Privacy policy
Last updated: 6 November 2026
This policy explains what personal data Tracks3D collects at tracks3d.com, why, and what you can do about it.
Who is responsible
The data controller is Tracks3D. Contact us about privacy at our contact page.
What we collect
- Account: your email address, your name if you give it, and your password stored only as a salted hash. Whether you agreed to marketing emails.
- Google sign-in: if you choose it, Google sends us your name, email address, a confirmation that the address is verified, and a Google account identifier. We don't receive your Google password, and we don't access your contacts, Gmail, Drive or anything else in your Google account.
- Orders: delivery and billing addresses, phone number if you give it, what you ordered, your design including any title you wrote, and the order and delivery history.
- Payments: the amount, status and a reference from the payment provider. Card details go directly to the provider and never reach us.
- Saved designs and cart: the designs you save or leave in your cart, linked to your account or browser session.
- Technical data: IP address and browser details in server logs, used for security and to limit abuse.
How we use Google user data
We use the name, email address and identifier from Google only to create your account and sign you in. We don't sell this data, use it for advertising, or share it with anyone except the service providers listed below that run this site. Tracks3D's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Why we use your data
- To run your account and fulfil your orders, which is necessary for our contract with you.
- To keep records that tax and accounting law requires.
- To protect the site and prevent fraud, which is our legitimate interest.
- To send marketing emails, only if you agreed. You can withdraw that at any time in your account. Order emails are separate and always sent.
Who receives it
We don't sell personal data. We share it only as needed with: our server host; Cloudflare, which delivers and protects the site; PayPal and our bank; our email provider; the carrier delivering your order; and authorities where the law requires it. Some of these providers may process data outside your country, under the safeguards the law requires.
Cookies and browser storage
We use only what the site needs: a session cookie that keeps you signed in and holds your cart for up to 30 days, a cookie that remembers your language and shop, and a short-lived cookie that protects Google sign-in. Your unfinished design is kept in your own browser's storage. Cloudflare may also set a security cookie. We use no advertising cookies.
How long we keep it
We keep account data until you delete your account. Order records are kept for as long as tax and accounting law requires, even after an account is deleted. Old sessions and price calculations are removed automatically.
Your rights
Depending on where you live, you can ask for access to your data, correction, deletion, restriction, a portable copy, and you can object to processing. You can delete your account yourself under Account → Profile and security, or ask us at our contact page. You can also remove Tracks3D from your Google account at any time at myaccount.google.com/permissions. You have the right to complain to your data protection authority.
Security
Connections are encrypted, passwords are hashed, and access to customer data and production files is limited to authorized staff. No system is perfectly secure, and we will tell you about a breach where the law requires it.
Children
This shop isn't directed at children under 16, and we don't knowingly collect their data.
Changes
We'll update this page and the date above when this policy changes, and tell account holders about significant changes.