive category of data entirely.
Changes
If we make a significant change we'll update the date below and, where required, tell you directly.
Last updated: 26 August 2026