Working draft
forgeaibotlog.com is run by Forge Creative, [LEGAL NAME AND ADDRESS], New Zealand.
What we collect. If you use the contact form we keep your name, email address, site address and message so we can reply. Our web server keeps standard access logs (IP address, page requested, browser, time) for [N] days for security and troubleshooting. We use [ANALYTICS TOOL OR “no analytics”].
Payments. Pro is sold through Freemius, Inc. When you buy, Freemius collects your name, email, billing details and payment card, under its own privacy policy. We receive your name, email and licence details, not your card. Freemius also handles licence checks and plugin updates for Pro, which means a site running Pro contacts Freemius’s servers for those purposes.
Cookies. [List: none beyond what the site’s platform sets, or name them.]
Your rights. You can ask what we hold about you, ask us to correct or delete it, or complain to the Office of the Privacy Commissioner in New Zealand or your local authority. Write to [SUPPORT EMAIL].
The plugins on your site
The free plugin and Pro run entirely inside your WordPress site. They send nothing to Forge Creative. What they store, they store in your database, and it is yours.
The free plugin records each visit by a known AI bot: the time, the bot’s name, the page requested, the bot’s IP address and the name the bot sent. IP addresses can be shortened in Settings. Individual visits are deleted after 90 days by default; monthly totals per bot are kept. When verification is on, the plugin fetches the published IP-range lists of OpenAI, Anthropic and Perplexity from those companies’ websites once a day, and performs reverse DNS lookups on bot addresses. Both are server-to-server requests that carry no information about your site’s visitors.
Pro additionally records each person who arrives from an AI assistant: the time, the assistant, the page, the address the visitor came from, and how the visit was recognised. No IP address is stored. To count repeat views and unique visitors, Pro stores a scrambled identifier made from the visitor’s IP address and browser and a secret that changes every day; it cannot be reversed, and cannot connect the same person across days. Individual visits are deleted after two years by default; daily totals are kept. In browser mode Pro adds a small script to your pages that sends the page address and the address the visitor came from to your own site. It sends nothing to any third party.
Your responsibility
As the site owner you decide whether and how to disclose this in your own privacy policy. The section above is written so you can adapt it.