Privacy policy

1. Controller

[Name or company], [Address], email: [Email address]. You can contact this address with any questions about data protection. In case of doubt, the German version prevails.

2. Which data we process

Account: email address, chosen language, time of sign-in. If you sign in with Google, we receive your email address and your name from Google.

Work in the generator: uploaded images (reduced to at most 2000 pixels), settings and preview images of your hatches and drafts, your folders and the number of your free trials and previews.

Payments: subscription, purchases and a customer number from Stripe. Only Stripe receives card and TWINT details, not us.

Technical: When you visit the website, the hosting provider creates logs with IP address, time and requested address.

3. Why

We process this data to provide the service (contract): sign-in, calculating hatches, saving, subscription and library. In addition, we prevent abuse, for example the limit of three free trials, and meet legal retention obligations. We use no advertising or analytics services and do not sell data.

Every exported DXF file contains an invisible identifier of your account, so that files passed on without permission can be traced.

4. How long

Images without a subscription: at most 48 hours after uploading.

Drafts: 30 days after the last change, including images.

Saved hatches, folders and account: until you delete them or your account.

Number of previews per minute: at most one hour.

After an account is deleted: the number of free trials used is kept for two years, but only together with an irreversibly encrypted value of your email address, not the address itself. This way a new account with the same address does not get new free trials.

Payment records: as long as required by law (in Switzerland usually ten years), after account deletion without reference to your account.

5. Providers who process data for us

Supabase (database, files, sign-in and sending sign-in emails): data stored in Zurich, Switzerland. Supabase Inc. is based in the USA.

Vercel (website hosting): computing in Frankfurt, Germany. Vercel Inc. is based in the USA.

Stripe (payments): Stripe Payments Europe Ltd., Ireland.

Google (only when signing in with Google): Google Ireland Ltd., Ireland.

For providers based in the USA, access from the USA cannot be ruled out. It is governed by the providers' contracts, in particular standard contractual clauses or the Swiss-U.S. Data Privacy Framework. [To be checked by an expert.]

6. Cookies and browser storage

We only set technically necessary cookies: one for sign-in and one for the chosen language (one year). We keep your export settings in the browser's storage. There are no advertising or analytics cookies.

7. Your rights

You can request information about your data, have it corrected or deleted and request a copy. You can delete your account and its data yourself at any time in the account.

You can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you are in the EU, to the data protection authority of your country.

8. Changes

This policy may be adjusted when the service changes. The version on this page applies.