Blop3DPrivacy
Last updated: 31 July 2026
Draft for review — this describes how Blop3D is built to handle data, but it isn't legal advice. Items marked TO CONFIRM still need real values filled in, and the whole policy should be reviewed by a professional before you rely on it.
The short version
Your artwork never leaves your device. The maker runs entirely in your browser — there's no image upload, and no account is needed to use it. The data we do handle is limited to what accounts, payments, and support need.
Who we are
Blop3D (“we”, “us”) is operated by [OPERATOR LEGAL NAME — registered company or individual], based in [COUNTRY / REGION]. For any privacy question or request, contact [privacy@yourdomain — a real, monitored address].
Your images stay on your device
Blop3D turns a flat image into a 3D object locally, in your browser. Uploading a file, removing its background (the AI runs in your browser), extruding the silhouette, and exporting the model all happen on your own machine. Your source images and the models you make are not sent to our servers.
What we collect, and why
- Account details (such as your email) — only if you sign up, to authenticate you and run Premium. Handled by Clerk.
- Payment details — only if you buy Premium. Handled by Stripe; we never see or store your card number.
- Feedback / support messages — the text you write and any email you choose to add, so we can read and reply.
- Technical data — your IP address and basic request info are processed transiently by our host and our feedback endpoint to keep the service secure and rate-limited against abuse. [CONFIRM no analytics is used — none is known today]
Third-party services
We keep these to a minimum, and each receives only what its job needs:
- Clerk — sign-in and account management.
- Stripe (via Clerk Billing) — Premium payments.
- Loops — delivers your feedback / support messages to us.
- Cloudflare Turnstile — a login-free “are you human” check on the feedback form.
- Vercel — hosts the site and processes request logs (including IP).
- img.ly background removal — the model runs in your browser, but its code and model files are fetched from a CDN when you use that tool (your image itself is not sent).
Fonts are self-hosted, so simply loading the site sends nothing to Google or any font CDN. Each provider above has its own privacy policy governing the data it processes.
Stored in your browser
We save your preferences (theme, grid, units, whether you've seen the intro tour, and similar) in your browser's local storage so the app remembers your setup. This stays on your device and isn't sent to us.
Cookies
The site sets no advertising or tracking cookies. When you sign in, Clerk sets the cookies needed to keep you authenticated, and Cloudflare Turnstile may set a short-lived token when its human check runs.
How long we keep it
[RETENTION — state how long account data, feedback messages, and server logs are kept, e.g. “account data until you delete your account; feedback for N months; logs for N days”.]
Where your data goes
The providers above are based in the United States, so account, payment, and feedback data may be processed there. [If you serve EU/UK users, confirm the transfer safeguards each provider relies on, e.g. Standard Contractual Clauses.]
Your rights
Depending on where you live (for example the EU/UK under GDPR, or California under the CCPA), you may have the right to access, correct, delete, or export your personal data, and to object to certain processing. To exercise any of these — including deleting your account data — email [privacy@yourdomain]. You also have the right to complain to your local data-protection authority.
Children
Blop3D isn't directed at children and isn't intended for anyone under [MINIMUM AGE, e.g. 13 or 16]. We don't knowingly collect their data.
Security
We keep the data we hold to a minimum and rely on our providers' industry-standard safeguards (encryption in transit, access controls). No method of transmission or storage is ever completely secure.
Changes
We may update this policy as the service evolves; we'll change the “last updated” date above, and for material changes we'll [state how you'll notify users, e.g. a notice in the app].
Contact
Questions about privacy? Email [privacy@yourdomain], or reach us through the Support option in the app.