Privacy · updated 5 October 2026

Your designs are yours.

Here's what Loftsmith keeps, why, and how to make it go away. The short version: we keep what's needed to run your account, your designs never go into ads, and everything optional is your choice.

We never

  • Sell your data to data brokers.
  • See or store your card number. Stripe handles payment.
  • Put your prompts, photos or private models in analytics or ads.
  • Record your screen unless you say yes.

We keep, to run Loftsmith

  • Your account: name, email, and your picture if you use Google.
  • Your projects, so they open on any device.
  • Your credits and usage, so billing is right.

Your choice

  • Analytics, to see where the site confuses people.
  • Ad measurement, to see which of our ads work.
  • Screen recordings, only if you say yes.

In the EU/EEA, the UK, Switzerland, Brazil, Canada and other places that require it, analytics and advertising are off until you opt in. Elsewhere they are on by default and you can turn them off any time in Your privacy choices. A Global Privacy Control signal always keeps advertising off.

Good to know

  • Free-plan projects are public showcases. The model, its title and summary can be seen by anyone and can appear in search; your conversation and photos never are. On paid plans projects are private unless you share a link, and you can stop sharing any time.
  • Private designs are private from us too. Our team doesn't read paid members' designs, their titles or their conversations; we see counts only, like how many steps worked. We look at one of your designs only when you ask us to (the “Let the Loftsmith team look at this design” box when you rate a version), for 30 days, and every look is logged.
  • What you type and the photos you attach go to our AI provider so it can design your part. If you're signed in, the conversation text (not photos) is saved with your project so it syncs across devices.
  • 3D model files you add stay in your browser. Only a rendered picture of where you placed them is sent, so the design can fit around them.
  • Usage trails need your OK for analytics. Full screen recordings have a separate opt-in. Neither includes what you type, your photos or your account pages.
  • Want it gone? Email [email protected] and we delete your account and data.

What we collect, and why

Your account
Your name, email address and (if you sign in with Google) your profile picture, plus a sign-in session cookie. We need these to keep you signed in, save your projects and look after your credits. Sign-in links are emailed through Resend; Google sign-in goes through Google. If you create your account to download a community model, we note that (not which model) so we can send you at most two short tips about designing your own parts; you can turn tips off in your account.
Your designs
Projects are saved in your browser. If you're signed in, they're also synced to our server so you can open them on any device: the design's CAD script, your slider values, printer and filament, a small preview, and the conversation text. Photos are not synced.
Messages and photos you send to the designer
To design your part, your messages, any photos you attach, marks you draw, and rendered pictures of the model are sent to our AI provider (Anthropic, or OpenAI if that model is chosen) through their API. We don't keep a separate copy of your photos on our server.
Usage and credits
For each design run we record the design's title, which AI model ran, what it cost and how many credits it used. This is how credits and your usage history work.
Payments
Stripe handles checkout and billing. We never see or store your card number; we keep your plan, billing status and Stripe customer reference.
Keeping free credits fair
To stop free credits being claimed over and over, we store one-way hashes (scrambled fingerprints we can't turn back into the original) of your normalized email, IP address, browser type and a device cookie. The IP hash on a claim is cleared after 30 days.
Stickers without an account
If you leave a sticker on a design without signing in, we keep the sticker with a one-way hash of that same device cookie, so the same sticker isn't counted twice and you can take it back. A hash of your IP address is kept for two days to slow down spam, then cleared. The design's maker only sees that someone left a sticker.
Print reports
If you tell us how a print turned out (fits, too tight, failed and so on), we store that answer, your optional note and the sizes used, linked to your account. Combined, anonymous counts show other makers which fits work.
Preferences on your device
Things like light or dark mode, your printer and filament, Friendly or Pro tone, and your saved patterns are kept in your browser's local storage. They never leave your device.

Who helps us run Loftsmith

We only share what each service needs to do its job:

  • Anthropic and OpenAI: generate designs from your messages and pictures.
  • Stripe: payments and invoices.
  • Resend: sends sign-in emails and the account emails you can turn off in your account.
  • Google: Google sign-in if you choose it, and optional analytics and advertising measurement according to your choices.
  • Meta: optional advertising measurement according to your choices.
  • Reddit: optional advertising measurement and hashed email matching according to your advertising choice.
  • Our hosting provider: runs the server and stores the database.

These services may process data outside your country, under their own privacy terms and safeguards. We do not operate a data brokerage. Optional sharing with advertising providers is described above and controlled by your advertising choice.

Your choices and rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Email [email protected] from your account's address and we'll answer within 30 days. Deleting your account removes your projects, print reports and recordings. Billing records we're legally required to keep are the exception. If you're in the EU or UK you can also complain to your local data protection authority.

The legal basis we rely on: running the service you asked for (account, designs, credits, payments), our legitimate interest in preventing abuse and keeping the service reliable, and your consent for optional analytics, advertising measurement and session recordings. You can withdraw consent at any time.

The details

Everything above, spelled out. Open any part.

