Privacy Policy

Last updated: March 15, 2026

1. Introduction

PrintPilot ("we," "our," or "the Service") is a browser-based 3D printer simulator available at printpilothq.com. This Privacy Policy describes what information we collect, how we use it, and your choices regarding that information.

By using PrintPilot, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

PrintPilot can be used without creating an account. In demo mode, no personally identifiable information is collected beyond standard server logs and optional error reporting described below. If you choose to create an account and subscribe to a Pro plan, the following additional information is collected through our third-party providers:

• Account information: Email address and authentication credentials (managed by Clerk). No passwords are stored by PrintPilot directly.
• Payment information: Billing details processed by Stripe. PrintPilot never receives or stores your full credit card number.
• Subscription status: Which Pro modes you have purchased, stored as metadata on your user profile.

PrintPilot does not perform behavioral analytics, telemetry, usage tracking, or device fingerprinting.

3. File Processing

When you upload G-code, 3MF, or image files to PrintPilot, all processing occurs entirely within your web browser using a Web Worker. Your files are:

• Never transmitted to any server, API, or third party.
• Held in browser memory (RAM) only for the duration of your session.
• Automatically discarded when you close or refresh the browser tab.
• Not written to disk, IndexedDB, or any persistent browser storage.

You retain full ownership of all files you upload. The Service does not access, copy, store, or share your file content.

4. Browser Local Storage

PrintPilot stores non-personal user preferences in your browser's localStorage under the following keys:

Key	Purpose
v3dp-ui-settings	UI layout preferences, panel sizes, viewport toggles, active modes
v3dp-touch-plate	Touch automation configuration (phone model selection, stylus dimensions)
v3dp-drawing	Drawing mode preferences (paper size, pen feedrates)

This data:

• Contains no personally identifiable information.
• Never leaves your device.
• Is never transmitted to any server.
• Can be deleted at any time via Settings > Delete All Data, or by clearing your browser's site data.

5. Third-Party Services

5a. Fonts

PrintPilot uses the Inter and JetBrains Mono typefaces, which are self-hosted and served directly from our domain. No third-party font requests are made. No data is shared with font providers.

5b. Vercel (Hosting Provider)

PrintPilot is hosted on Vercel's infrastructure. When you access the Service, Vercel may automatically collect standard web server logs including your IP address, browser type, operating system, referring URL, pages visited, and timestamps. This data is collected and processed by Vercel in accordance with Vercel's Privacy Policy. We do not have direct access to Vercel's server-level logs.

5c. Clerk (Authentication)

PrintPilot uses Clerk for optional user authentication and account management. If you choose to create an account or sign in, Clerk processes the following data:

• Email address (for account identification and communication).
• Password hash (if using email/password sign-in; never stored in plaintext).
• OAuth tokens (if using Google sign-in; managed by Clerk, not stored by PrintPilot).
• Session tokens and cookies (for maintaining your signed-in state).

This data is processed by Clerk in accordance with Clerk's Privacy Policy. PrintPilot does not store your password or OAuth credentials. Your subscription status (which modes you have purchased) is stored as metadata on your Clerk user profile.

Creating an account is entirely optional. You can use PrintPilot's demo mode without signing in or providing any personal information.

5d. Stripe (Payments)

PrintPilot uses Stripe to process subscription payments. If you purchase a Pro plan, Stripe processes your payment information (credit card, billing address) in accordance with Stripe's Privacy Policy. PrintPilot does not receive, store, or have access to your full credit card number. We receive only a confirmation of payment status and a Stripe customer identifier to manage your subscription.

5e. Sentry (Error Reporting)

PrintPilot uses Sentry for automated error reporting in the production environment. When an unhandled JavaScript error occurs, Sentry may automatically collect:

• Error message and stack trace (technical debugging information only).
• Browser type, version, and operating system.
• Breadcrumbs: recent browser console messages (truncated to 500 characters) and navigation events leading up to the error.
• Performance traces at a 10% sample rate (page load timing, not user behavior).

Sentry does not collect: your name, email, IP address (we use Sentry's data scrubbing), uploaded files, G-code content, simulation data, or any personally identifiable information. Error data is processed by Sentry in accordance with Sentry's Privacy Policy. Sentry maintains SOC 2 Type II compliance.

