Privacy Notice
Who operates Scribble 3D?
Scribble3D is operated by Paul Brown trading as Scribble3D, 36 Bourtonville, MK18 1AZ. Contact: hello@scribble3d.com.
Who the service is for
For children: you can draw and play without an account. Ask your adult before sending a drawing. Use an imaginary character, not a photograph, and leave out names, school details and addresses. An adult must handle the account and any payment.
The ordering service is designed to be controlled by an adult parent, guardian or authorised adult. This build does not require child accounts and contains no public child profile, public gallery or social messaging.
Information processed
Scribble Studio saves the active drawing in this browser's local storage on this device. Unfinished artwork is not sent to the server. Starting a concept or 3D route uploads the exported PNG. Start over clears the saved Studio drawing; downloaded files remain on your device.
Prompts, concept choices, approved references, generated models, digital scenes and optional character details are stored privately. Guests use a temporary browser session. Adults can create a free account to access their creations across devices. Do not include a child's real name or other identifying information.
Adult accounts and rewards
Accounts store an adult email address, a salted password hash, a recovery-code hash, creation dates and private purchase history. Passwords and recovery codes are not stored in plain text. New concept generation requires email verification; a time-limited verification link is sent through the configured email provider. Verification confirms email access only, not age, parenthood or identity. Email password recovery is not available; keep your recovery code privately. Account sessions last seven days. There are no child accounts or public profiles.
If you choose Google, Apple or Facebook sign-in when available, that provider authenticates you. We store its account identifier and the email address it supplies to connect you to your private Scribble 3D account; Apple may supply a private relay address. We do not receive your provider password or request access to your inbox, contacts or posts. Temporary sign-in state expires after ten minutes and is removed after use or during scheduled cleanup. Provider tokens are used for authentication and are not saved. An existing email account is not automatically merged with a social account. Provider sign-in does not verify age or parenthood.
AR requests device permission only after an adult chooses it. Camera imagery is not sent to Scribble 3D by this application. Downloaded character cards are not publicly shared by the application.
Depending on the features used, this may include the uploaded drawing, generated 3D model files, adult order selections, contact and delivery information, payment-status information and technical security logs.
AI and 3D processing
Before requesting a new character preview, an adult must review the drawing and confirm it contains no identifying information. This choice is unchecked for a new or restored drawing. We record the review version and time with the private project. This records the acknowledgement only: it is not automated redaction, proof of age or parenthood, or a replacement for our data-protection responsibilities.
Use fictional character drawings only. Do not include photographs of people, real names, signatures, school details, addresses or other identifying information in the image or prompt. An adult must check the content before sending it. This guidance is not an automatic image-redaction service.
In the current shop flow, when image generation is enabled, Scribble 3D sends the drawing and adult-supplied prompt to OpenAI to create a 2D preview. This flow does not automatically switch to another image provider. After server-confirmed payment, our team downloads the selected reference and uploads it to Meshy manually to prepare your 3D model. Payment does not start an automatic Meshy job. Generation is subject to the account allowance and spending limits shown in the creation tool.
OpenAI API: OpenAI says API content is not used to train its models by default, unless the API customer opts in. Its default abuse-monitoring logs may contain prompts and responses and are normally retained for up to 30 days, with legal and safety exceptions. We do not promise Zero Data Retention. See OpenAI's API data controls. Its Services Agreement incorporates its data processing addendum, including UK transfer provisions.
Manual Meshy preparation: our team uses Meshy Pro. Meshy says it stores assets in the United States. For non-Enterprise data, its terms permit customer inputs and outputs to be used to train, validate, test or improve its services unless an applicable order says otherwise. We have not verified a no-training arrangement for Scribble3D and do not promise one. Our operating procedure requires a manual check and a private, non-identifying fictional reference with a neutral filename. We do not send customer contact, delivery, payment or personalised stand-text details to Meshy. If a reference contains identifying information, we hold it and request a clean replacement rather than upload it. See section 2.9 of Meshy's terms and its privacy policy.
