Privacy Policy

Welcome to Polyforge (https://polyforge.xyz), operated by Polyforge ("we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our browser-based 3D file conversion and optimization tools.

By accessing or using Polyforge, you agree to the terms of this Privacy Policy. If you do not agree with these practices, please do not use our services.

Polyforge was designed from the ground up with a privacy-first architecture. All 3D file processing happens entirely within your web browser. Your files are never uploaded to any server. This is not just a feature; it is a core architectural constraint that cannot be bypassed.

When you use Polyforge to convert or optimize a 3D file, the entire operation runs client-side in your web browser using WebGL and JavaScript. Here is exactly what happens:

• Your file is read from your local disk directly into your browser's memory using the File API.
• The file is parsed entirely within the browser process.
• Conversion or optimization runs entirely in JavaScript and WebGL. No modules phone home, and no server calls are made.
• The result is generated in-memory and offered for download via a Blob URL, which is a local browser resource.
• Once you navigate away or close the tab, all file data is released from memory.

At no point during this process is any file data sent to our servers, any third-party server, or transmitted over the network. This includes file names, file contents, geometry, textures, materials, metadata, and any derivative of your file.

While your 3D files remain entirely on your device, we may collect limited, non-file-related information to operate and improve the service:

a) Analytics Data

We use Plausible Analytics, a privacy-focused, cookie-free analytics service. Plausible collects:

• Page URLs visited (e.g., which converter page was used)
• Referral source (how you found Polyforge)
• Browser type and version
• Operating system
• Device type (desktop, tablet, mobile)
• Country-level location (derived from IP address, which is then discarded)

We also send anonymous, aggregate file size data (input and output byte counts) to Plausible as custom event properties when you convert or optimize a file. This data is used solely to understand typical file sizes and improve the service. It contains no file names, file contents, or personally identifiable information.

Plausible does not use cookies, does not track users across sites, does not collect personal identifiers, and does not build user profiles. All data is aggregated and no individual visitor can be identified. For details, see Plausible's data policy.

b) Server Log Data

Our hosting provider (Cloudflare) may automatically collect standard server log information when you access our website, including:

• IP address (used for security and rate limiting, then discarded per Cloudflare's retention policies)
• Date and time of the request
• Pages visited
• HTTP status codes
• Browser user-agent string

This data is handled by Cloudflare in accordance with their Privacy Policy and is not accessible to us on a per-visitor basis.

Polyforge is designed to minimize data collection. We explicitly do not collect, store, process, or have access to:

• Your 3D files, file names, or any file metadata
• The content, geometry, textures, or materials within your files
• Conversion settings or optimization parameters you choose
• Names, email addresses, or any personally identifiable information (we have no account system)
• Payment information (there is nothing to pay for)
• Precise geolocation data
• Biometric data
• Social Security numbers or government identifiers
• Contents of your communications (we have no messaging features)

Because there is no user account system, no login, and no registration, we have no way to associate any browsing activity with a specific individual.

a) First-Party Cookies

Polyforge itself does not set any first-party cookies. We use localStorage (not cookies) for a single purpose: storing your theme preference (light or dark mode). See Section 8 for details.

b) Third-Party Cookies

Polyforge may display advertisements through third-party advertising services. These services may use cookies to serve ads based on your prior visits to this and other websites. You can manage cookies at any time through your browser settings.

c) Do Not Track

Polyforge respects "Do Not Track" (DNT) browser signals. Our analytics provider (Plausible) does not track individual users regardless of DNT settings.

Polyforge integrates with or loads resources from the following third-party services. Each operates under its own privacy policy:

• Cloudflare: Hosting, CDN, and DDoS protection. Processes standard HTTP request data. Privacy Policy
• Plausible Analytics: Privacy-focused, cookie-free web analytics. Data Policy
• Google AdSense: Third-party advertising service. May use cookies for ad personalization. Privacy Policy

We do not control the data collection practices of these third parties. We encourage you to review their respective privacy policies for detailed information about how they handle your data.

Polyforge may display advertisements through third-party advertising services such as Google AdSense.

How advertising works

These advertising services may use cookies and similar technologies to serve ads based on your prior visits to Polyforge and other websites. This is commonly known as interest-based or personalized advertising.

Your choices

You can opt out of personalized advertising through the following resources:

• Google Ads Settings — manage how Google personalizes ads for you
• Digital Advertising Alliance — opt out of interest-based advertising from participating companies
• Your Online Choices (EU) — manage online behavioral advertising preferences in Europe

You may also configure your browser to block third-party cookies, which will prevent personalized advertising.

