Privacy Policy

Account information: when you sign up we collect your name, email address and authentication identifiers through our authentication provider, Clerk. If you sign in with a third-party provider such as Google, we receive your basic profile information (name, email address and profile picture) as authorised by you during sign-in.

Content you create: the 3D models, sketches, projects and related metadata you create or upload are stored so we can provide the Service to you.

Usage and technical data: we may collect limited technical information such as browser type, device information and basic interaction logs to operate and secure the Service.

We use your information to provide and maintain the Service, authenticate you, store and render your projects, communicate with you about your account, and improve the reliability and security of the Service.

We do not sell your personal information, and we do not use the content of your projects for advertising.

When you choose to sign in with Google, we access only the basic profile and email information needed to create and secure your account. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not transfer Google user data to third parties except as necessary to provide the Service, comply with applicable law, or as part of a merger or acquisition.

We share information only with service providers who help us operate the Service, such as our authentication provider (Clerk), our database and object-storage hosting (OVH), and similar infrastructure processors. These providers process data on our behalf under appropriate agreements.

We may disclose information if required by law or to protect the rights, safety and security of our users and the Service.

We use essential cookies to keep you signed in and to remember preferences such as your language. We do not use cookies for third-party advertising.

To understand how the Service is used, we use Google Analytics in a privacy-preserving, cookieless mode: analytics storage is disabled by default, so it does not set analytics cookies on your device or identify you individually — it only reports aggregate, anonymised usage.

With your consent, we also store two first-party cookies (kapy_attr_first and kapy_attr_last, one year) recording how you first reached the Service and the most recent campaign or referring site that brought you back — the marketing tags in the link you clicked and the referring website address. They are never shared with third parties or used for advertising. If you create an account, this information is attached to it so we can understand which channels our users come from. Where consent is required we ask for it first, and declining means we record your visit as direct.

With your consent, we record your sessions inside the editor so we can see where the Service is confusing, slow or broken. A recording captures what happened on screen: the panels and tools you used, your clicks, scrolling and pointer movement, and the 3D viewport itself — which means the model you were working on is visible in the recording. Text you type into fields is masked in your browser before anything is sent, and we never record the contents of network requests.

Recording is limited to the editor. It does not run on the rest of the site, and it does not run in the smart-object code editor, so code you write there is never captured.

These recordings are processed and stored on our own infrastructure (OVH) using a self-hosted instance of OpenReplay. They are not sent to any third-party session-recording service. We keep them for up to 30 days and then delete them automatically.

Where consent is required we ask before any recording starts, and declining means none of your sessions are recorded. You can ask us to stop recording your sessions, and to delete any recordings we still hold, at any time by writing to [email protected].

We retain your account information and content for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us.

Depending on your location, you may have the right to access, correct, export or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at the address below.

We take reasonable technical and organisational measures to protect your information. No method of transmission or storage is completely secure, but we work to safeguard your data against unauthorised access.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above and, where appropriate, notify you through the Service.

If you have any questions about this Privacy Policy or your data, contact us at [email protected].