Aggregate website traffic
We count successful requests for a small set of public pages to understand how the website is used. Our own server adds these directly to daily totals by public page and broad referral group, such as Google, Facebook or Direct / unknown. These are page-view counts, not unique visitors. They are not linked to accounts, drawings, orders or payments, and are not used for advertising profiles.
This counter adds no tracking scripts to public pages, analytics cookies, local storage, pixels or visitor identifiers. It does not retain IP addresses, full browser details, raw referral URLs, search terms or URL query values. The ordinary request headers are used transiently to filter known automated requests and group referrals, then discarded by the counter. Private order/recovery links and admin pages are excluded. Requests that send Do Not Track (DNT: 1) or Global Privacy Control (Sec-GPC: 1) are not counted.
The daily aggregate record is stored on our existing Render service, not sent to a third-party analytics service. It contains up to 90 UK calendar days; older aggregate days are removed automatically on the next successful save, normally every minute while the service is running and on admin refresh. This applies to active aggregate storage, not separate hosting/security logs or backup copies, whose handling is described below. No historical visitor data is reconstructed. Contact hello@scribble3d.com with any questions or objections.
Payments
When enabled, payment is handled through Stripe Checkout. The site does not need to receive raw card details.
Services involved
The services used depend on the features you choose and whether those features have been enabled:
- Render hosts the website and its private application records and files. The production service is configured in Oregon (US West), not the UK.
- OpenAI receives the uploaded drawing and generation instructions for a requested 2D preview.
- Meshy receives the selected reference and model-generation instructions for a paid 3D order.
- Stripe handles checkout and supplies payment and order-confirmation information to Scribble3D. For physical orders, you enter and confirm the recipient name and delivery address on Scribble3D before payment. We store these with your private order and send them to Stripe with the payment request. They are not sent to the image or modelling providers.
- Resend handles verification or order emails when the email connection is enabled.
- Google, Apple or Facebook supplies sign-in information only if you choose that sign-in method when it is available.
- We intend to send physical orders through Post Office. The specific carrier and service have not yet been confirmed; the recipient and necessary delivery data will be identified before fulfilment begins.
International processing and agreements
Render's data processing agreement supplements its service agreement and describes US processing and UK transfer safeguards. Our existing Resend account's Documents page confirms that its data processing agreement is effective on signup; that agreement describes primary US processing and the UK Addendum to the EU Standard Contractual Clauses. Stripe explains that its data processing agreement and transfer addendum are incorporated into its services agreement, including UK transfer provisions.
We limit the information sent to each service to its role. Render holds private application data; Resend handles transactional messages; Stripe handles payment; OpenAI receives the requested drawing and generation instructions. Manual Meshy preparation is restricted to the checked fictional reference described above, not customer personal details. Private asset settings do not prevent Meshy's permitted training or reuse. We do not promise UK-only storage, Zero Data Retention, or automatic deletion from a provider's systems when a Scribble3D file is removed. Contact hello@scribble3d.com for information or a copy of applicable transfer safeguards.
Why information is needed
Account details identify your private library and help secure access. Artwork and your selected reference are needed to generate a character. Order details are used to supply the chosen product and deal with support, payment disputes and refunds. Allowance records help prevent duplicate requests and unexpected generation costs.
You can draw and play without opening an account. An account and email verification are required for new previews. If you do not supply a drawing, the service cannot generate a character from it. Checkout, when enabled, requires payment information and physical delivery requires an address.
We use the adult's account, requested preview, order and necessary support information to take steps you request before a contract or to perform that contract. We retain necessary accounting information to meet legal obligations. We use limited security and allowance records for our legitimate interests in protecting accounts, preventing abuse and controlling generation costs. These purposes do not authorise unrelated marketing, a public gallery or Scribble3D training its own models.
We do not rely on an adult's contract as blanket permission to process a child's personal information. Please send fictional, non-identifying characters only. If identifying information is reported or noticed, we hold further manual processing, restrict access and review removal from our systems and any provider already involved. An adult checkbox does not verify parental responsibility; information already sent to a provider is not automatically recalled.
