Privacy Policy

Sekko Creative Studio SRL (CUI RO28760715), [REGISTERED ADDRESS], Romania, decides how your data is used (the "controller"). For anything about your data, email [PRIVACY EMAIL].

• Account: your email address, display name, role, your invite, and the name and email from Google or Discord if you sign in with them.
• Your characters: the descriptions you write, the reference images you upload, and everything made from them: poses, images, 3D models, print checks and exported files.
• Usage: your credits and what each step cost, the history of your runs, and feedback you send us.
• Technical: server logs (such as IP address and browser) that our hosting keeps for security, and error reports.
• Analytics: only if you say yes (section 5).

• To run 3D Miniforge for you (our contract with you): sign-in, making your miniatures, credits.
• To keep it safe and working (our legitimate interest): content checks, spend and rate limits, fixing errors, preventing abuse.
• To improve it (your consent): usage analytics, which you can turn off at any time.
• When the law requires it, for example accounting records.

We don't sell your data, show ads, or train AI models on your content.

We use these services to run 3D Miniforge. Each gets only what it needs, under a data processing agreement:

• Anthropic (Claude) (USA): Your character descriptions and reference images, to write the prompts and to read a character from your images; your concept images, to check them for printing; and pictures of your 3D model, to compare it with the concept image.
• Google (Gemini) (USA / worldwide): Prompts and images, to make and edit the concept images.
• fal (USA): Prompts and images, to make and edit the concept images.
• Meshy (USA): The concept images you choose, to build the 3D model, and a short description of a base, to make one if you ask for it.
• OpenAI (USA): Your descriptions and uploaded images, only to check them against the content rules (moderation).
• Supabase (EU (Frankfurt)): Your sign-in and the app's database (account, characters, runs, credits).
• Cloudflare R2 (EU): Your files: uploaded images, generated images, 3D models and STL files.
• Railway (EU): Runs the app's servers, which handle all of the above.
• Resend (USA): Your email address, to send you sign-in links and invites, and the feedback you send us, which reaches our team by email.
• Sentry (USA): Error reports from the app: what broke and where. No descriptions, images or files.
• PostHog (EU): Usage analytics and masked session recordings, only if you say yes (see Analytics below).

Where a service is outside the EU, such as in the USA, the transfer is covered by the EU-US Data Privacy Framework where the company is certified, or otherwise by the European Commission's Standard Contractual Clauses.

After sign-in we ask whether we may count how the app is used. Only if you say yes, PostHog (EU) receives: which steps and tools you use, the kind of miniature (size, tabletop or display), where runs stop, what they cost in credits, how long creating a character takes, and a recording of how you move through the app (where you click and scroll) in which every text, every field and every image is hidden in your browser before it is sent. Never your descriptions, character names, images or email. Recordings are kept 30 days. You can change your answer in Settings.

• Sign-in cookie (essential): keeps you signed in. The site doesn't work without it.
• Theme cookie (essential): remembers light or dark mode.
• Analytics: only after your yes, PostHog keeps an id in your browser's storage. Before that, nothing is loaded.

We use no advertising or tracking cookies.

• Your account and your characters: until you ask us to delete them, or until we reset accounts or end the beta (see the Terms, section 2), whichever comes first.
• Working files of a run you haven't touched for 30 days, such as old 3D model versions and heat maps, are deleted automatically. Your images, final models and exported files stay.
• Credit and cost records: as long as accounting law requires.
• The services above keep their own logs for a limited time under their policies.

Under the GDPR you can ask us to:

• show you the data we hold about you, or give you a copy;
• correct it;
• delete it, with your account;
• limit or stop a use of it, and withdraw a consent you gave.

Email [PRIVACY EMAIL] from your account's email address. We answer within one month. You can also complain to the Romanian data protection authority (ANSPDCP, dataprotection.ro) or the one in your country.

3D Miniforge is not for anyone under 18, and you may not upload images of children.

When this policy changes in a way that matters, it gets a new version and we ask you to accept it again. See also the Terms of Service.