Privacy Policy

Last updated: July 11, 2026

This Privacy Policy explains what information Burt's Studio ("we", "us", or "our") collects when you use the Service, how we use it, and the choices you have. By using the Service, you agree to this Policy.

1. Information We Collect

Account information: your email address, and a password that is securely hashed and stored by our authentication provider. We never see or store your plaintext password.
Design content: the designs you create and any 3D models or textures you choose to import, saved to your account so you can reopen them. This includes automatic version snapshots of your designs, kept so you can restore earlier states.
Shared designs: when you copy a share link, a snapshot of that design becomes viewable by anyone who has the link. You can see and revoke your links at any time (Project menu → My Share Links).
Support communications: if you email us, we receive your message and email address.
In-app feedback: if you send feedback from inside the app, we receive your message and the app version. If you later delete your account, feedback is kept but detached from you.
Diagnostic data: if error monitoring is enabled, we may collect technical details about crashes (error messages, stack traces, browser and device type) to fix problems. This is configured to avoid collecting personal information where possible.

We do not use advertising trackers, and we do not sell your personal information.

2. How We Use Information

To provide, operate, and maintain the Service;
To authenticate you and keep your account secure;
To save, sync, and reopen your designs across devices;
To respond to your support requests;
To detect, prevent, and fix errors, abuse, and security issues;
To send you necessary account emails (such as email confirmation and password resets).

3. Browser Storage

We store some data in your browser (using local storage and IndexedDB) to make the Service work — for example, keeping you signed in, remembering that you've completed the introductory tour, and caching models or textures you've imported. These are used for functionality, not advertising, and are not shared with third parties.

4. Password Breach Check

When you set or reset a password, we check it against publicly known data-breach records using the "Have I Been Pwned" service via k-anonymity: only a short, partial fingerprint (hash prefix) of your password is sent, and the comparison is completed in your browser. Your actual password never leaves your device.

5. Service Providers

We rely on the following third-party providers to run the Service. Each processes only what is needed for its function:

Provider	Purpose
Supabase	Account authentication and database hosting (stores your account and your designs).
Vercel	Web hosting and content delivery for the application.
Resend	Sending transactional emails (e.g., email confirmation, password reset).
ImprovMX	Forwarding email you send to support@burts.studio to our support inbox.
Sentry	Error and crash monitoring (when enabled), to help us fix problems.
Have I Been Pwned	Checking passwords against known breaches — no password is sent (see Section 4).

6. Data Retention

We keep your account information and designs for as long as your account is active. When you delete a design it is removed from your account, along with its version snapshots. Share-link snapshots are separate copies: they remain viewable by anyone holding the link — even after the original design is deleted — until you revoke them or delete your account. When you delete your account, your designs, version history, and share links are all removed, subject to any backups and legal obligations. You can delete your account yourself at any time (see Section 8).

7. Security

We protect your data with measures including encryption in transit (HTTPS), hashed passwords, and database access controls that restrict each account to its own data. No method of transmission or storage is completely secure, but we work to protect your information and to promptly address issues.

8. Your Rights & Choices

You can view and update your designs directly in the app, and delete designs you no longer want.
You can delete your account — including your designs, version history, and share links — yourself at any time from Account settings on the home screen.
You can also request access to, correction of, or deletion of your account and personal data by emailing support@burts.studio.
Depending on where you live (for example, under the GDPR or CCPA), you may have additional rights such as data portability or the right to object to certain processing. Contact us to exercise them.

9. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

10. International Users

We operate in the United States, and your information may be stored and processed there or in other countries where our service providers operate. By using the Service, you consent to this transfer and processing.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Your continued use of the Service after changes take effect constitutes acceptance.

12. Contact

Questions or requests about your privacy? Email us at support@burts.studio.