Advertising and your files

Advertising services have no access to your 3D files. As described in Section 2, all file processing happens entirely within your browser. Advertising scripts cannot read, access, or transmit your file data.

Polyforge uses your browser's localStorage API for the following purpose only:

• Theme preference: stores whether you selected light or dark mode (key: theme, value: "light" or "dark").

This data:

• Is stored entirely in your browser on your device
• Is never transmitted to any server
• Is not accessible to us, our hosting provider, or any third party
• Can be cleared at any time via your browser's settings (Clear Site Data) or developer tools
• Contains no personally identifiable information

During file conversion, your 3D file data is temporarily held in browser memory (RAM). This data is automatically released when you close the tab, navigate away, or the browser's garbage collector runs. No file data is written to localStorage, sessionStorage, IndexedDB, or any other persistent storage mechanism.

We take the security of our website seriously. Measures in place include:

• HTTPS/TLS encryption. All connections to Polyforge are encrypted in transit using TLS.
• No server-side file storage. Because files never leave your browser, there is no server-side file storage to secure, breach, or compromise.
• Cloudflare protection. Our hosting infrastructure is protected by Cloudflare's security services, including DDoS mitigation and Web Application Firewall (WAF).
• Static site architecture. Polyforge is deployed as a static site with no dynamic server-side components, databases, or user authentication systems, which minimizes the attack surface.

While we implement reasonable safeguards for the website itself, please note that no method of electronic transmission or storage is 100% secure. However, because your 3D files never leave your device, the risk to your file data from a breach of our infrastructure is zero.

Because we collect minimal data, our retention practices are simple:

• File data: not retained and never stored. Exists only in your browser's memory during active use and is released when you close the tab.
• Analytics data: Plausible Analytics retains aggregated, anonymized data indefinitely. No individual visitor data is retained because none is collected.
• Server logs: Cloudflare retains standard server logs per their data retention policies, typically for a limited period (often 72 hours or less for most log types).
• Theme preference: stored in your browser's localStorage until you clear it. We have no access to this data.

Polyforge is hosted on Cloudflare's global edge network, which means the static website assets may be served from data centers located in various countries around the world. The limited data described in Section 3 (analytics and server logs) may be processed in jurisdictions outside your country of residence.

For visitors from the European Economic Area (EEA), United Kingdom, or Switzerland: where personal data is transferred outside of these regions, our third-party service providers use appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

Your 3D file data is never transferred internationally, or at all, because it never leaves your device.

Polyforge is not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.

Because Polyforge has no account system, no registration, and collects no personal information, we have no mechanism to determine the age of our visitors. If you are a parent or guardian and believe your child has somehow provided personal data to us, please contact us at privacy@polyforge.xyz so we can investigate and take appropriate action.

If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction with applicable data protection laws, you may have the following rights regarding your personal data:

• Right of access: request a copy of personal data we hold about you.
• Right to rectification: request correction of inaccurate personal data.
• Right to erasure: request deletion of your personal data.
• Right to restrict processing: request that we limit how we use your data.
• Right to data portability: receive your personal data in a structured, machine-readable format.
• Right to object: object to our processing of your personal data.
• Right to withdraw consent: where processing is based on consent, withdraw it at any time.

In practice, because Polyforge collects no personally identifiable information and has no user accounts, we cannot identify, retrieve, modify, or delete "your" data. We simply do not have any data that is attributable to you as an individual. If you have concerns, please contact us and we will do our best to help.

You also have the right to lodge a complaint with your local data protection supervisory authority.

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information.

Categories of personal information collected

In the preceding 12 months, the only category of personal information we may have collected (through third-party analytics services) is:

• Internet or other electronic network activity information, such as browsing history on our site, browser type, and device type, as described in Section 3.

Your rights under CCPA/CPRA

• Right to know: you may request disclosure of the categories and specific pieces of personal information collected.
• Right to delete: you may request deletion of personal information collected.
• Right to opt-out of sale/sharing: you may opt out of the "sale" or "sharing" of personal information. Third-party advertising cookies, if present, may constitute "sharing" under CCPA. You can opt out using the methods described in Section 7a.
• Right to non-discrimination: we will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at privacy@polyforge.xyz. We do not sell personal information in the traditional sense. We do not have a "Do Not Sell My Personal Information" link because we do not sell personal information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes:

• The "Effective" date at the top of this page will be updated.
• For material changes that significantly affect how we handle data, we will make reasonable efforts to provide notice (such as a banner on our website).
• Continued use of Polyforge after the revised Privacy Policy becomes effective constitutes your acceptance of the updated terms.

We encourage you to review this page periodically to stay informed about our privacy practices.