Privacy Policy

Last updated: September 24, 2026

SetupForge is a product of KafLabs ("we", "us"). This page is a product-specific supplement to the KafLabs Privacy Policy, which applies to all KafLabs products. Where the two differ, this page applies to SetupForge.

SetupForge (the "Service") is a website that builds a Windows installer from the apps you select. We collect as little data as the Service needs to work.

1. Information We Collect

Your app selection. When you click "Generate Installer", your browser sends the list of WinGet package IDs to our server. The server writes the list into a temporary build folder, compiles the installer, sends the file back to you, and deletes the folder. The selection is not stored in a database. Server logs may keep the list for troubleshooting for a limited time.
Shared links. Your selection is also part of the page address (the apps parameter). This lets you copy the link and share it. The link can remain in your browser history and wherever you paste it. When analytics is enabled, PostHog receives the full page address, including the selected app IDs and other URL parameters. Requests for these addresses can also appear in server access logs.
Usage analytics. We use PostHog, hosted in the European Union, to understand how the site is used. It records page views, clicks, the apps you select or deselect, installer generation events, errors, and technical data such as browser type, screen size, and approximate location derived from your IP address. Session recordings and heatmaps are turned off. We do not link analytics data to a name or email address, because the Service has no accounts.
Server logs. Our hosting provider and our server keep standard access logs (IP address, request path, time, user agent) for security and troubleshooting.

2. What We Do Not Collect

We collect nothing from the computer where you run the generated installer. The installer runs WinGet locally and does not report back to us.
We do not ask for a name, email address, or account.

3. Cookies and Browser Storage

The website sets no cookies. PostHog keeps a random visitor ID and its event queue in your browser's local storage. You can clear it at any time through your browser settings. If your browser sends the "Do Not Track" signal, analytics is turned off for you.

4. How We Use Information

To build and deliver the installer you requested.
To keep the Service secure and to fix errors.
To learn which apps and features are used, so we can improve the Service.

5. Sharing of Information

We do not sell or rent your data. We share information only:

With service providers that run parts of the Service for us: our hosting provider and PostHog (analytics). They process data on our behalf.
If required to comply with a legal obligation or to protect our rights.

6. Data Retention

App selections used to build an installer are deleted from the build folder as soon as the installer is sent to you.
Analytics events are kept in PostHog for up to one year. After that they are deleted.
Server logs are rotated and kept only for a limited time.

7. Data Security

The site is served over HTTPS. We apply standard safeguards to the servers we control. No method of transmission or storage is fully secure, so we cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have collected such data, contact us and we will delete it.

9. Your Choices and Rights

Turn on "Do Not Track" in your browser to opt out of analytics, or clear your browser's local storage to reset your visitor ID.
You can ask us to access or delete the data we hold about you. Because analytics data is not tied to your identity, tell us your PostHog visitor ID from local storage if you want a specific record removed.

10. Changes to This Policy

We may update this Privacy Policy. Changes are posted on this page with a new "Last updated" date. Continued use of the Service after an update means you accept the revised policy.

11. Contact

For privacy questions, email [email protected].

Last updated: September 24, 2026

SetupForge (the "Service") is a website that builds a Windows installer from the apps you select. We collect as little data as the Service needs to work.

1. Information We Collect

Your app selection. When you click "Generate Installer", your browser sends the list of WinGet package IDs to our server. The server writes the list into a temporary build folder, compiles the installer, sends the file back to you, and deletes the folder. The selection is not stored in a database. Server logs may keep the list for troubleshooting for a limited time.

Shared links. Your selection is also part of the page address (the apps parameter). This lets you copy the link and share it. The link can remain in your browser history and wherever you paste it. When analytics is enabled, PostHog receives the full page address, including the selected app IDs and other URL parameters. Requests for these addresses can also appear in server access logs.

Usage analytics. We use PostHog, hosted in the European Union, to understand how the site is used. It records page views, clicks, the apps you select or deselect, installer generation events, errors, and technical data such as browser type, screen size, and approximate location derived from your IP address. Session recordings and heatmaps are turned off. We do not link analytics data to a name or email address, because the Service has no accounts.

Server logs. Our hosting provider and our server keep standard access logs (IP address, request path, time, user agent) for security and troubleshooting.

9. Your Choices and Rights

Turn on "Do Not Track" in your browser to opt out of analytics, or clear your browser's local storage to reset your visitor ID.

You can ask us to access or delete the data we hold about you. Because analytics data is not tied to your identity, tell us your PostHog visitor ID from local storage if you want a specific record removed.