Privacy

What we keep when you sign in

• Your email address, so you can sign in and so we can reach you about your account.
• If you sign in with Google or GitHub: your name and your profile picture's web address from them, your account id there, and the tokens they give us (an access token, and a refresh token and an ID token when they send them). We don't use the picture or the tokens for anything after you sign in.
• A profile with a handle and a display name, made from your name or your email address. It also holds your role (admin or not) and a trust level (new, verified, trusted or admin).
• Your sign-in sessions, each with the IP address and the browser user-agent from when you signed in. A session ends 30 days after you last use it, or when you sign out. Signing out deletes it, and a cleanup that runs daily deletes expired sessions. We use sessions to keep you signed in and to spot misuse.
• Your setup: your wall (and a custom wall's name and measurements), wall colour, fit (and which calibration piece you chose for it, such as B18 A35), printer and bed size, filament count, slicer and part colours, the colours designs you haven't coloured yet open in (the ones you last picked), and how you last left the design page (dimensions, the view, the key position, and Simple or Advanced), so the same setup is ready on every device you sign in on, and the units you use (a new browser starts with them; each browser keeps its own). We save it to your account while you're signed in, about a second after you change it.
• Custom walls you save to your account: each wall's name, its measurements and your note on how you measured them, so they appear in the wall picker on every device you sign in on. Delete one on the Custom walls page and it is gone from your account.
• Parts you save to My parts: each part's name, its design and release, the wall it was saved for and the settings you chose, your labels included, so you can open it or download it again on every device you sign in on. Delete one on My parts and it is gone from your account.
• Your downloads: which design, which release, a fingerprint of the settings you chose, the file format, the slicer and the time. We use them to enforce the download limit and to count downloads. Each download also keeps the settings you chose, your labels and your wall included, so you can download it again from your Downloads page.
• For sign-in by email: a record of each sign-in link we send (the link works once and expires after 15 minutes), and a counter of how many sign-in emails each address has been sent in a 15-minute window. It holds the email address, the window's start and the count, and it stops anyone flooding an address with emails. A cleanup that runs daily deletes expired sign-in links, and deletes each counter on its first run after the counter's 15-minute window ends.
• AI apps you connect to your account, such as Claude: each app's registration (the name it gives itself and the web addresses it sends you back to), your permission for it (what you allowed it to do, and when), and the sign-ins it holds for your account (when each was issued and when it ends). We keep its tokens only as fingerprints, so a copy of them is no use to anyone. The app gets a random code that stands for your account, not your name, your email address or your password. Disconnect it on your Account page and your permission and its tokens are deleted, so it can't use your account any more.
• Designs your AI makes with you: each draft, the last 50 saved revisions of it, its check results, the pictures and files the studio made of it, and the designs you publish. A draft is yours alone until you publish it; a published design is in the catalog for everyone.
• Comments you leave for your AI on a design's Live view: the revision, what it points at, your words and your AI's answer; and the last thing your AI did on the design (the tool's name and the revision, never what it sent). Only you and the AI apps you connect read them; our admins don't, and your AI's provider receives them when your AI reads them.
• Requests your AI sends for new design words or new core pieces: what it asked for, why, and the draft that shows the need. They're never shown to other people. Once a month we read them, grouped and without your account, to decide what to add.
• Designs you send to Slatfinity: the design, your note and our answer (published, or declined with the reason). Only you and our admins see them, and the AI apps our admins answer them with, which read the note too.
• Notes and review records our admins keep on designs in the catalog, and on designs you send them: flags such as "needs rework" or "print test", with their notes. Their AI apps read those notes; you never see them, and they're about the design, never about you.
• Print reports you send with I printed it: the download it's about, the part and size, the wall, how it went, the printer, fit and settings from that download, the material, your note, what it holds and for how long if you say, and any photo. Only our admins see your photo; where and when it was taken is removed before we keep it. A report that says a print didn't fit or broke, on a design our admins review, adds your words, never your name, to a review note our admins and their AI apps read; a wall of your own is called "a custom wall" there, never by its name. You can edit or delete a report on your Print reports page, except a report that recorded a print test of Slatfinity's own parts (admins only). When you delete it, or your account, your words in that note are replaced with "(report deleted)". A report also goes if the design release it's about is deleted, as when its owner deletes their account.
• Counters of how many pictures, checks and slices your AI has used each hour, and how many requests each day, and a record of each charge to them (what it took and what was given back), so the allowances hold. We delete both after two days.

What stays in your browser

Your setup (the same settings) is saved in your browser's local storage. While you're signed in, it is also saved to your account. Changes you make while signed out stay in this browser. When you next sign in:

• to the account this browser last saved to, they are saved to it, unless your account's copy was changed more recently on another device, in which case that copy is kept;
• to an account, in a browser that hasn't saved to any account yet, they are saved to it if it has no saved setup; if it has one, an answer only one of them holds (a wall, your printer answers, a design's colours, how you last left the design page, the colours new designs open in) is kept, and we ask you once which to keep only when both hold different answers;
• to a different account from the one this browser last saved to, that account's saved setup replaces this browser's. If it has none, we ask whether to use this browser's setup or start fresh, unless this browser's setup is the defaults.

