Privacy Policy

Learn how Any3D collects, uses, and protects your information.

Last updated: October 11, 2026

1. Introduction

Any3D ("we", "our", or "us") operates the website at any3d.cc (the "Service"). We are committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully to understand our practices.

Data controller: The Service is operated by Kris, an independent developer (sole proprietor), who acts as the data controller for the personal information described in this policy. Privacy contact: privacy@any3d.cc. We have not appointed a Data Protection Officer; privacy inquiries are handled through this address.

Core Principle: All 3D model file processing on Any3D is performed entirely within your browser using WebAssembly (WASM). Your files are never uploaded to our servers; they stay on your device throughout the entire process.

2. Information We Collect

2.1 Browser-Based File Processing

Your 3D model files (including but not limited to GLB, GLTF, OBJ, FBX, STL, STEP, and other supported formats) are processed entirely within your browser's memory using WASM engines. These files:

  • Are never transmitted to our servers
  • Are automatically cleared from memory when processing completes or you close the page
  • Cannot be accessed by us at any time

2.2 Information You Provide Voluntarily

When you choose to use certain features, we may collect:

  • Email address: When you sign in via Google OAuth for account features
  • User preferences: Theme selection (light/dark/system), language preference

2.3 Automatically Collected Information

When you visit our Service, we may automatically collect certain technical information:

  • Usage analytics: Page views, feature usage patterns (via Google Analytics)
  • Device information: Browser type, operating system, screen resolution
  • Technical data: IP address (anonymized), language preference, access times

2.4 Subscription and Payment Information

If you subscribe to a paid plan, our payment processor handles your payment and we receive and store limited billing records:

  • Account email used for the purchase, and the internal account identifier your order is linked to
  • Transaction records: order and subscription identifiers, plan, amount, currency, payment status, and billing period dates

Card numbers and other payment credentials are processed by the payment processor (Waffo Pancake) and are never received or stored by us.

2.5 Information We Do NOT Collect

We do not collect:

  • Credit card numbers or payment credentials (handled entirely by our payment processor)
  • Home addresses or phone numbers
  • Your 3D model files (processed locally only)
  • Sensitive personal data such as health records or biometric data

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Providing and maintaining the Service: To deliver our 3D processing tools and ensure they function correctly
  • Improving user experience: Analyzing usage patterns to optimize performance and add new features
  • Communicating with you: Sending important service notifications (e.g., significant policy changes or service disruptions)
  • Security and fraud prevention: Detecting and preventing malicious activities or abuse of our Service
  • Legal compliance: Complying with applicable laws, regulations, and legal processes
  • Billing and subscription management: Processing subscription payments, managing plan entitlements, and sending transactional emails about your subscription (receipts, renewal reminders, cancellation confirmations)

We do not send marketing emails: emails we send are transactional (related to your account, security, or your subscription). If we ever introduce marketing communications, we will ask for your consent first and provide a clear unsubscribe option.

4. Information Sharing

4.1 No Sale of Personal Information

We do not sell, trade, rent, or otherwise monetize your personal information.

4.2 Third-Party Service Providers

We may share limited, anonymized information with the following trusted third-party services:

  • Microsoft Clarity: For understanding user behavior through heatmaps, session recordings, and usage analytics
  • Google Analytics: For website usage analytics (anonymized, aggregated data only)
  • Google AdSense: For displaying advertisements. Google and its partners may use cookies to serve ads based on your prior visits to this and other websites. You can opt out of personalized advertising at Google Ads Settings. See also How Google uses advertising cookies.
  • Cloudflare: For content delivery network (CDN) and DDoS protection services
  • Google Auth: For authentication services (only receives your email and basic profile upon your explicit consent)
  • Waffo Pancake: Payment processing and merchant of record for subscriptions, including card data handling, tax collection and receipts. Payment data is handled under Waffo Pancake's own privacy policy.

4.3 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, provided that such disclosure is consistent with applicable law.

4.4 International Data Transfers

We rely on global infrastructure (for example, Cloudflare) and our payment processor, which may process data in other regions. Your information may therefore be processed outside your country of residence. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and equivalent mechanisms provided by our service providers.

5. Data Security

5.1 Local Processing Architecture

The core security feature of Any3D is its browser-based processing architecture:

  • All 3D file operations run as WASM modules inside your browser sandbox
  • Files exist only in browser memory during processing
  • Memory is released immediately after processing completes
  • No server-side storage of your files at any point

5.2 Transmission Security

All data transmitted between your browser and our servers uses TLS encryption (HTTPS).

5.3 Account Data Security

For account-related data (email addresses), we implement industry-standard security measures including secure hashing and encrypted storage where applicable.

5.4 Data Retention

We keep personal data only as long as needed for the purposes described above:

  • Account data: while your account is active; deleted within 30 days after you request account deletion
  • Billing and transaction records: kept as part of our service records and as required for tax and accounting purposes
  • Server and error logs: up to 30 days
  • Analytics events: up to 3 months
  • Support correspondence: up to 24 months

5.5 Data Breach Notification

If we become aware of a personal data breach likely to result in a risk to your rights or freedoms, we will notify the competent supervisory authority and affected users without undue delay and, where required, within 72 hours of becoming aware of it.

6. Cookies and Tracking Technologies

6.1 Essential Cookies

These cookies are necessary for the Service to function properly:

  • Session cookies: Maintain your authentication state if you are signed in
  • Preference cookies: Remember your theme and language choices

Essential cookies cannot be disabled as they are required for basic functionality.

6.2 Analytics Cookies

We use Google Analytics to understand how visitors interact with our Service. These cookies help us:

  • Identify popular tools and features
  • Detect and fix technical issues
  • Improve overall user experience

6.3 Advertising Cookies

We use Google AdSense to display ads. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to our website or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and/or other sites on the Internet. You may opt out of personalized advertising by visiting Google Ads Settings.

6.4 Managing Cookies

You can control and manage cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our Service.

7. Microsoft Clarity

We use Microsoft Clarity and Microsoft Advertising to understand how you use and interact with our website through behavioral metrics, heatmaps, and session replays, in order to improve and promote our products and services.

We use first-party and third-party cookies and other tracking technologies to collect website usage data to determine the popularity of products/services and online activity. Additionally, we use this information for website optimization, anti-fraud/security purposes, and advertising.

For more information about how Microsoft collects and uses your data, please visit the Microsoft Privacy Statement.

8. Your Rights (GDPR / CCPA)

Depending on your jurisdiction, you may have the following rights regarding your personal information:

If you are in the EU / EEA (GDPR):

  • Right of Access: Request a copy of your personal data we hold
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your personal data
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to certain types of data processing
  • Right to Restrict Processing: Limit how we use your data

If you are in California (CCPA):

  • Right to Know: What personal information we collect and how it is used
  • Right to Delete: Request deletion of your personal information
  • Right to Opt-Out: Opt out of the "sale" of personal information (note: we do not sell personal information)

To exercise any of these rights, please contact us using the information provided in Section 10.

9. Children's Privacy

Our Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13.

If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly.

If you believe that a child has provided us with personal information, please contact us immediately so we can take appropriate action.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements.

When we make material changes, we will:

  • Update the "Last updated" date at the top of this page
  • Post a notice on our website about significant changes

Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

We aim to respond to all inquiries within 30 days.