Anonymous usage trailOnly if you allow analytics. No typing, no cookies, deleted after 30 days.

If you allow analytics, a visit can leave an anonymous trail to help us see where the site confuses people: where the pointer moved, what was clicked (the name of the button or link, like “Design it free”), how far the page and its panels were scrolled, the window size, which pages were opened, and steps like “sent a prompt” or “got a first model”.

  • No text from the page and nothing you type, not even the words of your prompt.
  • Visits through one of our tagged links (an ad or a post) are also counted without consent, with no id and no cookie: one count per day, link and step (arrived, stayed, typed a request, signed in, got a design, downloaded, opened checkout), so we can see which ads help.
  • No cookies and no tracking across sites: one random id per browser tab, deleted when you close the tab.
  • Account, sign-in and billing pages leave no trail.
  • Only the Loftsmith team can see trails. They're deleted after 30 days.
  • We ask first everywhere. The trail starts only after you allow analytics. “Essential only” turns it off.
Analytics and advertising measurementGoogle Analytics, and ad measurement with Google, Meta, Reddit and X, by your choice.

We use optional Google Analytics to understand visits to public pages and steps such as creating an account, starting checkout and completing a verified payment. If you also allow advertising, Google, Meta, Reddit and X can use measurement data to attribute visits and purchases to our ads and help us reach relevant audiences.

  • Google Analytics and advertising have separate choices. Where an opt-in is required, Google, Meta, Reddit and X tags load only after the corresponding opt-in; elsewhere they load unless you turn them off. Essential-only visitors do not send measurement requests to those services. We use your approximate country (from your connection, not stored) only to decide which applies.
  • Measurement can include browser type, browser and session identifiers, ad-click identifiers, public page information, event time, product category, currency and payment value. Direct browser requests also reveal connection information such as your IP address to the receiving service.
  • Our server confirms purchases from Stripe before reporting them. It can send consented conversion events using browser and ad-click identifiers saved at checkout. With advertising consent, it also sends Reddit a SHA-256 hash of your verified account email to match conversions to Reddit accounts and ad interactions. Hashing changes the email into a code; it is still a personal identifier, not anonymous data. We do not send Reddit the plain email, your name, payment credentials or Google sign-in tokens. X receives ad-click identifiers for conversion matching. Google, Meta and X do not receive email matching data from this integration.
  • We do not send prompts, attached photos, private model content, account-page URLs or payment credentials in measurement events. Automatic form, search and download tracking is disabled. Optional vendor scripts are limited to public marketing pages.
  • Advertising data may be used by Google, Meta, Reddit and X across their services under their own policies. Browser privacy controls or ad blockers can further limit this processing. A Global Privacy Control signal keeps Loftsmith advertising measurement off.
  • We remember your choice for up to 180 days. Withdrawing consent stops future optional collection and cancels pending server deliveries. It does not automatically remove data already received by a provider.

opens the same controls available in the footer. For data already collected, contact [email protected]. You can also review Google's privacy policy, Meta's privacy policy, Reddit's privacy policy and X's privacy policy.

Session recordingsOnly if you say yes. Typing and photos hidden, deleted after 30 days.

To find the confusing parts of the Studio, we may ask if you'd like to share a recording of how you use it: clicks, scrolling and what's on screen. It's off unless you say yes.

  • Everything you type is replaced with asterisks, and your own messages are hidden.
  • Photos you add are blocked out, and the 3D view isn't recorded.
  • Account, sign-in and billing pages are never recorded.
  • Only the Loftsmith team can watch recordings. They're deleted after 30 days.
  • While it's on, a small note sits in the corner of the screen. Press Stop there any time to turn it off.
Feedback you send usWhat the Feedback button sends, so we can fix a problem.

The Feedback button sends us your message together with what helps us reproduce a problem: the page you were on, your screen size, browser and language, the design you had open and, only if you tick the box, a picture of it. If this visit has an anonymous trail or a recording, the report links to it. If you're signed out, you can leave an email so we can reply. Only the Loftsmith team reads feedback.

How long we keep itMost things while your account exists; recordings and trails 30 days.
  • Account, projects, print reports and usage history: while your account exists.
  • Session recordings and anonymous trails: 30 days.
  • Privacy choices and our configured Google measurement cookies: up to 180 days. Other vendor cookies follow the vendor's expiry and your browser settings.
  • Server conversion identifiers and pending event details: up to 24 hours. After delivery or expiry, event details are removed; a deduplication record linked to your account remains for up to 90 days.
  • Google Analytics event and user data: our retention settings are two months, with renewal on repeat activity disabled. Aggregated reports and advertising-provider data follow their respective retention policies.
  • Feedback: until we've dealt with it and no longer need it; ask us any time to delete yours.
  • IP hashes on free-credit claims: 30 days.
  • Billing records: as long as tax law requires.

Changes

If this page changes in a way that matters, we'll update the date at the top and tell signed-in users in the app. Questions? [email protected].

Back to the Studio