Privacy Policy

The operator identified in our Imprint is the controller responsible for lowCAD accounts, the model editor, imports, and marketplace processing.

For privacy questions, contact [email protected]. See our Imprint for operator details.

Operator: Genbrains, represented by Burak Sentürk.

Address: Mammutring 89 ,38226 ,Salzgitter

We process email addresses, usernames, account roles, authentication records, and profile details to provide accounts. Password authentication uses our operator-managed PocketBase service, which stores password hashes. You can browse public pages without an account.

If you choose Google sign-in, Google supplies your identifier, email, and available name and profile image to create or link your account. Google processes sign-in requests under its privacy policy.

The shape editor and STL analysis process geometry in your browser. Saving or publishing sends model code, names, descriptions, categories, parameters, and account associations to lowCAD. The current save flow makes models publicly accessible, including drafts. Do not save confidential designs or personal data in these fields. Public listings may show author usernames.

Checkout sends model descriptions, prices, currencies, and transaction references, which may include account and model identifiers, to the chosen Stripe or PayPal service. We store checkout and purchase records, configurations, and payment status. Full card numbers are entered with the provider, not in lowCAD forms.

Connection information such as IP addresses, request times, requested URLs, and browser information is processed to deliver and protect the site. We also process information you submit in support or rights requests.

We use data to provide requested accounts, saved models, public listings, purchases, downloads, and support, and to secure the service and meet applicable legal obligations.

Under GDPR Article 6(1)(b), account, model-saving, and purchase processing serve requested contracts or pre-contract steps. Security, availability, and abuse handling rely on Article 6(1)(f), with our interest in protecting users and the service. Applicable record-keeping duties rely on Article 6(1)(c). Where optional processing requires consent, Article 6(1)(a) applies.

Account information is needed for account features; required payment information is needed to complete a purchase. We do not use personal data for solely automated decisions producing legal or similarly significant effects.

lowCAD uses operator-managed application and database services. Public traffic passes through Cloudflare for delivery and security. See Cloudflare's privacy policy. Payment providers process transactions under their own notices: Stripe and PayPal.

Some 3D previews request lighting assets from raw.githack.com. Profile pictures and linked model images can load from external hosts. These requests disclose connection information, including your IP address, to the respective hosts. The Inter font is bundled with the application.

Relevant information may be disclosed to authorities or advisers when legally required or necessary to resolve claims. Published model content and usernames are visible to other visitors.

Account and model records are retained to provide the account and saved content. Request deletion using the contact in section 1. Purchase and support records may need to remain for applicable accounting obligations, unresolved disputes, or legal claims. The relevant obligation and resolution of the request determine retention. Logging out does not delete server records.

The “lowcad_locale” cookie remembers your requested interface language for up to one year. Without this preference, we use your browser’s language setting where supported. Interface translations are bundled with lowCAD; selecting a language does not send your content to a translation provider.

localStorage entries “token” and “current_user” hold the login token and cached profile. Tokens expire after 30 days, but entries remain until logout or removal of browser data. Logout removes these account entries. The “theme” entry remembers your chosen appearance until changed or cleared.

Storage strictly necessary for a requested service falls within § 25(2) TDDDG; other storage requires consent where applicable. Clearing browser data signs you out and resets preferences.

The lowCAD application does not currently integrate advertising trackers or optional analytics scripts. The “cookie_consent” entry remembers dismissal of the storage notice or an earlier banner choice until browser data is cleared; it does not enable analytics. Payment and sign-in providers have their own storage practices on their services.

Cloudflare, Google, payment providers, and external asset hosts may process data outside the EEA. Applicable transfer arrangements depend on the recipient and processing, including adequacy decisions or contractual safeguards where required. Contact us for information about the safeguards applicable to your data; provider notices explain their international processing.

You may have rights to access, correct, delete, restrict, export, or object to processing of your personal data. You may also withdraw consent where processing is based on consent.

Contact [email protected] to exercise your rights. Consent withdrawal does not affect prior lawful processing. We may need information to verify your identity. You may complain to an authority where you live, work, or consider a breach occurred, including the Lower Saxony data protection authority for the operator address currently listed.

We may update this policy as the product, providers, or legal requirements change. Material changes will be posted on this page.