PRIVACY

Privacy policy

This policy explains how Mesh Harbor 3D handles customer profiles, custom-print requests, quotes, payments, production status, attachments, and related service information.

Information collected

The custom request form may collect your name, email address, optional phone number, project requirements, requested timing, reference links, and files or images you deliberately attach to explain a requested 3D print.

Customer profiles and account security

If you create an optional customer profile, the site stores your display name, email address, a salted password hash, account preferences, profile-linked request identifiers, and status notifications needed to provide the account features. Passwords are not stored in plain text. Email-verification links use random, expiring tokens whose stored form is hashed.

Customer attachments

Customer attachments are stored outside the public website directory and are not intended to be directly addressable by a public URL. Owner access requires an authenticated owner session. Supported customer images are re-encoded in the browser to remove ordinary embedded image metadata before upload. Production deployments are designed to reject customer file uploads unless a configured malware scanner accepts the file. No malware scanner can guarantee that a file is harmless, so uploaded model files are treated as untrusted content and should never be executed as software.

How information is used

Submitted information is used to review the project, communicate about feasibility and pricing, prepare a quote, coordinate approved work, show request and production status to the authenticated customer, and provide service-related notifications.

Quotes, payments, and storefronts

Custom quotes, the exact terms accepted by a customer, approval timestamps, deposit status, and payment-provider reference identifiers may be stored as part of the business record. Payment-card details are entered on Stripe-hosted Checkout and are not collected or stored by this website. Purchases made through Etsy or Whatnot are handled by those platforms and are subject to their own privacy and payment practices.

Website purchases and downloads

For website catalog purchases, the site stores ordered products, prices, quantities, shipping and tax totals, payment references, inventory reservations, fulfillment status and the customer account that placed the order. Purchased STL access is checked against payment status. A private order recovery token is stored in your checkout browser; its server copy is hashed. Your cart uses browser storage and contains product selections, not payment-card details.

Private design workspace

Owner-approved AI design tasks may send the owner's model description and project notes to the configured AI provider. Project files remain private until a separate product release. Customer account records are not automatically included in these design tasks.

Production queue

Accepted print jobs may appear on the public Queue page using a generated order code, a generic public print name, status, quantity, owner-selected image, and estimated date. Customer names, email addresses, private notes, account details, and customer-uploaded attachments are not displayed publicly.

Profile privacy

A profile shows requests linked to that customer account. After an email address is verified, older guest requests submitted with the same email address may also be linked to that profile so the verified customer can track them.

Notifications

Profile-linked request and production status changes may appear as in-app notifications. Verified customers may choose to receive status emails. When an accepted print job is marked completed, the email address associated with that job may also be used to send a completion notification and coordinate pickup or shipping.

Spam and abuse protection

The request, upload, and authentication flows may use Cloudflare Turnstile, rate limiting, file validation, malware scanning, scam-pattern screening, and hosting-provider security controls to detect abuse and protect the website.

Storage, backups, and service providers

Request, account, quote, audit, and production records are stored in the private application database. Private customer attachments are kept outside the public website directory. Private backup snapshots may contain the application database and customer attachments and should be stored on access-controlled persistent storage with host or volume encryption enabled.

Data sharing

Request and profile information is not intended to be sold. It may be processed by service providers needed to operate the website and deliver its services, such as hosting, security, storage, authentication, malware-scanning, email-delivery, and payment providers. Stripe receives payment information when a customer chooses to pay a custom-order deposit through Stripe Checkout.

Contact

For privacy-related questions or deletion requests, contact Mesh Harbor 3D through the same business communication channel used for your request or order. If you have an active custom request, include its request code so the correct records can be located.