Privacy Policy

What we collect

• Account details: your name, email address and a scrambled (hashed) copy of your password. We never store your actual password.
• Sign-in records: when you sign in, plus the IP address and browser type, to keep your account secure and limit repeated sign-in attempts.
• Your printer (optional): printer brand, model and bed size, if you save them, so we can flag models that won't fit.
• Uploads: model files, photos, print settings and descriptions you add as a creator.
• Downloads: which models you download, so we can show your library and give creators download counts.
• Payments (later): when paid models open, Stripe will handle card details. We will never see or store your full card number.

Cookies

We use one essential cookie to keep you signed in. We don't use advertising or tracking cookies. If we add privacy-friendly analytics later, we will update this page first.

Who processes your data

We use a small set of service providers, only for the jobs below:

• Railway: hosts the website and its database.
• Cloudflare: stores model files and photos, and runs our domain names.
• Google: only if you choose "Continue with Google" to sign in.
• An email provider: sends sign-in and account emails, once email is set up.
• Stripe: processes payments and creator payouts, once paid models open.

We don't sell or rent your personal information to anyone.

What's public

If you are a creator, your display name, profile, and the models you publish are public. Your email address is never shown publicly.

How long we keep it

We keep your account information while your account is open. If you delete your account, we remove your personal information within 30 days, except records we must keep for legal, tax or fraud-prevention reasons (such as copyright notices and sales records).

Your choices

• Ask for a copy of your information, or ask us to correct it.
• Ask us to delete your account and personal information.
• Stop non-essential emails at any time using the link in the email.

Email support@stlshelf.com from your account's email address, and we will reply within 30 days.

Children

STLShelf is not for children under 13, and we don't knowingly collect their information. If you believe a child under 13 has an account, contact us and we will delete it.

Security

Passwords are hashed, connections use HTTPS, model files are stored privately and delivered through short-lived links, and sign-in attempts are rate-limited. No system is perfectly secure; if a breach affects your information, we will tell you.

Changes and contact

We will post any changes here and update the date at the top. Privacy questions: support@stlshelf.com.