Privacy policy

Last updated: 10/8/2026

1. Data controller

The data controller is the owner of hotend. See Legal notice for full details. Contact: [email protected].

2. Data we process

2.1 General browsing

We do NOT collect personally identifiable data during general browsing. Our analytics is a first-party counter with no cookies or identifiers that neither stores nor reads anything on your device: it only keeps aggregated daily totals per page (views, reading time, scroll depth, landing page and referring site, internal page-to-page navigation, device class, browser language, hour of day, clicks on external links, and loading speed). We store no IP addresses and no individual records: nobody can tell who visited what or reconstruct anyone's browsing — not even us. Retention: these aggregated totals are kept for a maximum of 25 months. (Google advertising is separate and governed by your consent: see §3 and §6.)

2.2 Tool usage

The Site's tools (converters, comparator, mesh editor, CAD and the rest) use that same aggregated counter to know which features get used and how often: how many times extrude ran, how many files were exported in each format, how many operations failed. What you work ON is never sent: not your models, not your dimensions, not your file names. Your files are processed in your browser and never leave your device.

2.3 Problem reports

If you use a tool's "Report a problem" button, you send us whatever you tick: your description of the bug and, only while the boxes stay checked, a screenshot of what you see and the document you were working on. Technical details of your browser (version, language, window size) travel too, so the bug can be reproduced. The email is optional and used only to reply to you. Legal basis: your consent when pressing Send (GDPR art. 6.1.a); nothing is ever sent on its own or in the background. Purpose: fixing the bug, nothing else. Retention: reports are deleted automatically after 12 months; you can ask us to delete yours sooner.

2.4 Language preference

We store your language choice (ES/EN) in browser localStorage. This is NOT a cookie, never transmitted to our servers, and can be cleared from your browser settings.

2.5 Email contact

If you write to [email protected], we keep your email and message up to 12 months. Legal basis: consent (GDPR Art. 6.1.a).

2.6 Printer reviews

If you post a review on a printer page we process: your name (or alias, published with the review), your email (NEVER published) and the review text. Purposes: (a) moderating and publishing the review, and (b) only if you also tick the optional updates checkbox, sending you hotend updates. Legal basis: explicit consent (GDPR Art. 6.1.a), collected separately for each purpose and timestamped; you can withdraw it at any time by writing to [email protected] or via the opt-out link in every email; on withdrawal we remove your email from the list. Retention: published reviews, for as long as they stay on the site (you can request removal at any time); rejected reviews and their data are deleted within 12 months; the updates-list email, until you unsubscribe. Data is stored in Supabase (see §3).

2.7 The hotend Android app

The app builds models on your phone: the photos you pick (through the system picker; the app never asks for access to your gallery) and the models it generates are never uploaded to any server. The app has no accounts. To learn which tools get used, it counts what you do with the same aggregated counter as the website (§2.2): daily totals such as "lithophanes shared today on Android", plus the app version and the phone's language, with no identifiers and nothing that could single you out. When you tap "Share", the file goes to the app you choose and is then subject to that app's policy. Uninstalling the app deletes any temporary files it created.

The app shows Google AdMob ads (see §3). To serve and measure them and to prevent fraud, Google's SDK may process the device's advertising ID, IP address (and the approximate location derived from it), technical device data and ad interactions. Personalised ads are shown only with your consent, which the app asks for on first launch (Google's form, IAB TCF framework) and which you can change any time from "Ad settings" on the home screen; without it, Google serves non-personalised ads. Legal basis: consent (GDPR Art. 6.1.a). The app is not directed at children under 13.

3. Recipients and processors

Your data is NOT sold or shared commercially. Processors acting on owner's behalf under GDPR-compliant DPAs:

4. International transfers

Some processors (Cloudflare, Resend) process data outside the EU under EU Standard Contractual Clauses or adherence to the EU-US Data Privacy Framework.

5. Your rights

Under GDPR you have rights to: access, rectification, erasure ("right to be forgotten"), restriction, portability, objection, withdrawal of consent.

To exercise, email [email protected]. Response within 30 days max. You may also complain to the Spanish Data Protection Agency (www.aepd.es).

6. Cookies and advertising

The Site sets no first-party cookies. Google AdSense advertising may use third-party cookies only with your consent; change it any time via “Ad preferences” in the footer. See the Cookie policy for details.

7. Changes

This policy may be updated. Material changes will be notified via prominent notice on the Site.