Privacy & Cookies

Controller and contact

Jakub Bezděka is the controller for the processing described in this notice.

Local editor data

Projects and board catalogs are stored in IndexedDB on the editor origin. Local project geometry, dimensions, names, and exported files are not sent to SnapSolid unless you explicitly add a project to optional SnapSolid Cloud. Local storage remains until you delete a project or clear the editor origin's browser data, so export backups you need.

Optional SnapSolid Cloud

Users may sign in with Google and, after accepting the current Terms of Use, explicitly add projects to cloud synchronization. SnapSolid then processes the Google account email and identifier, the accepted Terms version, acceptance time and language, the current project document and name, technical revision, operation and device identifiers, plan entitlement data, and any named snapshots you create. The IP address is not added to the Terms acceptance record. Free Cloud includes one editable project; manually granted or future subscribed Premium accounts receive higher limits. Cloud identity and project processing are necessary to provide the Cloud service you request. Keeping the acceptance record is also necessary to document the applicable agreement and protect the legitimate interests of both parties. Supabase, Inc. provides authentication and database hosting and may process this data under its contractual transfer safeguards. Cloud projects moved to trash are retained for up to 30 days before scheduled removal.

You can permanently delete the Cloud account from its account panel. The active Auth identity, Cloud projects, snapshots, linked plan state, and Terms acceptance are deleted together; local browser projects remain on the device. This does not unsubscribe a separately requested newsletter. Provider backups and necessary security logs may remain for their limited retention periods before deletion or irreversible expiry.

Supabase privacy policy · Supabase data processing addendum · Google privacy policy

Cloud account product emails

During Cloud registration you may separately choose whether SnapSolid sends occasional product news, offers, and updates to the email address of your Google account. The choice is off by default and is not required for Cloud. SnapSolid records each grant or withdrawal with the applicable consent-text version, interface language, and time so the choice can be demonstrated. The legal basis is your consent.

You can change the choice at any time in the Cloud account panel; withdrawing is as easy as granting it and stops future marketing messages. Every such email must also provide a free unsubscribe option. This account preference is separate from the homepage Buttondown newsletter. Deleting the Cloud account deletes this preference history, but does not unsubscribe the separate newsletter.

Hosting and security logs

SnapSolid is delivered by Netlify, Inc. When your browser requests a page or asset, Netlify may process the IP address, device and browser information, requested URL, referrer, and request time to deliver and secure the service, prevent abuse, and diagnose infrastructure failures. The legal basis is SnapSolid's legitimate interest in providing a secure and reliable website. Netlify retains infrastructure data under its applicable service retention rules and may process it in the United States using the EU–US Data Privacy Framework and Standard Contractual Clauses.

Netlify privacy statement · Netlify GDPR information

Necessary browser storage

• scene_editor_cookie_consent remembers your shared optional-data choice for 180 days.
• snapsolid_locale remembers the shared web and editor language for one year.
• snapsolid_theme remembers Light, Dark, or Auto for one year.
• IndexedDB holds local projects separately on each origin until you delete them or clear that origin's data.

On production SnapSolid subdomains the three preference cookies use the shared snapsolid.com cookie domain. Project IndexedDB never does. Preview and localhost cookies remain host-only.

Google Analytics

Google Analytics 4 does not load and no request is sent to Google Analytics until you actively allow analytics. After consent, Google may process the page URL and referrer, event time, device and browser information, IP address and approximate location derived from it, and a client identifier. SnapSolid sends only a small product funnel: homepage editor CTA, editor opening, project start method, first object type, and JSON or STL export format. It also sends aggregate LCP, CLS, and INP values, ratings, and whether the measurement came from the public site or editor. These performance events contain no route or project identifier. SnapSolid does not send project names, dimensions, geometry, email addresses, or exported content. Advertising storage, ad user data, and ad personalization are always disabled. The legal basis is your consent.

Google Ireland Limited and its affiliates provide the service and may process data outside the EEA under the EU–US Data Privacy Framework or Standard Contractual Clauses. User-level and event-level data uses the configured GA4 retention period of 2 months; standard aggregated reports may remain available longer. The _ga and property-specific _ga_… cookies expire after up to 2 years unless you withdraw consent or clear them sooner.

Google privacy policy · Google data processing terms

Optional client diagnostics

Only after diagnostics is configured and you consent, Sentry may receive a reduced error type and stack trace to diagnose otherwise unhandled application failures. Cloud synchronization may additionally report only its phase, a stable error code, attempt number, latency, and queue depth. Session replay, performance tracing, breadcrumbs, identity, cookies, request and response data, URL query parameters, project content, identifiers, names, geometry, dimensions, and exports are disabled. The legal basis is consent. Sentry may process data outside the EEA using its applicable transfer safeguards, and retention follows the configured Sentry project period.

Sentry privacy notice

Product updates newsletter

If you submit the optional newsletter form, the form is sent directly to Buttondown, LLC. Buttondown processes your email address and may also process the request IP address, referrer, subscription timestamp, and newsletter delivery, open, and click information to confirm and manage the subscription. No name, company, or project content is requested by SnapSolid.

The legal basis for sending product updates is your consent. You must confirm the subscription by email and every message includes an unsubscribe option. Data is retained while you subscribe and then deleted under Buttondown's retention and backup rules. Buttondown is based in the United States and uses the European Commission's Standard Contractual Clauses for transfers from the EEA.

Buttondown privacy policy · Buttondown data processing agreement

Your choice and withdrawal

Analytics and client diagnostics are separate optional purposes and remain off unless you actively allow each one. Rejecting either purpose does not limit the site, editor, exports, Cloud, or newsletter signup. You can use Cookie settings in the public footer or the editor's Privacy menu to change either choice. Withdrawing analytics consent removes accessible Google Analytics cookies and reloads the page without the Google tag; withdrawing diagnostics stops new Sentry reports. Withdrawal does not affect processing already performed before it.

Your rights

Subject to the conditions in data-protection law, you may request access, correction, deletion, restriction, or portability of your personal data, object to processing based on legitimate interests, and withdraw consent at any time. You may contact the controller electronically using the details above. SnapSolid will normally respond within one month and may request information needed to verify your identity. You may also lodge a complaint with the Czech Office for Personal Data Protection. SnapSolid does not use personal data for automated decisions or profiling that produce legal or similarly significant effects. Account product emails, the newsletter, analytics, and diagnostics are optional and are not a contractual or statutory requirement.

Changes

This notice will be updated when the service, providers, or legal requirements materially change. A change that affects an existing optional consent will use a new consent version and ask you again. If a material change affects the Cloud agreement, Cloud access will ask you to accept the new Terms before it continues. The date above identifies when this version became effective.