Privacy Policy

What the service knows about you, why, and for how long. In short: without signing in, almost nothing.

Version of

Who is responsible for your data

The data controller under the GDPR (EU Regulation 2016/679) is Peter's Engineering, ptrs.ltd, Poland.

Questions about your data and deletion requests: ceo@ptrs.ltd.

Without an account we do not know you

You can use the service completely anonymously: upload a drawing, get a model and download it, all without an account.

We do not ask for your name, phone number or address. The site carries no ad networks, no analytics counters, no social pixels and no external fonts — nobody on the outside learns that you were here.

What happens to an uploaded image

The file is received, processed and turned into a flat model. The image and the result stay on the server for no more than thirty minutes and are then deleted automatically.

We do not look at them, publish them, pass them to anyone, or use them to train artificial-intelligence models.

There is one exception: if you are signed in and save a model to your library yourself, it stays there until you delete it.

If you sign in with Google

Google passes us the minimum: a permanent account identifier, your email address, your name and a link to your avatar.

We keep those so we can recognise you next time and show you your library. Your Google password never reaches us.

What the library stores

Saved models: the model file, its title, dimensions, thickness, part count and the parameters used to compute it, plus the collections you sorted them into.

Legal bases

What we processWhyBasis
Image and computed resultTo provide the service you asked forArt. 6(1)(b) — performance of a contract
Account and libraryTo recognise you and keep your modelsArt. 6(1)(b) — performance of a contract
Server logsSecurity and keeping the service upArt. 6(1)(f) — legitimate interest
Donation recordsTo take the payment and keep booksArt. 6(1)(b) and 6(1)(c) — contract and legal obligation

How long we keep things

DataRetention
Uploaded image and computed resultup to 30 minutes, then deleted
Sign-in session (cookie sid)30 days, or until you sign out
Account and saved modelsuntil you delete them
Web server logs14 days
Donation recordsas long as accounting law requires

Who else sees your data

We do not sell data and we do not hand it to advertisers. Only the parties the service cannot work without see anything:

  • Google Ireland Ltd. — sign-in, if you use it;
  • Stripe Payments Europe Ltd. — donations; card details are entered on Stripe's side and never reach us;
  • the hosting provider the server is rented from, as a processor under contract.

Google and Stripe may process some data outside the European Economic Area, on the basis of the European Commission's standard contractual clauses.

Your rights

Under the GDPR you may: access your data, correct it, erase it, restrict processing, object to it, receive it in a portable form, and withdraw consent where consent was the basis.

The quickest route is to delete your account from the account page — that wipes everything at once. Or write to ceo@ptrs.ltd and we will answer within thirty days.

If our answer does not satisfy you, you may complain to a supervisory authority: in Poland that is the Prezes Urzędu Ochrony Danych Osobowych (UODO), Stawki 2, Warsaw — or to the authority in your own country.

Children

The service is not aimed at children under sixteen, and we only create accounts from that age. Using the service without signing in — leaving no data at all — is fine at any age.

Security

HTTPS only. The session cookie is HttpOnly, Secure and SameSite=Lax, so page scripts cannot read it and another site cannot send it. Server access is restricted and the database is backed up.

No protection is absolute. If a breach occurs that could harm you, we will notify the supervisory authority and you, as the GDPR requires.

Changes to this policy

A new version appears here with a new date. If something material changes, we will say so on the site.