Privacy

Privacy policy

This page provides an English information version of the privacy policy for 3D Letter Studio. If you need the authoritative German wording, please refer to the German version.

The English version is provided for convenience. In case of interpretation issues, the German version should be used as the reference text.

Controller

Medienwerk 15 GmbH
Friedrich-Vorwerk-Straße 13-15
21255 Tostedt
Germany
Phone: +49 (0) 4182 - 80 77 8-90
Email: support@3d-letter-studio.de

Your rights

Website data collection

When this website is accessed, server log files may collect technical information such as browser type, operating system, referrer URL, anonymised IP address and time of request. This data is used to ensure secure and stable website operation.

Cookies and optional third-party content

This website uses technically necessary functions and, on the download pages after consent, optional marketing and third-party content.

The TikTok Pixel may be loaded on our public pages, in particular the home page and the demo and download pages, after your consent. JotForm forms on the home page are loaded only after explicit activation. An optional JotForm AI assistant on public pages is loaded only after your consent via the consent banner.

Contact by email

If you contact us by email, the data you provide will be stored and processed solely for handling your request and any related contractual communication.

External services

This website does not currently use Google Analytics or external Google Fonts. Fonts are served locally or taken from locally available system fonts. Optional third-party services on public pages are loaded only after consent where required.

JotForm forms are loaded only after explicit activation. When loaded, personal data such as your IP address and the information you enter may be transmitted to JotForm.

Dedicated checkout pages contain an embedded Stripe pricing table so that you can choose a plan and billing interval and start the order process. When you access or use these checkout pages, personal data such as your IP address, technical connection data and the order or payment details entered in the checkout may be transmitted to Stripe for pre-contractual steps and contract processing.

Selected public pages may also offer an optional AI assistant from JotForm. When activated after your consent, personal data such as your IP address, technical connection data and the contents of your interaction with the assistant may be transmitted to JotForm.

We use the TikTok Pixel on our public pages, in particular the home page and the demo and download pages. For users in the European Economic Area, Switzerland and the United Kingdom the provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, D02 T380, Ireland.

Purpose: measuring reach and the performance of our advertising campaigns. The pixel records which ad brought you to us (including a click identifier passed by TikTok in the page address), which pages you visit afterwards and whether an action defined by us takes place, such as submitting a form or a download. The data processed includes your IP address, browser and device information, the page requested and the referring page, the time of the request, that click identifier and an identifier stored on your device (cookie or comparable technology).

Legal basis: Art. 6(1)(a) GDPR (consent) and, for storing information on your device and accessing information already stored there, Section 25(1) TDDDG. The pixel is loaded only after you actively agree via our consent banner; without your consent no data is transmitted to TikTok. Data may also be processed outside the European Economic Area. The provider relies on the European Commission's standard contractual clauses for such transfers; a level of protection equivalent to European law cannot be guaranteed in every case, and access by public authorities cannot be ruled out.

Withdrawal: you may withdraw your consent at any time with effect for the future: withdraw consent and change your choice. The consent banner will open again so that you can decide anew. The lawfulness of processing carried out before withdrawal remains unaffected. Further information is available in TikTok's privacy policy.

We also use the Meta Pixel on our public pages, in particular the home page and the demo and download pages. For users in the European Economic Area and the United Kingdom the provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

Purpose: measuring reach and the performance of our advertising campaigns on Facebook and Instagram. The pixel records which ad brought you to us (including a click identifier passed by Meta in the page address), which pages you visit afterwards and whether an action defined by us takes place, such as submitting a form or a download. The data processed includes your IP address, browser and device information, the page requested and the referring page, the time of the request, that click identifier and an identifier stored on your device (cookie or comparable technology). If you are also logged in to Facebook or Instagram, Meta may link the visit to your account there.

Legal basis: Art. 6(1)(a) GDPR (consent) and, for storing information on your device and accessing information already stored there, Section 25(1) TDDDG. The pixel is loaded only after you actively agree via our consent banner; without your consent no data is transmitted to Meta. For the collection and transmission of data within this service we are jointly responsible with Meta (Art. 26 GDPR); any further processing by Meta is its sole responsibility. Data may also be processed outside the European Economic Area on the basis of the European Commission's standard contractual clauses; a level of protection equivalent to European law cannot be guaranteed in every case.

Withdrawal: you may withdraw your consent at any time with effect for the future: withdraw consent and change your choice. The withdrawal covers both marketing pixels together. The lawfulness of processing carried out before withdrawal remains unaffected. Further information is available in Meta's privacy policy.

3D Letter Studio Online (account, editor and print files)

At online.3d-letter-studio.de we operate a web application for designing 3D letters and generating the matching print files. This section applies to that application only.

