Privacy policy

What we collect

• Email address — your identity here. Signing in is a one-time emailed code; there is no password to store, so we store none. Uploading as a guest creates a minimal account keyed to your email so your quote, receipt and order history stay connected.
• Phone number (optional) — contact only, if you choose to leave one.
• Contact and feedback messages — your name, email, message topic and the text you send so we can respond and improve the service.
• Your uploaded file — the .3mf, .gcode or .stl you send, your STL slicing confirmations when used, and the resulting sliced file and metadata (material, weight, print time) used for your quote.
• Your product configurations — the product and immutable version you chose, each dimensions/text/options snapshot you deliberately submit by generating a preview, adding a product to your cart or choosing Pay now, and the values you explicitly confirm for an order. We do not record edits or keystrokes between submissions. We also store hashes and bounded success/failure facts from previewing and slicing. Admin-owned SCAD is not customer-uploaded data and is never sent to the browser.
• Order details — quote breakdown, job status, timestamps, a booked pickup window, and for shipped orders the address, parcel service and tracking details.
• Payment records — handled by Stripe. We receive confirmation and a reference for the print payment and any later shipping payment; your card number never touches our systems.

Files and generated artifacts

Uploaded files and customer-specific generated artifacts exist only to preview, quote or print your configuration. We never share or publish them. Different files have deliberately different lifetimes:

• every original uploaded file — retained privately for at least three calendar months, including files rejected during validation or unsuccessful slicing. Temporary processing copies can still be deleted immediately;
• accepted customer uploads — the original file, order slice files and previews are retained without an automatic deletion deadline, including after cancellation, quote expiry, completion or failure. Confirmed cart plates containing uploaded content follow this same retention rule. This keeps them available for order inspection and reprints;
• generated STL files and processing geometry-only .3mf intermediates — created only in a temporary workspace and deleted immediately after each preview or slicing attempt, including failures;
• approved default product files and immutable normalized admin source .3mf files — retained privately with their admin-owned versions and used for the reviewed 3D model and print summary;
• unconfirmed customer configurations — the pending machine-ready file used for the private 3D preview is deleted if generation fails or when the configuration is confirmed, revoked or expires (normally with the 24-hour quote window). Confirmation keeps the order's own copy;
• prepared cart files — pending plate files and their preview data are deleted when the preparation is replaced or invalidated, the cart is confirmed or the cart expires. Accepted originals remain retained;
• canceled or expired generated-only orders — their machine-ready order files and associated previews are deleted after cancellation or quote expiry;
• completed or failed generated-only jobs — the final machine-ready file and associated previews are kept for 7 days so a free reprint stays possible, then deleted.

Services that process data for us

• Product configuration analytics — our own database records deliberate product submissions and order confirmations. Numeric, integer, boolean and listed-choice values may be summarized to show which options customers want. Raw free text is excluded from analytics or represented only by a length bucket. We never collect typing or keystroke events.
• Stripe — payment processing. Card data goes directly to Stripe and is processed in part in the United States (see Stripe's privacy policy).
• Google — if you use address autocomplete, the text you type in the address box is sent to Google Places to suggest matches.
• Canada Post — for shipped orders, we send the recipient name and contact details, shipping address, parcel size and weight needed to obtain the selected service, label and tracking.
• Our email provider — sends sign-in codes, receipts and order updates to the address you gave.
• Hosting — the site and database run on our infrastructure and hosting providers.

Some of these providers store or process data outside Canada (mainly in the United States), where it is subject to local law. We do not sell personal information to anyone, and we disclose it only to these providers, or where the law requires.

Analytics

We use analytics to understand how the site is used and improve ordering. These tools are involved (each tool's disclosure applies from the day it is live on the site):

• Google Analytics — standard usage analytics (pages visited, referrers, approximate location, device type) and ordering events such as quote creation, checkout and confirmed purchases, plus deliberate page-color changes. Color events include the catalogue color, previous color and whether you selected or reset it. Purchase events include a non-personal order identifier, the order value and plate count. Private order links are replaced with generic page paths, and admin pages are excluded. Google uses cookies and processes this data, in part outside Canada.
• PostHog — customer journey events such as quote, checkout and fulfillment actions, linked to your account when signed in. Automatic form capture and session recording are disabled; private access links and admin pages are excluded.

We never feed uploaded models, private preview data, machine-ready artifacts or raw submitted text into Google Analytics or PostHog. Blocking analytics cookies does not affect previewing or ordering; the first-party submitted/confirmed configuration record is still required to perform the service and keep the order explainable.

Cookies and browser preferences

• Session cookie (essential) — keeps you signed in for up to 30days. The site can't work without it.
• Analytics cookies — set by the tools above, only once they are live. Blocking them does not affect uploading, paying or picking up.
• Page color preference — we save the chosen catalogue color in this browser's localStorage so it survives reloads. It contains a color code and format version, with no account or contact information. Reset to orange changes it back; clearing the site's browser storage removes it. If storage is blocked, the choice works for the current visit.

How long we keep the rest

• Uploaded and generated bytes — the artifact schedule above.
• Confirmed product version, exact confirmed values, hashes and generation status — retained with the order record so receipts, disputes and reprints remain explainable after temporary bytes are deleted.
• Abandoned or failed configurations with no order — requester linkage, token, raw values (including free text) and private diagnostics are removed or redacted after 30 days. Sanitized numeric/integer/boolean/listed-choice values, free-text length buckets, failure code and timing totals may remain without the requester for product and reliability analysis.
• Order and payment records — kept while your account exists and as long as Canadian tax law requires business records to be kept (generally six years).
• Sign-in codes — expire after 10 minutes and are useless afterwards.

Your rights

Email [email protected] from your account address and we will:

• show you the personal information we hold about you;
• correct anything inaccurate;
• delete your account and personal information, except records the law requires us to keep (completed-order records for tax purposes).

If you believe we have handled your information badly, tell us first — and you can complain to the Office of the Privacy Commissioner of Canada.

Email from us

We send transactional email only: sign-in codes, receipts, order updates. We will not send marketing email without asking for your consent first, and anything optional will have a working unsubscribe.

Changes

If this policy changes, the effective date at the top moves; a material change (a new tool, a new use of data) is called out on this page before it applies to you. This policy is part of our terms of service.