Privacy Policy

nixi3d.com is the data controller for the information described here. For any privacy question or request, email privacy@nixi3d.com. We answer requests within 30 days, as the GDPR requires.

Nothing at all until you do something that needs it. Browsing the site without an account and without accepting analytics leaves no record of you.

We do not keep them. When a request arrives, its IP is converted immediately into an irreversible key that is used only to stop floods of sign-ups and log-in guesses. That key is deleted within an hour and cannot be turned back into an address — not by us, and not by anyone who obtained a copy of our database.

What we store sits in your own browser, and the advertising tag described below is not loaded at all unless you accept:

• Necessary — your sign-in token and editor preferences (such as Basic or Advanced layout). Without these you could not stay signed in, so they need no consent.
• Analytics — a random visitor ID and campaign source. Only written after you accept.
• Advertising — if you accept, we load the Google Ads tag, which sets its own cookies to record that a visit came from one of our adverts. It is never loaded if you decline, and we do not use it to build a profile of you or to show you adverts elsewhere.

Clearing your browser data removes all of it. Declining analytics also erases any analytics IDs already stored.

We do not sell or trade personal data. A small number of providers process it strictly on our instructions, under data processing agreements:

• fal.ai — runs the AI that turns your image into a 3D model. Your uploaded image is sent there for that purpose only.
• Resend — delivers account emails, such as your confirmation link.
• Google Ads — measures which of our adverts led to a sign-up, so we do not waste money on ones that do not work. Loaded only with your consent. Google receives your IP address as part of any such request; we do not send it your email address or anything you create here.
• Modal and IONOS — host the application and your stored files.

Some of these operate outside the EU. Transfers rely on the European Commission’s Standard Contractual Clauses.

Under the GDPR you can, at any time:

• See and export everything we hold about you — one click on your account page gives you a complete JSON file (Art. 15 and 20).
• Delete your account and all its content, immediately and permanently (Art. 17).
• Correct your username or email from the same page (Art. 16).
• Withdraw consent for analytics whenever you like — it is as easy as giving it (Art. 7).
• Complain to your national data protection authority if you think we have got this wrong (Art. 77).

Manage all of this from your account page, or email privacy@nixi3d.com and we will do it for you.

Account data lives as long as your account does, and goes when you delete it. Analytics and campaign records are deleted automatically after 180 days. Deletion is real deletion — we do not keep a shadow copy.

Passwords are hashed with bcrypt and are unreadable even to us. Sessions use signed tokens that expire. All traffic runs over HTTPS. Uploads are size-limited and sign-up, log-in, and generation endpoints are rate-limited against automated abuse.

nixi3d.com is not intended for children under 16. If you believe a child has created an account, contact us and we will remove it.

If we make a material change we will update the date above and, for anything significant, tell account holders by email before it takes effect.