Plain-language privacy
Your reflection belongs to you.
Impact Forge collects only the operational information needed to deliver what you request, verify what you purchase, and understand whether the public experience is working.
Agency Snapshot and Challenge reflections
While you complete the Agency Snapshot, your answers remain only on the current page and disappear when you refresh or leave. If you choose to continue, your chosen area, present and desired reality, gap summary, named cost, chosen path, next move, cue, Calibration timing, and stage responses are saved in this browser so the next experience can begin with your words. They are not added to the URL or submitted to Impact Forge. A team or organization continuation stays on the page unless you deliberately copy it or open a new email; the email link does not insert your answers. Challenge reflections, invitation notes, Purpose Field Guide, and Human Potential Card also stay in your browser on your device. Those records leave your device only when you choose to copy, download, or share them.
Shared Team Alignment rounds
A team leader verifies their own email with a one-time code to create and manage a round. No ChatGPT account is required. Participants can answer using a shared round link or a private invitation without an account or email verification. When you choose to contribute, Impact Forge stores your eight ratings, optional priority area and sharing acknowledgment. Written reflections and the action owner or check-in date you enter stay on your current page and are never submitted.
At least three valid, consenting responses are needed to produce a shared report when the response window closes. The leader can close early once that minimum is met, or extend an unreleased round. The leader and participants see the same averages, readiness score and self-reported readiness gap, without names or individual answers. This is not an anonymity guarantee: in a small team, people may infer a colleague’s answers. A shared round link grants entry, not report or management access. The assessment link created from it is tied to the browser where you started. Individual invitation and report links remain usable by anyone holding them, so share links carefully.
To reduce repeated submissions, a separate secure, HTTP-only, same-site browser cookie lasts up to 90 days. The server stores round-specific hashes of browser and, when available, verified-account identifiers in a duplicate-check record separate from answers. That record contains no answer reference and follows the raw-response removal schedule below. This prevents repeat submissions in the same browser and by the same verified account, but it does not establish unique people across devices or cleared cookies. Please contribute once per person; people sharing a device need separate browser contexts. This cookie is separate from the email-verification cookie.
Report access expires after 90 days. Raw ratings, priority choices and any delivery addresses become eligible for removal 30 days after report release and are deleted when the service next receives a request. The leader can end a round to remove its stored records and revoke its links. Save any report you want to keep first.
When a leader creates invitations, their private links are kept in that browser tab so the leader can take their own assessment and return to invite teammates. They are scoped to the verified email using a fingerprint, and cleared on sign-out or when an expired set is next checked. This storage contains no answers, recipient names or recipient email addresses. When you choose to send invitations here, Brevo receives the addresses you enter and each person’s private link to deliver the invitation. Your verified email is included so teammates know who invited them and can reply to you. You can also copy or share invitations through your own app.
Our invitation delivery records keep a hashed recipient address, provider message reference and delivery status, separate from ratings. They follow the round’s retention schedule. Recipient addresses are not saved in the invitation workspace. Brevo processes the email and maintains its own delivery records as our email provider.
Email verification codes expire after 10 minutes. The pending request and your email are kept in this browser tab so you can return after checking your inbox. They are cleared after verification, when you change email, or when an expired request is next checked. The code itself and your assessment answers are not stored there. A secure browser cookie keeps you verified for up to seven days; only its hash is stored with your email on our server. Expired verification and session records are deleted when the service next receives a request. Hashed email and network identifiers limit repeated code requests for 24 hours. These access records are separate from team answers and marketing consent.
Invitations are sent only when the leader chooses the recipients and asks us to send, or shares the links directly. An invitation does not enroll anyone in a newsletter. Reports can be viewed and saved without joining a mailing list. When email delivery is available, requesting your report does not subscribe you. A separate, unchecked choice lets you request the newsletter and additional training tools, with confirmation by email. Marketing consent records stay separate from team answers and are not removed when a team round ends. You can unsubscribe at any time. Google Analytics does not run on the Team Alignment page.
Field Notes mailing list
If you request Field Notes, Impact Forge records your email address, the source of the request, confirmation status, timestamps, and any delivery error needed to complete double opt-in. Brevo sends the confirmation and subsequent notes. You can unsubscribe at any time.
Challenge purchases and delivery
Square processes payment details; Impact Forge does not receive or store your card number. To verify access and deliver the course, Impact Forge receives and records the Square payment and order identifiers, buyer email, amount, currency, payment status, and processing timestamps.
Brevo delivers the seven daily program emails and three scheduled return prompts. Impact Forge records delivery events such as sent, delivered, bounce, blocked, spam, or unsubscribe so failures can be diagnosed and suppression choices respected. A Challenge purchase does not enroll you in Field Notes.
Website analytics
Usage analytics are optional. Google Analytics loads on this site only when you choose “Allow analytics.” You can turn it off using the control at the bottom of the page. Advertising storage, Google signals, and ad personalization are disabled. Events use fixed page and action labels; they exclude form answers, reflection text, URL query details, and referrers. The separately hosted Gap Discovery has its own analytics choice. A button click does not establish a booking, purchase, or customer result.
Your choices
You can clear the private Challenge from your device inside the experience, unsubscribe from any email, or ask about access, correction, or deletion of operational records by emailing william@impactforge.io.
Updated September 26, 2026.