🔒 Privacy First
Privacy Policy
Last updated: March 2026 · Effective immediately · Governing law: Palau
🛡️
Your scan files never leave your browser
MeshThis processes all 3D files locally using WebAssembly (WASM). No file data is ever transmitted to our servers or any third party. This is not just a policy — it is a technical fact of how the software works.
1. Who We Are
MeshThis ("we", "us", "our") is a browser-based 3D scan file conversion tool available at meshthis.com. MeshThis is a product of Simpel3D. The service is operated by an independent developer with tax residency in Palau.
Contact: [email protected]
2. What Data We Collect
| Data Type | Collected? | Details |
|---|
| 3D scan file content | NEVER | All file processing happens locally in your browser via WASM. Files are not transmitted anywhere. |
| File names | NEVER | File names are displayed in the UI only. They are not logged or stored anywhere. |
| Conversion history | NEVER | We do not record which files you converted or when. |
| Usage counter | Locally only | A daily conversion counter is stored in your browser's localStorage. It never leaves your device. |
| Payment data | Via Paddle only | Paddle processes all payments as Merchant of Record. We receive a plan status confirmation only — never card numbers or billing details. |
| Analytics | Anonymised only | We use Plausible Analytics — privacy-first, cookie-free, GDPR-compliant. No personal data collected. No fingerprinting. |
| IP address | Anonymised | Plausible anonymises IP addresses. We do not log or store IP addresses ourselves. |
| Email address | If provided | Only if you contact support or create an account. Used solely to respond or manage your subscription. |
3. How We Use Your Data
- Operate the conversion service and enforce fair-use limits
- Process and manage your subscription via Paddle
- Respond to support enquiries
- Understand aggregate usage trends (anonymised analytics only)
- Comply with legal obligations
4. What We Do Not Do
- We do not sell your data to anyone
- We do not share your data with third parties except as described in this policy
- We do not run advertising networks or sell ad placements
- We do not build user profiles or track behaviour across websites
- We do not store your 3D scan files, even temporarily on a server
5. Third-Party Services
- Paddle — payment processing as Merchant of Record. Handles all billing, taxes, and receipts. Subject to Paddle's Privacy Policy.
- Plausible Analytics — anonymised analytics. No cookies, no personal data. Subject to Plausible's Privacy Policy.
- Cloudflare Pages — hosting infrastructure. Subject to Cloudflare's Privacy Policy.
- JSDelivr CDN — delivery of WebAssembly libraries. No user data is shared.
6. Legal Basis for Processing (GDPR)
- Contract — processing necessary to provide the service you subscribed to
- Legitimate interests — anonymised analytics to improve the service
- Consent — if you provide your email for support
- Legal obligation — where required by applicable law
7. Your Rights (GDPR / EU Users)
- Access — request a copy of data we hold about you
- Rectification — correct inaccurate personal data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — request we limit how we process your data
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interests
To exercise any of these rights, email [email protected]. We will respond within 30 days.
8. Data Retention
- Account data: retained for the duration of your subscription, then deleted within 30 days of cancellation
- Support emails: retained for 12 months then deleted
- Payment records: retained as required by Paddle and applicable tax law
- localStorage data: stored only on your device; cleared when you clear browser data
9. International Data Transfers
Because all 3D file processing is done locally in your browser, no file data is ever transferred internationally. The only data transfers that occur are anonymised analytics and payment processing, both handled by GDPR-compliant third parties.
10. Children's Privacy
MeshThis is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy occasionally. Material changes will be noted with an updated date at the top of this page. Continued use of MeshThis after changes constitutes acceptance of the updated policy.
12. Contact