Privacy notice

The short version

We collect only what you type into our forms, plus basic, privacy-minded visit statistics.
Your IP address is never stored in our database. We store a one-way hash of it instead.
We do not sell, rent or trade your data, and we do not run advertising or third-party trackers.
The site sets three first-party cookies, explained below. No advertising cookies, no cross-site tracking.
You can unsubscribe from early-access email with one click, and ask us to delete your data through the support page.

What we collect

When you join early access

Your email address, and if you choose to give them: your name, role, company, the apps you are interested in, your platform and any note you add. We also record which page you signed up from, any campaign tags in the link you followed (such as utm_source), your visitor id (see Cookies), a hash of your IP address, and whether and when you confirmed your email.

When you suggest a tool or vote

The tool name and the reason you give, and your email if you choose to add one. Votes are stored against your visitor id and a hash of your IP address, so we can count one vote per person.

When you contact us

Your name, email address, the topic you pick and your message, with your visitor id and a hash of your IP address.

When you visit any page

For our own visit statistics we record the page address, the referring page, your browser's user-agent string, a rough device type (desktop, mobile or tablet), whether the visit looks like a bot, your visitor id and a hash of your IP address. We do not use Google Analytics or any other third-party analytics service.

About the IP hash

Your IP address is combined with a secret key held only on our server and run through a one-way hash function. The result lets us count visitors, limit form spam (at most five form posts per ten minutes) and spot abuse, without keeping the address itself in our database. Like any website, our web server also writes standard access logs that include IP addresses; those are kept for a short time for security and troubleshooting, and are not used for analytics.

What we use it for

To send you what you asked for: a confirmation email, then one message when a build is ready for your platform and occasional progress notes.
To reply to support, licensing and press messages.
To decide what to build: we look at which apps, roles and platforms people pick, in aggregate.
To keep the site working and stop spam and abuse.

We do not use your data for advertising, and we do not make automated decisions about you.

Cookies

The site sets three first-party cookies. None of them is shared with anyone else.

Cookie	What it does	How long
`cc_session`	Keeps your session between pages: form security tokens, the result of a form you just sent, and (for staff) the admin sign-in.	Up to 30 days
`cc_vid`	A random visitor id, not linked to your name. Used for visit statistics and to count one vote per person.	Up to 2 years
`cc_space`	Remembers whether you chose the paper (light) or model (dark) theme. Your browser also keeps the same choice in local storage.	Up to 1 year

These cookies are needed for the site to work as described, so there is no cookie banner. If you block them, the site still works, but voting will not, and your theme choice will not be remembered.

We do not sell your data, and we do not share it with advertisers or data brokers. A small number of service providers handle it on our behalf, only to run the site:

Hosting. The site and its database run on a server we rent from a hosting provider.
Email delivery. Our emails are delivered through Brevo, an email service that processes your address and the message content on our behalf. Brevo tells us whether each message was delivered, bounced or reported as spam. If a message to you bounces permanently or is reported as spam, we stop emailing that address.

We would disclose data to authorities only where the law requires it.

How long we keep it

Early-access records: until you ask us to delete them. Unsubscribing stops all email straight away; the record is kept, marked unsubscribed, so we do not email you again by mistake.
Suggestions, votes and support messages: for as long as they are useful for planning and support, or until you ask us to delete them.
Form spam counters: they only matter for ten minutes.

Your choices

You can ask us what we hold about you, correct it, or have it deleted. Use the support form with the email address you signed up with, and a person will handle it. Every early-access email has an unsubscribe link, and you can sign up again later with the same address. Depending on where you live, you may also have the right to complain to your local data protection authority.

When the browser apps launch

Not live yet. Nothing in this section is running today. It describes how we plan to handle your drawings when the browser versions of the apps launch, so you can judge it before then.

Desktop apps

The desktop apps for macOS, Windows and Linux keep your files on your own computer and send nothing to us. Nothing in the rest of this section applies to them.

Browser apps

Saving drawings in the browser versions of the apps will require a commercial license, which includes cloud saving. Without one, you can still use a browser app and export a copy of your drawing to your own computer at any time.

What we will store

The drawings you choose to save, and their version history.
Your account identifiers (such as your email address and account id) and billing identifiers (such as a customer or subscription reference from the payment provider).

Where, and how it is protected

Saved drawings will be stored on Backblaze B2, a cloud storage service that will act as our storage processor: it keeps the files for us and does not use them for anything else. Drawings will be encrypted in transit (between your browser, our servers and Backblaze) and encrypted at rest, and they are private to your account.

Who can see your drawings

You, and the people you choose to share a drawing or project with.
CadCraft staff only to help with a support request, with your permission, or when the law requires it.

Export and deletion

You will be able to export your drawings at any time, and delete them, or your whole account, from your account settings or by asking us through the support page.

When a commercial license ends

If your commercial license ends, your saved drawings stay available for export for a grace period, to be set before launch, before they are deleted.

Changes and contact

If we change how we handle data, we will update this page and the date at the top. If the change is significant, we will tell the early-access list by email before it takes effect.

Questions about privacy: write to us through the support page. The terms of use cover the rest.