Privacy

Last updated: 23 October 2026

Who we are

CompanionForge is made by Trouler Technologies, an enskild firma (sole trader) registered in Sweden and run by Henrik Lennartsson (organisationsnummer 861210-3310), Blåsebergavägen 47, 216 35 Limhamn, Sweden. Contact, also for privacy requests: [email protected]. For data that we process ourselves, we are the controller under the GDPR.

The short version

• CompanionForge runs on your PC. Your API keys, the companion's memory, your settings, notes and avatars stay on your PC. We do not receive them.
• When CompanionForge uses an AI, voice or search service, it sends what that request needs directly from your PC to the service you chose, with your own key. That service handles it under its own terms and privacy policy. OpenRouter passes your request on to the company that runs the model you picked; its own terms apply too.
• We do not sell your data and we do not use it for advertising.

What goes to the services you choose

Depending on the features you use: what you say (as text, or as audio with a cloud speech service), information from the game (zone, quests, target, level...), a screenshot of the game window when you ask your companion to look, Twitch chat messages they answer (only if you switch that on), the last minutes of the game's chat or Twitch chat when you ask what is going on there (guild chat and whispers only when you name them), parts of their memory as context, search queries, and the text they speak. Chat is kept on your PC for ten minutes, in memory only. Each service's own privacy policy applies.

Other players. The game's chat and screenshots can contain other players' character names and what they wrote. CompanionForge reads the game's chat only with "Game chat" ticked in the addon's options, keeps it on your PC for ten minutes, never saves it, and sends it to your AI provider only when you ask what is going on there. We never receive this data: you decide whether and when it is used, so for it you, not we, are responsible under data protection law.

Twitch. If you switch Twitch chat answers on, your viewers' messages and names may be sent to your AI provider. Tell your viewers on your channel, for example in a panel. CompanionForge sends nothing into chat.

Update check

Every four hours CompanionForge downloads a small file from downloads.companionforge.app to see whether a new version is out; the update itself is only downloaded when you click Update. Like any web request this carries your IP address (nothing else: no version, no ID). The file is served by Cloudflare, Inc. as our processor under its Data Processing Addendum; Cloudflare may process the request in the USA under the EU-US Data Privacy Framework (or the EU Standard Contractual Clauses). We keep no logs of these requests. Our basis is our legitimate interest, and yours, in getting fixes and security updates: an out-of-date copy stops working with the services it uses and misses security fixes. You can object by writing to [email protected].

Purchases

Premium is sold by Paddle (Paddle.com Market Ltd, or another Paddle company depending on where you live), our reseller and the merchant of record. Paddle handles checkout, payment, tax and invoices, and is an independent controller for that data under its own privacy notice. We never see your card or bank details.

From Paddle we receive your email address, your country, and your subscription status (plan, renewal date, whether it is active or cancelled). We use them to give you Premium and to answer your questions about it (legal basis: our contract with you), and keep them while you have an account with us. After that we keep them only as long as we need them to handle refunds, chargebacks or disputes about your purchase, and as long as Swedish accounting law requires for records we must keep.

Premium licence check

To sign you in and keep Premium on one PC at a time, our licence service (run for us on Cloudflare) stores your email address, your subscription status, a code made from your PC's Windows ID (not the ID itself) and your PC's name, so your account page can show it. Sign-in codes are sent to your email address by an email service we use for that. When the app checks your subscription it sends the same PC code; it sends nothing about what you do in the app. Legal basis: our contract with you. When you remove a PC, it is taken off your account; the rest is kept as described under Purchases.

Your rights

You can ask us for a copy of the data we hold about you, to correct it or delete it, at [email protected]. You may also complain to the Swedish Authority for Privacy Protection (IMY).