Storage and retention
When order emails are enabled, Resend processes the recipient email address, order number, amount, product choices and a private account or order-page link. Drawings, model files, delivery addresses and card details are not attached to these messages. A private notification queue stores retry information; accepted messages retain status and provider identifiers, while their queued message body is cleared. Order emails are transactional, not marketing subscriptions.
Unpurchased drawings and their generated previews are scheduled for deletion after 30 days from creation. The cleanup runs every six hours while the service is running, so removal may occur on the next cleanup run. Existing artwork receives a 30-day grace period from the first rollout of this policy. Related legacy artwork versions are removed together once all are old enough.
Purchased models, download packs and their order-related artwork are excluded from this automatic deletion and remain available without an automatic purchase-file expiry. Drawings connected to pending or unresolved orders are also held until those orders are reconciled, to avoid deleting a purchase whose payment confirmation is delayed. Active generation and records with unclear dates or purchase links are held for review rather than automatically deleted.
After an unused preview expires, we keep minimal account-linked allowance and cost records, but remove the drawing, preview images and artwork hashes. This prevents deletion from resetting free-preview limits. Automatic server cleanup does not remove drawings saved in your browser or files you have downloaded.
The cleanup also removes expired sessions and temporary sign-in records. An adult can use My Scribbles to delete a creation's private creative data. Order records are retained separately where needed for fulfilment, accounting, fraud prevention or legal obligations. Deleting a legacy creation does not delete purchased packs or accounting records.
Approved manual retention reviews
The following reviews are owner-run, not an automatic deletion timer. We record the decision, any necessary hold and its next review date. Missing dates or uncertain purchase links are investigated rather than treated as permission to delete.
- Physical-order working images and models: review 12 months after completed fulfilment and remove unneeded working copies when no unresolved order, dispute, safety matter or continuing access entitlement requires them. Keep the minimum order/reference evidence needed for an applicable obligation. Legacy purchased digital access is not cancelled by this review.
- Inactive adult accounts: review after 24 months without reliably established activity. Give 30 days' notice before closure. Open orders, disputes and continuing purchased access are protected; an account's creation date alone is not proof of inactivity.
- Minimal allowance and cost records: retain for the account's lifetime, then review for removal 90 days after confirmed closure. A documented abuse or financial hold must have a reason and review date.
- Application-controlled security-log exports: remove after 30 days unless needed for a documented incident with a review date. This is not a promise about the separate retention of hosting logs, provider records or backups.
- Accounting records: keep the necessary sole-trader records for at least five years after the relevant 31 January tax-return submission deadline, or longer where an applicable exception requires it. This does not mean retaining all artwork for that period.
- Product and safety records: keep necessary material, batch, assessment and complaint records for the applicable product and territory requirements. The final period depends on the product assessment; no universal expiry is claimed.
Removal from Scribble3D's active files does not itself erase email inbox copies, downloaded copies, provider records or backups. Requests involving those copies are handled separately and recorded, including any remaining retention requirement. Contact hello@scribble3d.com to ask about a record or request a review.
Rights and contact
For account, artwork or Facebook sign-in data deletion requests, follow our data deletion instructions. Removing access in a sign-in provider does not itself delete your Scribble 3D account or purchase records.
You can contact hello@scribble3d.com to request access to your personal information, correction of inaccurate information, deletion or restriction of processing. Where applicable, you can request a portable copy of information or withdraw consent. These rights depend on the circumstances and the legal basis for the processing; they are not all unconditional.
Your right to object
You may object to processing based on legitimate interests. Tell us which use concerns you and why by contacting hello@scribble3d.com.
Complaints
Please contact us if you have a privacy concern. You can also complain to the Information Commissioner's Office (ICO). See the ICO's information for the public for further guidance.
This notice does not certify the safety of a physical product or indicate that ordering is currently enabled.