Privacy Policy

Collected

Account

Email address. With Google or GitHub sign-in, the name and profile they send.

API keys and agent logins

Key names, scopes and last use. For an agent login, the name the agent gives and the IP address it started from.

Uploads

Model files, file names, material, quantity, notes, and, for uploads without an account, an email address for the quote.

IP addresses

Of visitors who upload, requote or price delivery, for rate limits and abuse blocks. This website forwards them to the quote service.

Delivery

Recipient name, phone, address and delivery notes.

Contact form

Name, email, company and message, and the IP address it was sent from, for rate limits and bot checks.

Payment

Card and billing details go to Stripe. We receive the payment status and checkout email, not card numbers.

Site usage

Pages visited, with quote links and other IDs removed; the referring site; country, region and city; browser, operating system and device type; page load speed; and steps such as starting an upload, changing the material or opening checkout, each with at most two short labels: the material, color, quantity or price range, file type, lead time, delivery method or outcome, quote or payment status, sign-in method, the kind of page a sign-in returns to, the button you used and where it sits, where a quote was saved from, the kind of upload error, or which permissions a new API key has. Never your email, name, files, quote links, addresses or anything you type.

Service providers

Supabase

Sign-in (passwords, stored hashed; email codes; Google or GitHub where offered) and copies of account, API key and order records. Never files, quote links, visitor IP addresses, checkout emails or delivery details.

Vercel

Hosts this website. Web Analytics and Speed Insights count site usage without cookies; visitors are told apart by a hash of the request, not stored with their IP address and discarded after 24 hours.

Amazon Web Services

Stores off-site backups of the production database and files. Production quoting runs on our shop Mac.

Cloudflare

Turnstile bot checks on sign-up, sign-in, code resend, password reset, uploads, requotes and the contact form. Network in front of the quote service.

Stripe

Payments and sales tax. Receives your email, delivery name, phone and address, and billing address.

Uber Direct

Courier delivery. Receives recipient name, phone, address and notes.

Pirate Ship

Carrier shipping labels. Receives recipient name, phone and address, which go to the carrier.

Google Places or Photon (komoot)

Address suggestions. Receives the partly typed address, not your IP address.

Resend

Account and password reset codes, emails about quotes and orders, and contact form messages.

Slack

Operator notifications, including customer emails and order links.

OpenRouter

Numeric part measurements for some quotes. No files, file names or identity.

Retention

Model and production files

Unpaid quotes: 90 days after the quote expires. Orders: 90 days after completion and delivery, or cancellation; at least 180 days for paid orders.

Delivery details

Unpaid quotes: 30 days after the quote expires. Paid orders: 30 days after delivery, shipping or cancellation.

IP addresses on quotes

7 days after the quote is made, longer only while it is being worked on.

Agent logins and their IP address

1 day after the login expires.

Account and order records

Kept.

Site usage

Kept by Vercel as anonymous records, not tied to a person, an account or an IP address.

Mac service logs

The quote server, gateway, and tunnel logs rotate daily or at 20 MB, checked every five minutes. Rotated logs are kept for up to 30 days.

Database and file backups

The Mac keeps a rolling set of database backups, plus separately retained release and migration copies. Hourly off-site copies in Amazon S3 are retained indefinitely, including copies of uploaded and production files. Replaced versions are kept for up to 90 days after replacement.

Deletion from active storage does not remove older copies retained in backups. Restored data is subject to our retention rules again.

Cookies and storage

• Sign-in session cookie.
• 30-minute cookie that returns you to a quote after sign-in.
• Browser storage: links to quotes uploaded in this browser.
• No analytics or advertising cookies. Site usage is counted without cookies or browser storage.

Sharing

Not sold. Not shared for advertising.

Requests

Access, correction or deletion: [email protected]

Choices and policy changes

Email us to request access, correction, or deletion. We verify your identity before acting. We may retain records needed for accounting, disputes, fraud prevention, or legal obligations. We do not track browsing across other companies’ websites for advertising, and we do not change that practice in response to a Do Not Track signal.

Service providers process information to provide their services and may collect device or network information for security. We use the information described above to operate, secure, provide customer support for, and improve the service, fulfill orders, and meet legal obligations.

Material policy changes will be posted here with a new date and notified to account holders by email. The service is intended for adults; we do not knowingly collect information from children under 13.