Privacy Policy

• Membership accounts. If you join, we store your email address, the display name you choose, and your password (in securely hashed form) with our authentication provider, Supabase. Supabase also records basic account activity such as when the account was created and when you last signed in. We never see your password in plain text. Browsing, downloading free models and using the customizer do not require an account.
• PixelForm Plus subscriptions and payments. If you subscribe, checkout and billing are handled by Lemon Squeezy, our reseller and merchant of record. You give your name, billing address and card details to Lemon Squeezy, never to us. Lemon Squeezy tells us your subscription status, renewal or end date, and its customer and subscription IDs, which we store in Supabase linked to your PixelForm account so we can turn Plus benefits on or off.
• Downloads. Free model files are public and can be downloaded without an account. For members-only (Premium) files, our server checks that you are signed in with an active Plus membership and then gives you a short-lived download link. We do not keep a per-account download history.
• Visit statistics. We keep our own anonymous visit counts, stored in Supabase: the page viewed or the fact that a file download button was clicked, the time, and your country (derived by our host from the request). We do not store your IP address. To count unique visitors per day we keep only a one-way hash that changes every day, so visits cannot be linked across days or back to you. This uses no cookies and is not linked to your account.
• Customizer inputs. The 3D customizer builds your STL or 3MF file inside your own browser. The text, sizes, colours and other options you enter are not uploaded to our servers. If you are not a Plus member, the customizer asks our server only whether your account has Plus.
• Messages you send us. The contact and custom design forms do not send data to our servers. They open your own email app with your message filled in, and we receive it only if you send that email. We then have your email address and whatever you wrote.
• Technical data. Like most websites, our hosting provider (Vercel) and our domain and network provider (Cloudflare) process standard request data such as IP address, browser type, the page requested and timestamps in order to deliver and secure the site.

We do not ask for, and ask you not to send us, sensitive information such as government ID numbers or health information.

• To create, secure and sign you in to your membership account.
• To provide PixelForm Plus benefits (Premium downloads, customizer downloads and an ad-free site) while your subscription is active.
• To deliver pages and files, keep the site secure, prevent abuse and fix errors.
• To understand, in aggregate, which pages and models are popular.
• To answer emails, support requests and privacy requests you send us.
• To show advertising to visitors who are not Plus members (see section 3).

We do not sell personal information, and we do not currently send newsletters or marketing email. Where laws such as the GDPR apply, we rely on performing our contract with you (accounts and Plus), our legitimate interests (security, statistics without identifiers, replying to you), and your consent where it is required (personalized advertising).

We use Google AdSense to show ads on this site. PixelForm Plus is ad-free: once the site has confirmed your membership in a browser, ads are paused there.

• Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.
• You may opt out of personalized advertising by visiting Google's Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalized advertising at aboutads.info (or youronlinechoices.eu in Europe).
• Other ad vendors and ad networks certified by Google may also serve ads on this site and use their own cookies or similar technologies, under their own privacy policies. Google lists these vendors in its ad technology providers list.
• Personalized and non-personalized ads. Personalized ads use cookies and similar identifiers to reflect your interests. Non-personalized ads are based on context, such as the page you are viewing and your general location, but Google may still use cookies for frequency capping, aggregated reporting and fraud prevention.
• Learn more in How Google uses information from sites or apps that use its services and How Google uses cookies in advertising.

The site itself uses your browser's local storage only for features you use:

• Sign-in session — keeps you logged in (set by Supabase).
• Plus ad-free flag — remembers for a few days that this browser belongs to a Plus member, so ads are paused before they load.
• Form drafts — a copy of a contact or custom design message you wrote, so it is not lost.

These are essential to the features above and are not used for tracking or advertising. Our visit statistics are cookie-free. Advertising cookies and similar technologies are set by Google and its partners (section 3).

Visitors in the European Economic Area, the United Kingdom and Switzerland: we use Google's consent message, a Google-certified consent management platform that supports the IAB Transparency and Consent Framework, to ask for your consent before cookies are used for personalized ads. You can change or withdraw your choice at any time through the privacy and cookie settings link shown by that message.

Everywhere, you can block or delete cookies and site data in your browser settings. Blocking essential storage will sign you out.

We share information only with providers that run the site for us, or as required by law:

• Supabase — database, file storage and account login.
• Vercel — website hosting and server functions.
• Cloudflare — domain name and network services.
• Lemon Squeezy — subscription checkout, billing, receipts and tax, as merchant of record under its own privacy policy.
• Google — advertising through AdSense, under Google's own privacy policy.

These providers may process information in countries other than your own, including the United States. They process it under their own security measures and data-protection terms. We do not sell or rent your information to anyone.

• Account: kept until you ask us to delete it. Deleting your account also deletes our copy of your Plus subscription record.
• Subscription records at Lemon Squeezy: kept by Lemon Squeezy as long as tax and accounting laws require, under its own policy.
• Visit statistics: contain no IP address or account link, so they cannot be traced to you.
• Emails you send us: kept only as long as needed to answer you and keep a record of the request.
• Browser storage: stays on your device until you log out or clear site data.

When information is no longer needed, we delete it so it cannot be restored, unless a law requires us to keep it for longer.

Depending on where you live, you can ask us to access, correct, delete or export your personal information, to stop or restrict its processing, and to withdraw consent you gave. To make a request, email hello.pixelform@gmail.com from the address on your account. We will answer without undue delay and may need to confirm that the request comes from you. You can also:

• Cancel PixelForm Plus at any time from the Membership page (Manage subscription).
• Opt out of personalized ads using the links in section 3.
• Clear data stored in your browser (browser settings → site data).
• Complain to your local data-protection authority if you are unhappy with how we handled your information.

Connections to the site are encrypted (HTTPS). Account and subscription data in Supabase are protected by row-level security so members can read only their own records, and only our server can change subscription status. Premium files are kept in private storage. No system is perfectly secure, so please use a password you do not use elsewhere.

The site is not directed at children under 14, and we do not knowingly collect their personal information. If you believe a child has created an account, contact us and we will delete it. 3D printers have hot and moving parts, so children should print only with adult supervision.

If we change this policy we will update the effective date above. For significant changes we will also give notice on the site before they take effect.

Privacy questions and requests: hello.pixelform@gmail.com. See also our Terms of Service and Contact page.