Privacy Policy

1. Who We Are

StringArt3D is operated by Nicole Skorupa ("we," "us," or "our"). Contact us at support [at] stringart3d.com.

2. Information We Collect

Images and generation text you provide: All image processing and generation-text processing happens entirely in your browser. Uploaded photos and entered generation text are not sent to our servers, not stored on our servers, and not shared by us as part of the generation workflow.

Usage analytics: We use Google Analytics to collect anonymized usage data such as pages visited, session duration, browser type, and approximate geographic location. We may also classify referral sources, including AI tools such as ChatGPT, Perplexity, Claude, Gemini, Copilot, Poe, You.com, and Phind, when this is visible from standard referrer or UTM parameters. This data helps us improve the app. Google Analytics uses cookies — you can opt out by using browser cookie settings or the Google Analytics Opt-out Browser Add-on.

Access-code analytics: If you enter an access code, we store the normalized code in your browser and send high-level milestone analytics to Supabase tied to that code, such as first seen, first successful generation, first export, session count, project count, active days, and retention windows. We do not use this system for click-by-click tracking.

Authentication and account data: If you create an account or sign in, we process the information needed to authenticate you and maintain your account, such as your email address, encrypted or hashed authentication credentials handled by our authentication provider, session identifiers, and profile information such as your display name.

Payment and entitlement data: If you buy Premium, Stripe processes your payment details. We store the minimum account-linked fulfillment data needed to activate premium access, such as your Stripe customer id, premium unlock timestamp, Stripe Checkout session id, payment intent id, amount, currency, status, and a webhook event record for support and troubleshooting.

Hosting & infrastructure: This site is hosted on Lovable and uses Supabase for backend services, including authentication and profile storage. These providers may collect standard server logs (IP address, request timestamps, browser user-agent). See their privacy policies:

• Lovable Privacy Policy
• Supabase Privacy Policy
• Google Privacy Policy

Local storage and session storage: We store your app preferences (printer, size, detail settings) in your browser's localStorage. If you redeem an access code, we also store the normalized code locally so future sessions on the same browser can be attributed to that code in our high-level analytics. If you sign in, your browser may also store authentication session data needed to keep you signed in. This data is used to operate the Service.

3. How We Use Your Information

We use analytics data solely to understand usage patterns, fix bugs, and improve the app. We do not sell, rent, or share your personal information with third parties for marketing purposes.

Access-code analytics are used to understand adoption, engagement, and retention at a high level for early-access cohorts and similar code-based distribution loops.

If you create an account, we use your account and session data to authenticate you, provide account access, display your profile information, and secure the Service.

If you purchase Premium, we use payment fulfillment data to activate premium features on your account, prevent duplicate fulfillment, and support purchase-related issues.

4. Cookies

Google Analytics sets cookies (_ga, _gid, _gat) to distinguish unique users and throttle request rates. If you use authentication features, essential authentication or session storage mechanisms may also be used to keep you signed in and protect account access. You can manage cookies through your browser settings, but blocking essential session storage or authentication cookies may prevent login features from working correctly.

5. Data Retention

Analytics data is retained according to Google Analytics' default retention period (14 months). High-level access-code analytics in Supabase are retained until we no longer need them for product analytics or legal/operational reasons. Premium purchase and entitlement records are retained for operational, accounting, fraud-prevention, and support purposes. We do not store user-uploaded images, entered generation text, or generated files on our servers.

6. Your Rights

Depending on your jurisdiction (e.g., GDPR, CCPA), you may have the right to access, correct, delete, or port your personal data. Since we process minimal data and images stay on your device, most data is already under your control. If you have an account, you may also request deletion of account-related personal data we control, subject to legal and operational retention requirements. For any requests, contact support [at] stringart3d.com.

7. Children's Privacy

This app is not directed at children under 13. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date.