Privacy Policy

This policy explains what FotosCraft ("we," "us") collects when you use fotoscraft.com, why, and who it's shared with. FotosCraft is a commissioning marketplace connecting buyers with independent 3D-printing makers.

What we collect

• Account data — your email address and password, handled by our authentication provider (Supabase Auth). We never see or store your raw password.
• Commission data — photos or 3D model files you upload, plus any title, description, materials, or quantity you provide. Files are stored in private cloud storage and shared only with the maker whose bid you accept.
• Maker profile data — if you register as a maker: your name, specialty, materials, region, and rate. This profile is public by design, since buyers choose makers based on it.
• Bid data — bid prices, notes, and lead times are public on open commissions. This is intentional: open bidding is how pricing stays fair on FotosCraft, so don't include anything in a bid note you'd want kept private.
• Payment data — payments are processed entirely by Stripe. FotosCraft never receives or stores your card number; we only receive confirmation that a payment succeeded.
• Shipping data — for commissions that involve a physical print, Stripe collects a delivery address, recipient name, and phone number during checkout, and passes them to us so your print can be sent to you. We share these with the one maker you hired, and with nobody else — they need them to address the parcel. You'll see the same address on your dashboard, along with the carrier and tracking number once your maker posts it. Commissions that are digital only (where a modeler delivers a file rather than an object) never ask for an address.
• Analytics data — with your consent (see the banner on your first visit), we use PostHog to understand product usage: pages viewed, general device/browser info, and a small number of specific actions like submitting a commission. You can decline this and still use the full site.
• Communications — if you place or receive a bid, we send transactional emails (via Resend) so you know to check your dashboard. These aren't marketing emails.

Who we share it with

We use a small number of infrastructure providers to run FotosCraft, each of which processes data only as needed to provide their service to us: Supabase (database, authentication, file storage), Stripe (payment processing), Resend (transactional email delivery), PostHog (product analytics, consent-gated), and Cloudflare (hosting and content delivery). We do not sell your data, and we do not share it with anyone else for their own marketing purposes.

We also share some of your data with the individual maker you hire, because a commission cannot be completed otherwise: your uploaded files, and — for physical prints — your shipping address, recipient name, and phone number. This happens only after you've accepted their bid and paid, only with that one maker, and never with makers whose bids you didn't accept.

Your files and AI

We do not use your uploaded photos or 3D models to train any AI model. They exist to get your commission made — nothing else.

Cookies and local storage

FotosCraft uses your browser's local storage (not cookies) to keep you signed in and to remember your analytics consent choice. We don't use tracking cookies for advertising.

Your rights

You can request a copy of your data, ask us to correct it, or ask us to delete your account and associated data, by emailing [email protected]. We'll respond within a reasonable time.

Data retention

We keep account and commission data for as long as your account is active, so your commission history and downloads stay available to you. If you delete your account, we remove your personal data except where we're required to keep records (for example, completed payment records).

Children

FotosCraft is not directed at children, and we don't knowingly collect data from anyone under 16.

Changes to this policy

If this policy changes in a meaningful way, we'll update the date at the top of this page.

Contact

Questions about this policy: [email protected].