Privacy Notice

Last updated: 2025-10-29

This notice explains how we handle personal data when you use ez3d.online (the “Site”) and the browser-delivered 3D editor (the “Software”).

1. What we collect

• Technical/HTTP data: IP address, date/time, URL, referrer, user-agent, and error information – this is sent automatically by your browser when you load the Site.
• Security/edge data: our hosting/CDN provider (e.g. Cloudflare) may also log IP addresses and request metadata to protect the Site from abuse and to ensure reliable delivery.
• Emails you send us: if you contact us, we process your email address and the content of your message in order to reply.

2. What we do not collect

The 3D editor runs in your browser. Your scenes/files are processed locally in the page and are not permanently stored on our server. We do not provide cloud storage for your files, and we do not build user profiles from your 3D content.

3. Purposes & legal bases (GDPR)

• Delivering the Site/Software – we need to process basic technical data so that the Site and the 3D editor can be displayed in your browser.
  Legal basis: Art. 6(1)(b) GDPR (performance of a contract / providing the service).
• Security, abuse prevention and debugging – we keep short-term logs and our CDN/hosting provider may log requests to detect attacks, misuse or configuration problems.
  Legal basis: Art. 6(1)(f) GDPR (legitimate interests: operate and protect the service).
• Responding to messages – when you email us, we use your email address and message to answer you.
  Legal basis: Art. 6(1)(f) GDPR (legitimate interest: answer user requests).
• Note on access to data: because we mainly process short-lived technical data (logs) and do not run user accounts, in practice we can often only provide you with the small amount of personal data that still exists at the time of your request (for example: an email you sent us; or a log entry that has not yet been deleted).

4. Retention

Technical/server/CDN logs are kept only as long as needed for security and troubleshooting (typically around 30–60 days) and are then deleted or anonymized. Emails you send us may be kept longer if we need them to handle your request or to demonstrate compliance.

5. Recipients / transfers

We use hosting/CDN infrastructure to deliver the Site. That provider receives the technical data described above in order to serve and protect the Site. Because CDNs operate globally, your IP address may be processed outside your country under appropriate safeguards. We do not sell your data.

6. Your rights

Under the GDPR you have, under the conditions set out in the law:

• Right of access (Art. 15 GDPR): you can ask us whether we process personal data about you and, if so, to receive a copy of that data. Because we mostly process short-lived technical data, we may need you to tell us your IP address and approximate date/time of access so we can locate the right log entry. If data has already been deleted or anonymized, we will tell you.
• Right to rectification (Art. 16 GDPR): you can ask us to correct inaccurate data.
• Right to erasure (Art. 17 GDPR): you can ask us to delete personal data, as far as we are not legally required to keep it and as far as it still exists.
• Right to restriction (Art. 18 GDPR): you can ask us to limit processing in certain cases.
• Right to object (Art. 21 GDPR): you can object to processing based on our legitimate interests (for example security logging). We will review the objection and stop the processing unless we have compelling legitimate grounds.
• Right to data portability (Art. 20 GDPR): this will usually apply only to data you actively provided to us (e.g. your email), because we do not operate user accounts.

To exercise any of these rights, contact us at: Yotalaszgerg@gmail.com. We may ask you for information (for example, the IP address you used and the time of access) to help us find your data.

You also have the right to lodge a complaint with a data protection authority. You can do this with the authority of:

• the EU/EEA country where you live, or
• the country where you work, or
• the place where you think the GDPR issue happened.

7. Changes

We may update this notice if the Site or the Software changes, or if the legal requirements change. We will post the new date at the top.