Privacy policy

What we collect

• Email address — your identity here. Signing in is a one-time emailed code; there is no password to store, so we store none. Uploading as a guest creates a minimal account keyed to your email so your quote, receipt and order history stay connected.
• Phone number (optional) — contact only, if you choose to leave one.
• Contact and feedback messages — your name, email, message topic and the text you send so we can respond and improve the service.
• Your uploaded file — the .3mf or .gcode you send, plus the slice metadata we read from it (material, weight, print time) to build your quote.
• Your in-house item configurations — the item and immutable version you chose, each dimensions/text/options snapshot you deliberately submit by pressing Preview, and the one you explicitly confirm. We do not record edits or keystrokes between submissions. We also store hashes and bounded success/failure facts from previewing and slicing. Admin-owned SCAD is not customer-uploaded data and is never sent to the browser.
• Order details — quote breakdown, job status, timestamps, a booked pickup window, and for shipped orders the address, parcel service and tracking details.
• Payment records — handled by Stripe. We receive confirmation and a reference for the print payment and any later shipping payment; your card number never touches our systems.

Files and generated artifacts

Uploaded files and customer-specific generated artifacts exist only to preview, quote or print your configuration. We never share or publish them. Different files have deliberately different lifetimes:

• accepted customer uploads — the original file, order slice files and previews are retained without an automatic deletion deadline, including after cancellation, quote expiry, completion or failure. This keeps them available for order inspection and reprints. Temporary processing files and rejected uploads are still deleted;
• generated STL files and geometry-only .3mf intermediates — created only in a temporary workspace and deleted immediately after each preview or slicing attempt, including failures;
• approved default item previews — kept with the active admin-owned version so every visitor starts from the same reviewed image;
• unconfirmed customer configurations — the private PNG and pending machine-ready artifact are deleted if generation fails or when the configuration is canceled, revoked or expires (normally with the 24-hour quote window);
• canceled or expired confirmed in-house item quotes — the customer PNG and machine-ready order bytes are deleted immediately;
• completed or failed in-house item jobs — the customer PNG and final machine-ready artifact are kept for 7 days so a free reprint stays possible, then deleted.

Services that process data for us

• In-house configuration analytics — our own database records only deliberate Preview and Confirm submissions. Numeric, integer, boolean and listed-choice values may be summarized to show which options customers want. Raw free text is excluded from analytics or represented only by a length bucket. We never collect typing or keystroke events.
• Stripe — payment processing. Card data goes directly to Stripe and is processed in part in the United States (see Stripe's privacy policy).
• Google — if you use address autocomplete, the text you type in the address box is sent to Google Places to suggest matches.
• Canada Post — for shipped orders, we send the recipient name and contact details, shipping address, parcel size and weight needed to obtain the selected service, label and tracking.
• Our email provider — sends sign-in codes, receipts and order updates to the address you gave.
• Hosting — the site and database run on our infrastructure and hosting providers.

Some of these providers store or process data outside Canada (mainly in the United States), where it is subject to local law. We do not sell personal information to anyone, and we disclose it only to these providers, or where the law requires.

Analytics and experiments

We use analytics to understand how the site is used and to test improvements. Two tools are involved (each tool's disclosure applies from the day it is live on the site):

• Google Analytics — standard usage analytics (pages visited, referrers, approximate location, device type), using cookies. Google processes this data, in part outside Canada.
• APDL, our self-hosted analytics — usage events, sessions, A/B experiment assignments and feature personalization. This data stays on our own infrastructure and is not shared with any third party. It may be used to automatically adjust what the site shows you (for example, which variant of a page you see). APDL does not receive in-house item values.

We never feed uploaded models, preview PNGs, machine-ready artifacts or raw submitted text into Google Analytics or APDL. Blocking analytics cookies does not affect previewing or ordering; the first-party submitted/confirmed configuration record is still required to perform the service and keep the order explainable.

Cookies

• Session cookie (essential) — keeps you signed in for up to 30days. The site can't work without it.
• Analytics cookies — set by the tools above, only once they are live. Blocking them does not affect uploading, paying or picking up.

How long we keep the rest

• Uploaded and generated bytes — the artifact schedule above.
• Confirmed item version, exact confirmed values, hashes and generation status — retained with the order record so receipts, disputes and reprints remain explainable after temporary bytes are deleted.
• Abandoned or failed configurations with no order — requester linkage, token, raw values (including free text) and private diagnostics are removed or redacted after 30 days. Sanitized numeric/integer/boolean/listed-choice values, free-text length buckets, failure code and timing totals may remain without the requester for product and reliability analysis.
• Order and payment records — kept while your account exists and as long as Canadian tax law requires business records to be kept (generally six years).
• Sign-in codes — expire after 10 minutes and are useless afterwards.

Your rights

Email [email protected] from your account address and we will:

• show you the personal information we hold about you;
• correct anything inaccurate;
• delete your account and personal information, except records the law requires us to keep (completed-order records for tax purposes).

If you believe we have handled your information badly, tell us first — and you can complain to the Office of the Privacy Commissioner of Canada.

Email from us

We send transactional email only: sign-in codes, receipts, order updates. We will not send marketing email without asking for your consent first, and anything optional will have a working unsubscribe.

Changes

If this policy changes, the effective date at the top moves; a material change (a new tool, a new use of data) is called out on this page before it applies to you. This policy is part of our terms of service.