5f. Upstash Redis (Server-Side Data Storage)

PrintPilot uses Upstash Redis for server-side data storage supporting the Community Mounts, rewards, and administrative features. If you interact with these features while signed in, the following data may be stored:

• Mount submissions: Your user ID, printer type, mount title, description, Thingiverse URL, and submission timestamp.
• Votes: Your user ID associated with the mount you voted on and your vote direction (up/down).
• Rewards: If granted by an administrator, your user ID, reward modes, grant date, and expiry date.
• Activity logs: Records of administrative actions (mount approvals, reward grants) that reference user IDs.
• Rate limiting: Your IP address is temporarily stored (60-second window) to prevent API abuse. This data expires automatically and is not used for any other purpose.

This data is processed by Upstash in accordance with Upstash's Privacy Policy. Upstash servers are encrypted at rest and in transit.

If you do not create an account or interact with the Community Mounts feature, no data is stored in Upstash on your behalf.

5g. No Additional Third-Party Services

PrintPilot does not use any analytics platforms, advertising networks, social media tracking pixels, customer support widgets, or any other third-party scripts or services beyond those listed above.

6. Cookies

PrintPilot itself does not set cookies in demo mode. If you sign in with Clerk, Clerk sets session cookies to maintain your authentication state. These authentication cookies are considered "strictly necessary" for the Service to function when you are signed in. Third-party services (Vercel, Clerk) may use their own cookies or similar technologies as described in their respective privacy policies. No advertising or tracking cookies are used.

7. Data Retention

• Browser localStorage: Persists until you clear it via Settings > Delete All Data or your browser's site data controls.
• Uploaded files: Exist only in browser memory (RAM) during your active session; discarded when you close or refresh the tab.
• Account data (Clerk/Stripe): Retained until you request account deletion.
• Mount submissions and votes (Upstash): Retained for the lifetime of the Service or until you request deletion.
• Rewards (Upstash): Retained until they expire or are revoked by an administrator.
• Rate limiting data (Upstash): Automatically expires after 60 seconds.
• Error reports (Sentry): Retained per Sentry's default retention period (90 days).

You can request deletion of all server-side data associated with your account by contacting us at support@printpilothq.com.

8. Data Security

Your uploaded files and simulation data never leave your browser. Account data (if you create one) is secured by Clerk and Stripe, both of which maintain SOC 2 compliance and use encryption in transit and at rest. Server-side data in Upstash Redis is encrypted at rest and in transit. Error reports in Sentry are processed with data scrubbing enabled to remove potentially sensitive values. The security of your local data depends on the security of your own device and browser.

9. International Data Processing

PrintPilot is hosted on Vercel's global CDN, which means page requests may be served from data centers in various countries. Server-side data stored in Upstash Redis and error reports processed by Sentry may also be stored or processed in data centers outside your home country. Our third-party sub-processors (Vercel, Clerk, Stripe, Upstash, Sentry) each maintain their own data processing agreements and compliance certifications. For users in the European Economic Area, data transfers to countries outside the EEA are governed by the standard contractual clauses or other approved transfer mechanisms maintained by each sub-processor.

10. Children's Privacy

PrintPilot is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@printpilothq.com and we will promptly delete it.

11. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal data under laws such as the GDPR (EU), CCPA (California), or similar regulations. These may include the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request your data in a portable format.
• Objection: Object to certain processing of your personal data.

You can delete all locally stored preferences at any time through the Settings menu. For server-side data (account information, mount submissions, votes, rewards), contact us at support@printpilothq.com. We will respond to all legitimate requests within 30 days.

California residents (CCPA): You have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell personal information to third parties.

12. Sub-Processors

We use the following sub-processors to deliver the Service:

Provider	Purpose	Data Processed
Vercel	Hosting & CDN	Server logs (IP, browser, pages)
Clerk	Authentication	Email, password hash, session tokens
Stripe	Payments	Billing info, payment status
Upstash	Data storage	Mount submissions, votes, rewards, rate limits
Sentry	Error reporting	Error traces, browser info (no PII)

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

14. Contact

For questions or concerns about this Privacy Policy, data deletion requests, or to exercise your privacy rights, please contact us at support@printpilothq.com.