Use without an account: the editor can be used without signing in. Your design is calculated and cached only in your browser and is not transmitted to us. Apart from the server log files we collect no data.

Account and sign-in: saving designs and downloading print files require an account. We store your email address, the time it was confirmed, optionally a display name and a company name, your language setting and the account status. You sign in without a password via a link we send you by email. We store only a check value of this link, not the link itself; it expires after 30 minutes. Together with the request we store the IP address it came from in order to detect misuse.

Signed-in devices: for each sign-in we create a session and store a check value of the session token, a shortened device name derived from your browser's identifier, a hint of your IP address shortened to the network, and the times of sign-in and last use. We do not store the full IP address for this purpose. This lets you see in your account which devices are signed in and sign them out individually or all at once. A session ends no later than 30 days after sign-in.

Sign-in with Google (optional): you can also sign in with a Google account. You are only redirected to Google when you click the button; until then no connection to Google is established and no Google script is loaded. During the redirect Google receives your IP address and the information that a sign-in to 3D Letter Studio Online was requested. From Google we receive only your email address and whether it is verified there; we do not request your name, profile picture or contacts. If your Google account uses the same email address as an existing account with us, you sign in to that existing account; no second account is created. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. A transfer to the USA cannot be ruled out; for this Google relies on standard contractual clauses and the EU-US Data Privacy Framework. Using this sign-in method is voluntary; signing in by email is available on equal terms.

Saved designs: if you save a design as a project, we store its name and the settings you chose: lettering, model, dimensions and colours. If the design is based on your own drawing, we store the contours obtained from it as part of the design. Uploaded SVG or DXF files themselves are not kept: they are discarded after the contours have been read and are stored neither on our servers nor by a third party. The preview is calculated by your browser. Only if it cannot do this, for example on a very old device, are the settings of the design sent to our server for calculation; the result is not stored there.

Print files: when you order print files, our server generates a package for download. We store the order with its processing status and the generated package. The package is deleted 30 days after it was created and must then be generated again if needed.

Subscription and billing: the subscription is processed via Stripe (see External services). In our own database we store the identifiers of the Stripe customer and the subscription, its status, the current billing period and the number of print file packages already used in it. Payment data such as card numbers never reach us and are processed exclusively by Stripe.

Log of security-relevant events: we log sign-ins, sign-outs, ended sessions, changes to the subscription and the deletion of an account. The log contains the event, its time and a hint of the IP address shortened to the network. It serves to trace unauthorised access.

Deleting your account: you can delete your account yourself at any time; the button is in the application under Account. Deletion ends all sessions, removes your projects and any remaining print file packages and anonymises your account data. If a subscription is still running, please cancel it beforehand in the customer portal. Data we are legally obliged to retain, in particular invoices and accounting records, is not deleted; it is kept for the periods required by commercial and tax law and blocked from further use.

Legal basis: Art. 6(1)(b) GDPR for the performance of the contract of use; Art. 6(1)(f) GDPR, based on our legitimate interest in preventing misuse and in the security of the service, for the IP address of sign-in requests, the session data and the log; Art. 6(1)(a) GDPR (consent by choosing this sign-in method) together with Art. 6(1)(b) GDPR for the sign-in with Google; Art. 6(1)(c) GDPR for statutory retention obligations.

Crash reports from the 3D Letter Studio application

If the 3D Letter Studio application crashes, it sends a technical crash report to our server the next time it starts. The report is used solely to find and fix the error. It contains the technical error excerpt (your user name in file paths is removed beforehand), the version number, the operating system, the interface language as well as the hardware ID of the computer and the licence key, so that we can group reports of the same error. Our server also stores the IP address the report comes from. The report does not contain project data, templates or file contents.

You can switch off automatic sending in the application under Settings > Program > Updates with the switch "Send crash reports automatically". If you send a report yourself via the dialog of the application after a crash, we also receive the email address and the message you enter there.

The legal basis is our legitimate interest in an error-free application (Art. 6(1)(f) GDPR).

Trial period of the 3D Letter Studio application

When the trial period starts, the application registers the hardware ID of the computer with our server, so that each computer can use the trial period only once. Our server also stores the IP address the request comes from. If you extend the trial period in the application, we additionally store the email address you enter there together with the hardware ID, so that we can match questions about your trial period. We do not use the address for advertising.

The legal basis is the performance of pre-contractual measures at your request (Art. 6(1)(b) GDPR).

Data security

This website uses encrypted HTTPS connections to protect transmitted information.

Questions

If you have questions about data protection, please contact support@3d-letter-studio.de.