Privacy Policy
Last updated: June 11, 2026
1. Who we are
Proofly (“we”, “our”, “the platform”) is a 3D-model marketplace operated as a sole-trader business. Our website is proofly.store. For any privacy-related questions contact us at privacy@proofly.store.
2. Data we collect
Account data
When you register: email address, username, optional display name and avatar. This data is required to create and maintain your account.
Payment data
Payments are processed by Stripe, Inc. We never store full card numbers or CVV codes. Stripe may store billing address and card metadata per their own privacy policy. Creator payouts use Stripe Connect — your bank or card details are held exclusively by Stripe.
Usage data
We log page views, item views, and download events for analytics and platform performance (our own first-party analytics stored in our database). We do not use Google Analytics or Facebook Pixel.
Uploaded content
3D model files (STL, GLB, OBJ, 3MF, ZIP) you upload are stored on our Railway-hosted volume (/data/market_uploads). Listing images are stored with Cloudinary. You retain full ownership of your uploaded content.
Cookies
We use one session cookie (session, HttpOnly, scoped to .proofly.store) to keep you logged in. No third-party tracking cookies are set. Currency preference is stored in localStorage.
3. Legal basis for processing (GDPR)
- Contract performance — account creation, order processing, file delivery.
- Legitimate interests — platform security, abuse prevention, analytics.
- Legal obligation — tax records and Stripe compliance requirements.
- Consent — marketing emails (you may opt out at any time).
4. How we use your data
- Providing the marketplace service (accounts, purchases, downloads).
- Processing payments via Stripe.
- Sending transactional emails (purchase confirmation, sale notifications).
- Detecting fraud and abuse.
- Improving the platform through aggregated, anonymised analytics.
- HiddenMark™ — watermark codes are derived from your purchase record to trace piracy. No personal data is embedded in mesh files.
5. Data sharing
We share your data only with:
- Stripe, Inc. — payment processing (USA, Standard Contractual Clauses apply).
- Railway Technologies — hosting infrastructure (USA, SCCs apply).
- Cloudinary Ltd. — image hosting (EU region selected).
We never sell your personal data. We never place third-party advertising on the platform.
6. Data retention
- Account data: retained while your account is active + 30 days after deletion request.
- Purchase records: 5 years (legal/tax obligation).
- Session logs: 90 days rolling.
- Uploaded files: deleted within 30 days of listing removal.
7. Your rights (GDPR)
EU/EEA residents have the following rights:
- Access — request a copy of your personal data.
- Rectification — correct inaccurate data.
- Erasure — request deletion (“right to be forgotten”).
- Portability — receive your data in a machine-readable format.
- Objection — object to processing based on legitimate interests.
- Restriction — request limited processing in certain circumstances.
To exercise any right, email privacy@proofly.store. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
8. Children
Proofly is not directed to children under 16. We do not knowingly collect data from minors. If you believe a minor has registered, contact us and we will delete the account.
9. Security
Data is transmitted over HTTPS (TLS 1.2+). Session cookies are HttpOnly and SameSite. Passwords are hashed with bcrypt. We conduct regular security reviews. No method of transmission over the internet is 100% secure — we cannot guarantee absolute security.
10. Changes to this policy
We may update this policy. Material changes will be announced via email or a banner on the site. Continued use after notice constitutes acceptance.
11. Contact
For privacy requests: privacy@proofly.store
For general questions: proofly.store/contact