Privacy

On this site you can join the mailing list, make an account, buy credits, download models from the configurators, generate models from your photos and post photos of your prints. This page says what each of those costs you.

Last updated 14 October 2026. PolyReprint is run by Guillaume Fradin, who is the data controller. Write to gui@polygonjs.com about anything on this page.

What we hold

For the mailing list, your email address and the date you confirmed it. That is the whole record. You are only added after you click a link in a confirmation email, so an address nobody confirmed is deleted rather than kept.

If you make an account we hold your email address, your username if you chose one, the date you confirmed the address, and your password stored as a hash we cannot reverse. A username is public: it shows under the photos of prints you post, and in the address of any configurator you publish. Each time you sign in we also record the IP address and the browser you signed in from, attached to that one session, so we can answer you if you ever ask whether somebody else has been in your account. Signing out deletes that record, and changing your password deletes it for every other session.

If you download a model we hold the record of that download: which configurator and which version of it, the choices you made in it, the licence you took, what it cost, and when you downloaded it. That record is what lets you download the same model again without paying twice.

If you buy credits we also hold the record of that purchase: how many credits, what was paid, the currency, the date, and the reference Stripe gave the payment. Your card details are not part of it. They go straight to Stripe and never reach this server, which is why the payment happens on a page of theirs rather than one of ours.

If you take out a plan we also hold a copy of what Stripe says about it: which plan, monthly or yearly, when it started, when it renews, whether it is set to end and when it did, and the references Stripe gave the plan, its price and you as its customer. We use it to add each month's credits to your account, to show you your plan, and to email you when it starts, when a payment fails and when it ends. Stripe keeps your card and your billing address, which it needs to work out the tax, and sends you the receipts.

If you buy a commercial licence we also hold a copy of what Stripe says about it, as for a plan, and the terms you bought it at: the collection, the revenue band you declared, the price, and the revision of the licence text. We keep that record after the licence ends, because it is what proves when you were licensed, to you and to anybody you need to show it to.

Generating a model from your photos

Some configurators make a model from photos you upload or take with your camera, or from a description you type. Your photos and your description are sent to the services that produce the result, listed below. Treat a photograph of a person as sensitive, because we do: we keep the photos only while the generation runs and delete them the moment it ends, whether it worked or not. Only upload a photo you have the right to use, of people who have agreed to it.

What we keep is the model, so that closing the page never loses one you paid for, and the record of the generation: what you asked for, from which configurator, whether it worked and what it cost. Both stay for as long as your account does.

Posting a photo of your print

If you post a photo of something you printed, we hold the photo, its caption, which configurator and which download it belongs to, when you agreed to let us show it, and whether we approved it. We do not keep the file you sent. We make a new copy of the image and keep only that, so the location, the camera details and anything else your phone stored in the file are gone before anything is saved. Once we approve it, the photo, its caption and your username if you chose one are public on the configurator's page.

We measure the site with Plausible, which sets no cookies and builds no profile of you. It counts the pages you open and a few buttons you press. Your IP address and your browser reach it, so it can work out a country and count you once for the day; Plausible discards the address rather than storing it, and we never see it in our numbers.

Our servers also log the requests they receive, including the IP address each one came from. We use those addresses to rate-limit the signup form and to keep bots off it. The logs rotate and are discarded on their own. We do not archive them, we do not ship them anywhere else, and we do not use them to build a profile of you.

Why we are allowed to

The mailing list runs on your consent, which you gave by confirming and can withdraw at any time. A purchase or a plan rests on the contract between us: we cannot sell you credits, or add a plan's credits every month, without recording that we did. So do your account, your downloads and your generations: you asked for them, and sending your photos to the services that make the model is how a generation gets made. Keeping that record afterwards rests on the law, which tells a business how long to hold its sales records. Showing a photo you post rests on the permission you give when you post it, which you withdraw by deleting the photo. Logging, rate limiting and measuring the site rest on our legitimate interest in keeping the site working, unabused and improving, balanced against how little each one reveals.

Who else touches it

These companies each get only what their job needs, and none of them may use it for anything else. Hetzner hosts the server, in Germany. Resend sends the email. Plausible measures traffic. Cloudflare Turnstile receives the IP address of anyone submitting the form so it can tell a person from a bot. Stripe takes the payment when you buy credits, a plan or a licence, and receives your email address, your card details and, for a plan or a licence, your billing address directly, so that it can charge the card, work out the tax and send you a receipt.

A generation goes through polygonjs.com, the site of the Polygon engine the configurators are built with, run by the same person as this one. It receives your photos and your description, and an internal number standing for your account here, never your name or your email address. It deletes the photos when the generation ends. It sends them on to the company that does the work: Hyper3D, whose Rodin service makes 3D models and holds what it is sent for up to seven days, and OpenAI, which makes the pictures some configurators edit your photo into before the model is made. Neither receives anything about you. Your address therefore lives in the European Union. Some of these processors are outside it and operate under the standard contractual clauses.

How long we keep it

The mailing list: until you unsubscribe or ask us to delete it. When you unsubscribe we keep a note that the address unsubscribed, and nothing else, so that we do not mail you again by accident. Ask us and that goes too. Your account, your downloads, your generations and the models they made last for as long as your account does, and go when you ask us to close it. Photos for a generation are deleted the moment it ends. A photo of a print stays until you delete it, until we take it down, or until its configurator is deleted, whichever comes first. A purchase, a plan or a licence is the exception: a sales record has to be kept for as long as the law says, whatever else you ask us to delete.

Unsubscribing

Every email we send carries an unsubscribe link, and using it stops the mail immediately. No reply, no form, no reason asked for. If the link ever fails you, write to gui@polygonjs.com and we will do it by hand.

Cookies

Four. One is set on every page and holds the token that stops a form being submitted from somewhere else; it identifies a browsing session, not you, and it is gone when you close the browser. One is set when you sign in and keeps you signed in, until you sign out. One is set when you open a configurator, so it can load the engine it runs on; it is gone when you close the browser. The last is set only if you press the light and dark toggle in the footer, and it remembers which one you chose. There is no advertising cookie and no tracking cookie here, which is why you are not reading this through a consent banner.

What you can ask for

A copy of what we hold about you, a correction to it, its deletion, or an objection to how we use it. Write to gui@polygonjs.com and we will answer within a month. If you are in the European Union or the United Kingdom and you think we have handled this badly, you can complain to your national data protection authority.

Changes

This page carries the date it last changed, at the top. We add to it when something new starts collecting data. We do not quietly take things away.