Privacy notice

1. Controller

[LEGAL NAME / COMPANY], [POSTAL ADDRESS], Austria. Privacy contact: [PRIVACY EMAIL]. Company register and VAT information: [IF APPLICABLE].

2. Local puzzle processing

Imported models, puzzle settings, generated bodies and local project history are processed in the browser and stored in IndexedDB on the device. Source-model geometry is not uploaded merely to generate or export a puzzle. Clearing the browser's site data also removes this local history.

3. Account and contract data

• Email address, display name, external identity-provider ID and verification status.
• Plan, subscription state, credit balances, ledger entries, downloads and invoice references.
• Marketplace publication settings, project metadata, rendered previews and licence records.
• For commercial sellers: legal and business name, registered address, country, VAT ID where applicable, website and declared storefront URLs, review status and licence history.
• Support messages, feature requests and proportionate security logs.

4. Analytics and marketing

Necessary operational events may be processed to secure the service and complete requested transactions. Optional product analytics, campaign attribution, newsletter tracking and personalised offers must remain disabled until the visitor has provided a valid consent. Source-model geometry and complete STL content must not be included in analytics events.

Marketing consent can be withdrawn at any time. Transactional messages such as email verification, security notices, purchase confirmations and invoice availability are separate from promotional newsletters.

5. Marketplace publication

The planned free-credit offer requires the generated project preview and associated marketplace metadata to be published. This condition must be shown before a free credit is used. Paid users can choose whether an eligible project is public or private; the planned default is public and can be changed before export.

6. Commercial seller verification

Commercial seller details are processed to review eligibility, issue and administer resale licences, prevent misuse and document contractual permissions. Only the licence number, seller display name, status and approved storefronts should be public; identity evidence and internal review notes remain access-controlled.

7. Providers and international transfers

Before launch, list every identity, hosting, payment, email, analytics, customer-support and storage provider here, including its purpose, processing location, retention and applicable transfer safeguard. Execute the required data-processing agreements before activating a provider.

8. Retention

• Local projects: until the user deletes the project or browser site data.
• Accounts and marketplace records: [FINAL RETENTION AND DELETION RULE].
• Credit and payment ledger: retained for contractual, fraud-prevention and statutory accounting requirements.
• Consent records and security logs: [SHORT, JUSTIFIED RETENTION PERIOD].
• Marketing profiles: until consent is withdrawn or the documented inactivity limit is reached.
• Commercial licence applications and review records: [FINAL CONTRACT AND LEGAL-CLAIMS RETENTION RULE].

9. Rights and security

Depending on the circumstances, users may request access, correction, deletion, restriction, portability or object to processing, and may withdraw consent for the future. Requests: [PRIVACY EMAIL]. Complaints may be submitted to the Austrian Data Protection Authority.

Production safeguards must include encrypted transport, least privilege, server-side authorisation, managed password handling, verified payment webhooks, rate limits, audit logging, backups, incident response and regular dependency updates.