Privacy Policy
Last updated: September 30, 2026
In short: your 3D files and photos stay on your device unless you save to your cloud storage (Pro). We only keep what's needed to run accounts and subscriptions, we don't show ads, we don't sell or share your data for marketing, and we don't use tracking cookies. STL PhotoStudio is run by Chris Arock — reach us through the Support page or at support@stlphotostudio.com.
What stays on your device
Models are opened and photos are rendered in your browser, and the photos you save download straight to your device. While you're signed out, what you save — models, compositions, materials, camera angles, lighting setups and your default settings — is kept in your browser's storage (IndexedDB and localStorage) and never sent to us. Model files downloaded from your cloud storage are kept in the same local database so they don't download twice. Clearing your browser's site data removes all of it.
What we collect
- Account: your nickname, email address and your password (stored only as a secure hash).
- Subscription: your plan (tier, monthly or yearly), any promotion it was bought under, its start / renewal / end dates, the customer and subscription IDs from our payment processor, the brand and last four digits of your card, and a record of each payment (amount, date). We never see or store card numbers.
- Saved work (Pro): the compositions and models you save — their settings, a small preview image and the model files they use, each file stored once — the images and textures you upload, and your saved materials, camera angles and lighting setups, kept in a private storage folder for your account.
- Support messages: when you write to us through the Support form, your name, email address, topic and message are emailed to our support inbox, with your account's plan if you're signed in. The website itself doesn't store them.
- Emails: a log of the service emails we send you and whether they were delivered.
- Security: short-lived counters of sign-up, sign-in, password-reset, support and checkout attempts (by IP address or account) to stop abuse, and password-reset links, stored hashed and valid for one hour.
How we use it
To provide the service: your account and saved work, billing, answering your support messages, and service emails — welcome, password reset, receipts, a renewal reminder before each renewal (3 days before a monthly one, 15 days before a yearly one), payment problems, cancellation and account-deletion confirmations and warnings before saved data is deleted. We also note internally when someone subscribes. We don't send newsletters and don't use your data for advertising.
Cookies
One essential cookie (STLPSID) keeps you signed in while your browser is open. Our network provider may set a strictly necessary security cookie. There are no analytics or advertising cookies.
Who helps us
- Square processes payments; card details go straight from your browser to Square under Square's privacy notice.
- Hosting and network providers (such as Cloudflare) serve and protect the site and process technical data like IP addresses.
- An email delivery provider sends our service emails and delivers support messages to our inbox.
They only process data to provide their service to us. Your data may be processed in countries other than yours.
How long we keep it
Account data is kept while your account exists and deleted when it's deleted. Saved work is deleted when you delete it, 14 days after your Pro plan ends (we email you first), or with your account; a model file nothing you saved uses any more is deleted right away. Payment records are kept as long as accounting and tax rules require. Email logs are kept, without the link to your account, for delivery troubleshooting.
Your choices and rights
You can delete your account and everything it stores yourself: open your account (your nickname at the top of the studio) and choose Delete my account — any subscription is canceled first. You can also ask for a copy of your data or correct it through the Support page or at support@stlphotostudio.com. Depending on where you live (for example under the GDPR, UK GDPR or California law) you may have further rights, including complaining to your data protection authority. We'll never charge you for exercising them.
Security
Encrypted connections (HTTPS), hashed passwords, HttpOnly session cookies, request-forgery protection, and saved files kept outside the website's public folder and served only to their owner.
Children
STL PhotoStudio isn't meant for children under 16, and we don't knowingly collect their data.
Changes and contact
We'll post changes here with a new date. Questions or requests: the Support page, or support@stlphotostudio.com.