Privacy policy

Who is responsible

Kitplate, which runs Kitplate 3D Studio, decides what happens to your data (the controller under the GDPR). Write to support@kitplate.com about anything on this page.

What we keep, and why

• Your account: your name, email address and password (kept only as a scrambled hash), or, if you sign in with Google, the name, email and picture Google gives us. A cookie keeps you signed in. We need these to give you an account.
• Downloads and AI pictures: which tool, which format, when, and a fingerprint of the design (so the same design again within a day is free). We need them to apply your plan's limits.
• Your files: the pictures, fonts and projects you upload or save, kept in our storage until you delete them or your account.
• Payments: Stripe and Link take your card and billing address; we never see your card. We keep your Stripe customer number, your plan, and whether and until when your subscription runs.
• Emails: we email you codes, links to verify your address or reset your password, and a welcome. Nothing else without asking.
• AI pictures: when you ask for one, the words you type are sent to Google's Gemini to draw it.
• The game: a random number kept in your browser, and how far you got, so we can make it better. No IP address and no device fingerprint.
• Visits: Vercel Web Analytics counts page views and a few clicks (such as a download) without cookies and without anything that identifies you.
• Errors: when something breaks, Sentry gets the page (without its query), the browser, the error and, if you are signed in, your account number, so we can fix it.

The legal grounds are the contract with you (your account, plan and files), our legitimate interest in a working, improving site (the game, visits and errors), and the law (payment records).

Who handles it for us

These companies process data on our behalf, only for the service: Vercel (hosting), Neon (database and file storage), Resend (emails), Google (sign-in with Google, Gemini), Sentry (error reports) and Stripe (payments; for the payment itself, Link is responsible under its own privacy policy). Most of them store data in the United States. Transfers outside the European Economic Area rely on the safeguards these providers offer, such as the EU's standard contractual clauses.

How long

• Your account, downloads and files: until you delete them or your account.
• Payment records: as long as tax law requires, in Poland usually 5 years.
• Error reports: for a limited time, as Sentry keeps them.

Cookies

Only the ones the site needs: the cookie that keeps you signed in. Your browser also keeps your designs and settings in its own storage, which never leaves it until you download or save. No advertising or tracking cookies.

Your rights

You may ask for a copy of your data, have it corrected or deleted, limit or object to its use, and take it elsewhere. Write to support@kitplate.com. You may also complain to a data protection authority; in Poland that is the President of the Personal Data Protection Office (UODO).

Children

Accounts are for people aged 16 or over, or younger with a parent's consent.

Changes

We'll update this page when what we keep changes, with a new date at the top, and email account holders about important changes.