Beside your setup, we keep a small note (slatfinity.setup.meta.v1): which account it was last saved to; when it last changed here and on your account; and short fingerprints of changes sent to your account that it hasn't confirmed yet, and the account they went to (not the changes themselves). It tells us which copy is newer, and which saves were this browser's own. When this browser and your account both have changes, the most recent is kept. We ask you only in the cases above, or when we can't tell which is newer.

If you click Download while signed out, or Sign in at the top of a design page, the design you were configuring is kept in your browser's local storage for up to 30 minutes, so you can continue after you sign in. It is removed when you continue, when you sign out, or on your next visit after it expires. Download again on My parts or Downloads keeps that part's or download's settings, your labels included, in local storage the same way, so the design page can start the download; it is removed in the same ways, and when you delete your account.

When you sign out, the sign-in library leaves a small note in local storage (better-auth.message) so your other open tabs sign out too. It holds no personal data.

When you start signing in, we note which sign-in method you chose, for up to 30 minutes, and only when visitor statistics are on (slatfinity.signInStarted), so the statistics can count sign-ins that finish. It is removed the next time a page sees you signed in.

When you delete your account, that tab keeps a one-time note in session storage (slatfinity.accountDeleted) so the home page can say your account is gone. It holds no personal data, and is removed once the home page has read it.

Visitor statistics

We count visits with Umami, an open-source statistics tool that runs on our own server. It uses no cookies. It records the pages you visit (their address, without anything after # in the address, and of the part after ? only the campaign tags that start with utm_, plus the page's title; the search page's title is sent as just “Search”), the site that sent you (its address only, not the page), your browser, operating system and device type, screen size and language, and the country, region and city your connection comes from.

Your IP address is used to work out the country and an anonymous visitor code, and is not stored; the code changes each month, so visits can't be linked from one month to the next. We also count a few actions, such as opening a design, changing your printer or slicer, searching, or downloading a file. They carry the design, the wall or setting you picked, the file format and slicer, the number of files, a refusal code (such as the download limit), and the sign-in method you chose and why you signed in (to download, or from the menu). In the catalog they carry how many designs a search found, the kind of suggestion you chose, which buy-steel answer you saw, the filters you switch, the thing you open to hang, and the three sizes you give when you ask for a part. They never carry your email address, what you type into search, or the text on your parts.

If your browser sends Do Not Track, nothing is recorded. The statistics can't be tied to your account, so there is nothing of yours in them to show or delete.

Cookies

We set only the cookies that keep you signed in, and a short-lived one during Google or GitHub sign-in. The first two are a session token and a copy of your session details that lasts a few minutes. The third protects the sign-in step against forged requests. Our visitor statistics use no cookies, there is no advertising and no third-party cookies, and we don't sell or share your data.

If you choose Light or Dark, one more cookie, slatfinity.theme, remembers that choice for a year so pages open in it; choosing System removes it.

Services that handle your data

• Resend sends the sign-in emails, so it receives your email address.
• Google and GitHub handle sign-in only if you choose them.
• Railway hosts the site and the database.
• Anthropic's Claude helps us read the month's studio requests, grouped and without your account.
• Cloudflare runs the domain name (DNS) and forwards mail sent to hello@slatfinity.com, so it handles the emails you send us.
• Sentry receives a report when something breaks on the site: what failed and where, the page address without anything after ? or #, and your browser type. It doesn't store your IP address (that setting is on in our Sentry project) and doesn't receive your cookies, what you typed, or who you are.

Seeing and deleting your data

On your Account page you can download a copy of your data as a JSON file: your account and profile, your sessions (their times, IP addresses and browsers), your linked Google or GitHub accounts, your sign-in email counter and the times of sign-in links still waiting, your setup, your custom walls, My parts, your downloads with their settings, the AI apps you've connected and the times of their sign-ins, your designs with every release and draft, their check results and saved drafts, your Live view comments, your AI's requests, the designs you've sent to Slatfinity with our answers, your print reports (whether each has a photo, not the photo) and your studio allowance counters and charges. It leaves out tokens (your sessions', your sign-in links', your AI apps' and the ones Google or GitHub gave us) and the downloads' settings fingerprints.

You can delete your account there too. To delete it, you type your handle to confirm, and you need to have signed in on that device in the last 10 minutes. It happens straight away and can't be undone. You can also email hello@slatfinity.com from the address you sign in with, and we do it for you.

Deleting your account deletes your email address, your profile, your sessions, your linked Google or GitHub account, your saved setup, your custom walls, My parts, the sign-in links still waiting in your inbox (they stop working) and your sign-in email counter. It also disconnects every AI app and deletes your drafts and saved draft history, your Live view comments, the pictures and files the studio made of your drafts, your AI's requests, what you've sent to Slatfinity, your print reports, your allowance counters and charges, and every design of yours that isn't listed in the catalog. A design listed in the catalog stays there under its licence, no longer linked to your account, with only the release the catalog shows. A design we took down stays as a record, with the releases that were published, so it can't be published again; only our admins can see it. We keep the records of your downloads without you: we remove your account from them, delete the settings and the settings fingerprint saved with them, and keep only the design, its release, the file format, the slicer and the time, so the download counts stay right.

We back up the database every night and keep each copy for 14 days, so after you delete your account its data stays in those copies for up to 14 days, then is gone from them too.

When you delete your account, we keep its id (a random code, not your name or email) and the time you deleted it for 15 days, outside the backups, so restoring a backup can't bring your account back. The storage deletes that record within a day or two after that.

Changes

If this page changes, the date at the top changes too.