Privacy Policy

Yildirim Yazganarikan (“we”, “us”, “our”) operates voxitect.com (the “Service”), a browser-based 3D design tool. This Privacy Policy explains what we collect, how we use it, who we share it with, and your rights. You can use the Service signed out, in which case your designs stay on your device. If you create an account, your designs are saved to our cloud so you can reach them from any device.

1. Information we collect

Account information. To sign in you provide an email address (we send a one-time sign-in link) or sign in with Google, in which case we receive your Google account’s email and basic profile identifier. We store your email and an account identifier.

Your designs and activity. When you are signed in, the scenes you build — including saved versions, generated thumbnail images, and the recorded step-by-step history we use to replay how a scene was built — are stored in our cloud so they sync across your devices. If you choose to publish a scene to the public gallery, that scene and its thumbnail become visible to anyone. When you are signed out, your designs are kept only in your browser’s local storage and are not uploaded.

Payment information. If you subscribe to a paid plan, payment is processed by Stripe. We do not receive or store your card number. We store your subscription status and the Stripe customer/subscription identifiers needed to manage your plan.

Usage and marketing analytics. We record basic analytics events — a randomly generated visitor identifier, pages viewed, the referring page, and any campaign parameters (e.g. UTM tags) in the link you arrived from. Our hosting and analytics processing may also involve your IP address.

Communications. If you join a mailing list or send feedback, we receive your email address (if provided) and your message, and any screenshot you attach to feedback.

Diagnostics. If the app encounters an error, we may send ourselves a technical error report (the error message, page, and browser type) so we can fix crashes. We try to avoid including your personal content.

Server logs. Our hosting provider records standard web logs — IP address, browser type, pages requested, and timestamps — to operate the Service and prevent abuse.

2. How we use information

• To provide the Service: authenticate you, and store and sync your designs.
• To process subscriptions and manage your plan.
• To understand traffic and the effectiveness of our marketing.
• To respond to your messages and send updates you asked for.
• To detect, prevent, and fix technical issues, abuse, and security incidents.

We do not sell your personal information, and we do not show third-party advertising in the Service.

3. Service providers we share data with

We use the following processors, each under their own privacy policy:

• Supabase — database, authentication, and file storage for accounts, designs, thumbnails, and replay history.
• Stripe — payment processing and subscription billing.
• Vercel — website hosting and server logs.
• Google — optional sign-in (OAuth) and webfonts (which may receive your IP address).
• GitHub — storage of mailing-list and feedback submissions.
• Telegram — internal notifications to us of new subscribers, feedback, and error reports.

4. Cookies and local storage

We use your browser’s local storage to keep you signed in, to store your designs and preferences, and to hold a random analytics visitor identifier. We do not use third-party advertising cookies. You can clear local storage at any time from your browser settings (doing so signs you out and removes locally cached designs).

5. Data retention

We keep your account and designs for as long as your account exists. If you delete your account, we delete the associated account, designs, snapshots, thumbnails, and replay history. Analytics and server logs are retained for a limited period for operational and security purposes. Backups may persist for a short additional window before being overwritten.

6. Your rights

Everyone. You can email us to ask what information we hold about you, request a copy, request correction, or request deletion of your account and its data. We will action verified requests.

California residents (CCPA / CPRA). You have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of any “sale” or “sharing” of personal information. We do not sell or share personal information for cross-context behavioural advertising. We will not discriminate against you for exercising your rights.

Canadian residents (PIPEDA). You have the right to access the personal information we hold about you, request corrections, and withdraw consent.

EU / UK / EEA visitors. To the extent the GDPR or UK GDPR applies, you have the rights of access, rectification, erasure, restriction, portability, and objection. Our legal bases are: performance of a contract (providing your account, storage, and subscription); your consent (marketing emails and non-essential analytics); and our legitimate interests (operating, securing, and improving the Service). Some processors may transfer data outside your region under appropriate safeguards.

7. Children’s privacy

The Service is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13 (or under 16 in regions where that is the threshold). If you believe a child has provided us personal information, please email us and we will delete it.

8. Security

We use reasonable technical measures — including access controls that restrict each account’s data to that account — to protect the data we handle. No method of transmission or storage is 100% secure.

9. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the latest revision. Material changes will be highlighted on this page for a reasonable period before taking effect.

10. Contact

Yildirim Yazganarikan
yy@filemap.info