Privacy policy
Last updated: 10/8/2026
1. Data controller
The data controller is the owner of hotend. See Legal notice for full details. Contact: hello@hotend.es.
2. Data we process
2.1 General browsing
We do NOT collect personally identifiable data during general browsing. Our analytics is a first-party counter with no cookies or identifiers that neither stores nor reads anything on your device: it only keeps aggregated daily totals per page (views, reading time, scroll depth, landing page and referring site, internal page-to-page navigation, device class, browser language, hour of day, clicks on external links, and loading speed). We store no IP addresses and no individual records: nobody can tell who visited what or reconstruct anyone's browsing — not even us. Retention: these aggregated totals are kept for a maximum of 25 months. (Google advertising is separate and governed by your consent: see §3 and §6.)
2.2 Tool usage
The Site's tools (converters, comparator, mesh editor, CAD and the rest) use that same aggregated counter to know which features get used and how often: how many times extrude ran, how many files were exported in each format, how many operations failed. What you work ON is never sent: not your models, not your dimensions, not your file names. Your files are processed in your browser and never leave your device.
2.3 Problem reports
If you use a tool's "Report a problem" button, you send us whatever you tick: your description of the bug and, only while the boxes stay checked, a screenshot of what you see and the document you were working on. Technical details of your browser (version, language, window size) travel too, so the bug can be reproduced. The email is optional and used only to reply to you. Legal basis: your consent when pressing Send (GDPR art. 6.1.a); nothing is ever sent on its own or in the background. Purpose: fixing the bug, nothing else. Retention: reports are deleted automatically after 12 months; you can ask us to delete yours sooner.
2.4 Language preference
We store your language choice (ES/EN) in browser localStorage. This is NOT a cookie, never transmitted to our servers, and can be cleared from your browser settings.
2.5 Email contact
If you write to hello@hotend.es, we keep your email and message up to 12 months. Legal basis: consent (GDPR Art. 6.1.a).
2.6 Printer reviews
If you post a review on a printer page we process: your name (or alias, published with the review), your email (NEVER published) and the review text. Purposes: (a) moderating and publishing the review, and (b) only if you also tick the optional updates checkbox, sending you hotend updates. Legal basis: explicit consent (GDPR Art. 6.1.a), collected separately for each purpose and timestamped; you can withdraw it at any time by writing to hello@hotend.es or via the opt-out link in every email; on withdrawal we remove your email from the list. Retention: published reviews, for as long as they stay on the site (you can request removal at any time); rejected reviews and their data are deleted within 12 months; the updates-list email, until you unsubscribe. Data is stored in Supabase (see §3).
2.7 The hotend Android app
The app builds models on your phone: the photos you pick (through the system picker; the app never asks for access to your gallery) and the models it generates are never uploaded to any server. The app has no accounts. To learn which tools get used, it counts what you do with the same aggregated counter as the website (§2.2): daily totals such as "lithophanes shared today on Android", plus the app version and the phone's language, with no identifiers and nothing that could single you out. When you tap "Share", the file goes to the app you choose and is then subject to that app's policy. Uninstalling the app deletes any temporary files it created.
The app shows Google AdMob ads (see §3). To serve and measure them and to prevent fraud, Google's SDK may process the device's advertising ID, IP address (and the approximate location derived from it), technical device data and ad interactions. Personalised ads are shown only with your consent, which the app asks for on first launch (Google's form, IAB TCF framework) and which you can change any time from "Ad settings" on the home screen; without it, Google serves non-personalised ads. Legal basis: consent (GDPR Art. 6.1.a). The app is not directed at children under 13.
3. Recipients and processors
Your data is NOT sold or shared commercially. Processors acting on owner's behalf under GDPR-compliant DPAs:
- Supabase Inc. (database + auth)
- Cloudflare Inc. (CDN + hosting + analytics)
- Google Ireland Ltd. (Google AdSense) — advertising. Google acts as an independent controller for ad personalisation, only with your prior consent given through the consent banner (certified CMP, IAB TCF framework). Legal basis: consent (GDPR Art. 6.1.a), revocable any time via “Ad preferences” in the footer. See Google's policies.
- Google Ireland Ltd. (Google AdMob) — advertising in the Android app, under the same consent rules (see §2.7). See how Google uses advertising data.
4. International transfers
Some processors (Cloudflare, Resend) process data outside the EU under EU Standard Contractual Clauses or adherence to the EU-US Data Privacy Framework.
5. Your rights
Under GDPR you have rights to: access, rectification, erasure ("right to be forgotten"), restriction, portability, objection, withdrawal of consent.
To exercise, email hello@hotend.es. Response within 30 days max. You may also complain to the Spanish Data Protection Agency (www.aepd.es).
6. Cookies and advertising
The Site sets no first-party cookies. Google AdSense advertising may use third-party cookies only with your consent; change it any time via “Ad preferences” in the footer. See the Cookie policy for details.
7. Changes
This policy may be updated. Material changes will be notified via prominent notice on the Site.