Privacy Policy
This Privacy Policy explains what personal data SaberCraft collects when you design custom sabers, create an account, purchase STL files, or contact support, how that data is protected, and your rights under the EU/EEA General Data Protection Regulation (GDPR) and applicable privacy laws.
1. Information We Collect & Why
When you create an account or sign in, we collect your email address, sign-in credentials, optional display name, and the custom saber builds you save to your account. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
Checkout payments are processed directly by PCI-DSS Level 1 certified provider Stripe. SaberCraft never receives or stores your credit card number. We store only order metadata (email, transaction reference, purchased items, and build snapshot) to deliver your files and comply with statutory accounting rules (GDPR Art. 6(1)(b) & 6(1)(c)).
If you use the Contact form, we collect your name, email address, and message to reply to your inquiry, protected against spam by Cloudflare Turnstile. Questions typed into the optional Crafty assistant are processed transiently to answer your question; do not submit sensitive personal data in chat prompts.
To keep the 3D Studio fast, reliable, and protected against automated abuse, we process technical metadata (browser/device type, page views, anonymized 3D builder feature events, and short-lived rate-limiting IP checks). Legal basis: legitimate interest in security and product improvement (GDPR Art. 6(1)(f)) or consent where required for analytics cookies.
2. Cookies, Local Storage & Analytics
SaberCraft minimizes cookie usage and relies primarily on essential browser storage so the 3D Studio works smoothly:
3. Service Providers & Data Sharing
We never sell or rent your email address or personal data. We share data strictly with trusted infrastructure providers necessary to run SaberCraft:
- Vercel: Global web hosting, edge delivery, and serverless STL export execution.
- Supabase: Encrypted user authentication, saved build database, and secure cloud storage.
- Stripe: Encrypted checkout, tax calculation, and payment processing.
- Cloudflare Turnstile & Resend: Privacy-preserving bot protection and transactional support email delivery.
- Analytics & AI Providers (PostHog EU / Google Gemini): PostHog (EU Cloud) is used for privacy-friendly aggregated usage analytics, and Google Gemini powers the optional Crafty 3D-printing assistant. Where data is transferred outside the EU/EEA, Standard Contractual Clauses (SCCs) or adequacy frameworks apply.
4. Data Retention
Account details and cloud-saved saber builds are retained for as long as your account remains active so you can access and re-download your files. You may delete saved builds or request full account deletion at any time. Purchase transaction records are retained only for the period required by applicable tax and accounting regulations.
5. Your Privacy Rights
Under GDPR and applicable privacy laws, you have the right to access, correct, export, or delete your personal data, restrict or object to processing, and withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority (such as Datatilsynet in Norway).
Privacy Inquiries & Data Deletion Requests
Reach out anytime to request a copy or deletion of your account data. See also our Terms of Sale & STL License.
