This describes what PrinterPilot collects, why, who else sees it, and how long we keep it. It reflects what the software actually does.
Needed to sign you in (there are no passwords) and to contact you about your account. Lawful basis: performance of a contract.
Models you analyse are parsed in your browser. For a curated preset result nothing leaves your device at all. For an AI analysis we send the measurements (dimensions, triangle count, overhang percentage), the filename, and any reference photo you attach — not the model file itself. For failure diagnosis we send the photo you upload.
Models, photos, titles and descriptions you publish to the community gallery are stored and shown publicly, along with the username you choose.
A per-day count of anonymous events (pages viewed, analyses started, exports opened) so we can see which parts of the product work. These are counters only — no profile, no identifier, nothing tied to you. We also keep a per-month count of your AI analyses to apply the free-tier limit.
Handled entirely by Stripe. We never see or store card details. We store your Stripe customer ID, your plan, and your credit balance.
One cookie: pl_session, which keeps you signed in. It’s httpOnly, SameSite=Lax, and
lasts 30 days or until you sign out. It is strictly necessary for a service you asked for, so it does
not require consent — which is why you aren’t reading this in a cookie banner. We set no analytics,
advertising or tracking cookies. If that ever changes, we will ask you first.
| Who | What they get | Why |
|---|---|---|
| Vercel | Hosting, request logs, stored data | Runs the site and stores accounts and gallery content |
| Anthropic | Model measurements and any photo you submit | Generates the AI analysis and failure diagnosis |
| Stripe | Email address and payment details | Takes payment and manages subscriptions |
| Resend | Email address | Sends your sign-in link |
| Sentry | Error reports, which can include a URL and browser details | Tells us when something breaks |
Some of these are in the United States. Transfers rely on Standard Contractual Clauses or an equivalent safeguard.
Your content is not used to train AI models. Submissions to Anthropic are processed to produce your result and are not used for training.
The gallery can also show results from Thingiverse’s public API. Those are fetched by our server, so Thingiverse does not see your IP address; images are loaded from their CDN with no referrer.
You can delete your account yourself, at any time, from Your profile → Delete your account. That erases your account record, your analysis history, your profile and every print you have shared, including the uploaded files and photos. It cancels an active Pro subscription at the same time and signs you out on every device. It is immediate and cannot be undone; backups age out within 30 days.
You can also ask for a copy of your data, correct it, restrict how it’s used, or object to processing. Email support@printerpilot.io and we’ll respond within 30 days.
If you’re in the UK or EU and think we’ve got this wrong, you can complain to your data protection authority (in the UK, the ICO at ico.org.uk).
Everything is served over HTTPS with a strict Content Security Policy. Sessions are random 256-bit tokens in an httpOnly cookie, so JavaScript can’t read them. There are no passwords to leak. Access to production data is limited to the operator of the Service.
PrinterPilot isn’t intended for under-16s and we don’t knowingly collect their data. If you believe a child has given us personal data, email us and we’ll remove it.
Material changes will be announced in the app before they take effect, and the date at the top of this page will change.
Back to PrinterPilot · Terms · Refunds · Content & Copyright