Privacy Policy

Version 2026-10 — last updated: October 2026

This Privacy Policy explains how Comunidad 3D processes the personal data of people who use comunidad3d.com from the United Kingdom, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025, and the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Controller

The controller of your personal data is Comunidad 3D, based in Montevideo, Uruguay. Comunidad 3D is also subject to Uruguay's data protection law (Law 18.331).

• Contact (including data protection matters): [email protected]
• Address: Montevideo, Uruguay

2. What data we process

We only process the data we need for the purposes in section 3. We do not ask for identity documents and we do not process special categories of data (Art. 9 UK GDPR).

• Registration and account data: first and last name, username, email, phone number (optional), country, language, password (stored only as a cryptographic hash, never in readable form) and the date and version of your acceptance of these documents.
• Profile data (optional): photo, bio, location and printer model, if you choose to provide them.
• Calculator data:saved calculations, materials, printers, electricity rates, templates and other parameters you enter. If you include information about third parties (for example, a client's name), you are responsible for having a legal basis to do so.
• Content you post: forum messages, designs, comments and other content, which may be visible to others alongside your username.
• Access and security logs: IP address, date and time of access, browser (user agent) and technical logs generated by our servers and by Cloudflare. We use the country inferred from your IP address to show you the right version of the site.
• Usage and analytics data: pages visited, how you arrived and interactions, collected by Google Analytics only if you accept analytics cookies. We also keep internal visit statistics without cookies: we do not store your IP address; we use a daily identifier generated with an irreversible hash that only serves to count unique visitors in aggregate.
• Communications: emails we send you (account verification, password reset, notices) and messages you send us.

We collect this information directly from you, automatically from your device when you use the site, and from our service providers (Cloudflare and, with your consent, Google Analytics).

3. Purposes and legal bases

Each processing activity has a specific purpose and a legal basis:

We do not sell personal data, do not use it for advertising and do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

4. Who we share data with

We share personal data only with providers that process it on our behalf and under our instructions (processors), to the extent necessary:

• Hosting and storage: the application, database and uploaded files run on servers managed by Comunidad 3D.
• Cloudflare, Inc. (United States): content delivery network, DNS and attack protection. All traffic to the site passes through Cloudflare, which processes your IP address and technical request data.
• Google LLC (United States): Google Analytics 4, only with your consent, and the email delivery service (Google Workspace), which processes your email address and the content of service messages.
• Public authorities: when required by law, a court order or a request from a competent authority.

Content you post in public areas (forum, designs, public profile) is visible to other users and visitors.

5. International transfers

Because Comunidad 3D is a Uruguayan company and uses the providers above, your data is processed outside your country, mainly in Uruguay and the United States.

• Uruguay: the UK recognises Uruguay as providing an adequate level of protection (UK adequacy regulations carried over from EU Decision 2012/484/EU).
• United States:Google LLC and Cloudflare, Inc. participate in the UK Extension to the EU-U.S. Data Privacy Framework (the “UK-US data bridge”, in force since 12 October 2023) and also offer the International Data Transfer Addendum to the EU Standard Contractual Clauses.

6. How long we keep data

• Account, profile and calculation data: while your account is active. When you delete it, personal data is erased or anonymised; public content (for example, forum messages) may remain anonymously, with no link to you.
• Access and security logs: up to 6 months, unless they must be kept longer at the request of an authority or to deal with an incident.
• Aggregated internal statistics: up to 90 days, without identifying you.
• Google Analytics: according to the Google Analytics retention setting, at most 14 months.
• Backups: kept for a limited period and replaced in regular cycles; deleted data disappears from them when the cycle completes.
• Data needed to meet legal obligations or to defend legal claims: for the periods set by law.

7. Your rights

Under Articles 15 to 22 of the UK GDPR, you have the right to:

• Access: find out whether we process your data and obtain a copy.
• Rectification: correct inaccurate or incomplete data.
• Erasure: ask us to delete your data when, among other reasons, it is no longer needed.
• Restriction of processing in the cases provided for by the UK GDPR.
• Data portability: receive the data you gave us in a structured, commonly used format.
• Object to processing based on legitimate interests.
• Withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.

We respond within one month of receiving your request, extendable by two further months where necessary given the complexity or number of requests, in which case we will tell you within the first month (Art. 12(3) UK GDPR). Exercising your rights is free of charge.

How to exercise them

• From your account: in Settings → Privacy you can download a copy of your data and delete your account. Registration and profile details can be corrected at any time in Settings.
• Cookies: you can give or withdraw consent in Cookie preferences.
• By email: [email protected], for any other request. We may ask for information to confirm your identity before acting on it, to protect your data.

8. Complaints and the ICO

You can complain to us about how we use your personal data by writing to [email protected]. We will acknowledge your complaint within 30 days, look into it without undue delay and tell you the outcome.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority: ico.org.uk/make-a-complaint, helpline 0303 123 1113. The ICO usually expects you to raise the complaint with us first.

9. Security

We apply technical and organisational measures to protect personal data against unauthorised access and against accidental or unlawful destruction, loss, alteration or disclosure, including:

• encryption in transit (HTTPS/TLS);
• passwords stored using hashing algorithms;
• role-based access control, limited to authorised staff;
• rate limiting and attack protection;
• regular backups and system monitoring.

If a security incident affects your data, we will notify you where required and report it to the ICO within 72 hours when the UK GDPR requires it (Arts. 33 and 34).

10. Cookies

Cookies are small files stored by your browser. We use:

• Essential cookies (always on): session and authentication, CSRF protection, your chosen country and language (NEXT_LOCALE) and a record of your cookie choice (cookie_consent, for 12 months). They are needed for the site to work and cannot be switched off.
• Analytics cookies (optional): Google Analytics (_ga, _ga_*, lasting up to 2 years), to measure use of the site. They are only set after you click “Accept”; until then, the Google Analytics script is not even downloaded.

We also use the browser's session storage (sessionStorage) only to avoid counting the source of your visit twice in internal statistics; it is cleared when you close the browser.

Managing cookies: in the banner shown on your first visit you can accept, reject non-essential cookies or configure your choice. To change it later, use Cookie preferences (also in the footer). When you withdraw consent, analytics cookies are deleted. You can also block or delete cookies in your browser settings, but blocking essential cookies may prevent you from signing in.

11. Children

Comunidad 3D is intended for people aged 18 or over. We do not knowingly collect data from minors. If we find an account belonging to a minor, we will delete it along with its data. If you know of such a case, please let us know.

12. Changes to this Policy

We may update this Policy to reflect changes in the service or the law. The current version will always be on this page; we will notify registered users of material changes by email and, where a change requires new consent, we will ask for it first.

See also the Terms and Conditions.