SculptForgeSculptForge

Security

Code signing policy

Free code signing provided by SignPath.io, certificate by SignPath Foundation.

Status

Windows code signing via SignPath Foundation is being set up. Until it is live, Windows builds are unsigned; if SmartScreen appears, choose More info → Run anyway, and check the SHA-256 checksum on the release page.

What is signed

The Windows installer and the Windows portable build of each SculptForge release, built by the project's public GitHub Actions workflow from the tagged source in the SculptForge repository. Only builds made that way are signed; nothing built elsewhere is sent for signing.

Team roles

  • Committers and reviewers: the members of the SculptForge repository with write access. Every change is reviewed before it is merged.
  • Approvers: the maintainer, who approves each signing request for a release.

Privacy

SculptForge does not transfer information to networked systems unless specifically requested by the user or the person installing or operating it, with one exception that can be turned off: once a day at start-up it downloads a small file from sculptforge.app that names the newest version. It sends nothing else about you, apart from what any web request carries (your IP address); if you signed in for member builds, it also asks GitHub, with your GitHub sign-in, for the newest member build. Edit > Preferences > Updates turns the check off. There is no telemetry, no analytics and no crash upload; crash logs stay on your computer.

Everything else connects only when you use it:

  • Community brush gallery: lists and downloads brushes only while its window is open.
  • AI features: the brush description or image goes to the service you chose, only when you press Send or Generate. They can be switched off in Edit > Preferences > AI. See AI tools and AI services & privacy.
  • Phone capture and the local tools (such as the splat trainer): downloaded or connected only when you start them.

Studios can turn every outside connection off with a policy file; see Security and privacy in the user guide.

Reporting a problem

A signed file that looks wrong, or a security issue: see the security policy.