Privacy
What Split3D stores, what it never touches, and who else sees any of it.
Your models never leave your computer
This is the part that matters most, so it comes first. The file you open, the cuts you make and the pieces you export are handled by your own browser, on your own machine. Nothing is uploaded, nothing is stored on a server, nothing is kept in a cache we can reach. That stays true with an account: an account records your email address and the state of your subscription, never your models.
Who is responsible
Split3D decides what happens to the data below, so it is the controller for it. The full identification of the publisher is in the legal notice.
Contact: contact@split3d.app
What an account holds
You can load and cut a model without an account; downloading the pieces needs one, free on the Free plan. An account holds:
- your email address, and a hashed password if you signed up with one;
- the account identifier and sign-in dates kept by the authentication service;
- the state of your subscription: its status, which plan, and the identifiers needed to match it to a payment.
Signing in with Google tells us your email address, a Google account identifier, and the name and profile picture attached to that Google account. We display none of it and never receive your Google password.
Creating an account, confirming it and signing in by link each send you an email. Those are sent by the authentication service, only when you ask for one, and nothing else is ever sent to that address unless this page says so below.
What your browser keeps
Two settings are kept on your own device so the tool opens the way you left it: the build volume of your printer, and whether you export in millimetres or metres. They never reach a server. Signing in also keeps a session, your email address and the name of your plan on your device, which is what being signed in means.
Opening the sign-in window loads Google's sign-in button from Google, so Google sees that you opened it. Its script sets a small cookie named g_state to remember the state of its sign-in prompt; Split3D reads nothing from it. None of this happens until you open that window.
The site sets no advertising cookie and carries no tracker. Visits are counted by Cloudflare Web Analytics, which sets no cookie, stores nothing on your device and does not follow you from site to site: it counts the pages viewed, the country, the type of browser and device, and the page that sent you here. That is why you are not asked to accept anything when you arrive: there is nothing to accept.
Who else processes it
| Who | What for | Where |
|---|---|---|
| Supabase | Accounts, sign-in, sign-in emails and subscription state | Servers in Paris, France. Supabase is a United States company, under standard contractual clauses |
| Stripe, through its Link service | Sells the subscriptions as merchant of record, takes the payment, handles refunds and tax | European Union and United States, under standard contractual clauses |
| Draws the Continue with Google button when you open the sign-in window. If you choose it, confirms who you are and passes your email, name and picture | United States, under standard contractual clauses | |
| Cloudflare | Serves the pages of this site from its network, which sees the address of your connection, and counts visits without cookies (Web Analytics) | United States, with servers worldwide, under standard contractual clauses |
| Resend | Sends the account emails: confirmation links, sign-in links, password resets | European Union, Ireland. Resend is a United States company, under standard contractual clauses |
Your card details are entered on Stripe pages and never reach this site. Link, a Stripe service, is the seller for a subscription, so your purchase and its invoice are governed by Stripe's own terms.
Why we are allowed to
An account and a subscription exist because you asked for them, so the basis is the contract between us. Keeping the service running and free of abuse rests on our legitimate interest, kept narrow: no profiling, no scoring, no sale of anything to anyone. Counting visits without cookies rests on the same interest: knowing which pages are read, never who reads them. The invoices for a subscription are issued and kept by Stripe, as the seller: on our side there is nothing to keep beyond the identifiers that tie your account to it.
How long
An account lives as long as you keep it. One with no subscription that nobody has signed into for three years is deleted, with everything attached to it. Ask for it to be deleted and it goes, with the subscription state attached to it: nothing of it outlives the account on our side. Stripe keeps its own record of the sale, which we can see in our Stripe dashboard, for as long as the law asks it to. Your models are never kept at all, so there is nothing to delete.
What you can ask for
You can ask to see the data held about you, to correct it, to have it deleted, to limit its use, to receive it in a portable form, or to object to a use of it. You can also leave instructions on what becomes of it after your death. Write to contact@split3d.app and you get an answer within a month. If the answer does not satisfy you, you can complain to the CNIL, the French data protection authority, at cnil.fr.
Changes
If this page changes in a way that matters, the date below changes with it and account holders are told by email.
Last updated: 14 October 2026