Privacy policy

The short version

Your 3D files and photos are processed in your browser and are only uploaded if you attach them to an order. We collect the minimum needed to print and ship: your email, delivery address, and order details. We never sell data. Card payments run through Stripe — we never see your card number.

What we collect

• Order data — model settings, files you upload, delivery address (via Stripe Checkout).
• Email address — for confirmations, quotes you email yourself, and shipping notifications.
• Payment data — handled exclusively by Stripe; we only receive payment status and amount.

Where data lives

The site runs on Vercel; transactional email on Resend; payments on Stripe; order files (when attached) on Vercel Blob. All providers process data in the EU or under EU adequacy safeguards (data processing agreements on file).

Retention

Order records are kept for accounting obligations (10 years under French law, in aggregate form where possible). Uploaded 3D files are deleted 90 days after delivery unless you ask us to keep them. Photos uploaded for lithophanes are kept only as long as needed to produce and ship your order.

Your rights (GDPR)

Access, rectification, erasure, portability. Email hello@smallforge.fr and we answer within 30 days. You may also lodge a complaint with the CNIL.

This is a template document — review and complete it (legal entity, DPO, cookies) before launch.