Privacy Policy

Version 2026-10 — last updated: October 2026

This Privacy Policy explains how Comunidad 3D processes the personal data of people who use comunidad3d.com from any country. As a common standard we apply the EU General Data Protection Regulation 2016/679 (GDPR), one of the most demanding privacy laws in the world, and we also respect any additional rights granted to you by the law of your country.

1. Controller

The controller of your personal data is Comunidad 3D, based in Montevideo, Uruguay. Comunidad 3D is also subject to Uruguay's data protection law (Law 18.331).

Contact (including data protection matters): [email protected]
Address: Montevideo, Uruguay

2. What data we process

We only process the data we need for the purposes in section 3. We do not ask for identity documents and we do not process special categories of data (Art. 9 GDPR).

Registration and account data: first and last name, username, email, phone number (optional), country, language, password (stored only as a cryptographic hash, never in readable form) and the date and version of your acceptance of these documents.
Profile data (optional): photo, bio, location and printer model, if you choose to provide them.
Calculator data:saved calculations, materials, printers, electricity rates, templates and other parameters you enter. If you include information about third parties (for example, a client's name), you are responsible for having a legal basis to do so.
Content you post: forum messages, designs, comments and other content, which may be visible to others alongside your username.
Access and security logs: IP address, date and time of access, browser (user agent) and technical logs generated by our servers and by Cloudflare. We use the country inferred from your IP address to show you the right version of the site.
Usage and analytics data: pages visited, how you arrived and interactions, collected by Google Analytics only if you accept analytics cookies. We also keep internal visit statistics without cookies: we do not store your IP address; we use a daily identifier generated with an irreversible hash that only serves to count unique visitors in aggregate.
Communications: emails we send you (account verification, password reset, notices) and messages you send us.

We collect this information directly from you, automatically from your device when you use the site, and from our service providers (Cloudflare and, with your consent, Google Analytics).

3. Purposes and legal bases

Each processing activity has a specific purpose and a legal basis:

Purpose	Legal basis
Creating and maintaining your account, authenticating you and providing the platform's services (calculator, saved calculations, forum, profile)	Performance of a contract (Art. 6(1)(b) GDPR)
Service emails (email verification, password reset, account notices and notices of changes to these documents)	Performance of a contract (Art. 6(1)(b) GDPR)
Optional notifications and news	Consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in Settings
Google Analytics and analytics cookies	Consent (Art. 6(1)(a) GDPR), given in the cookie banner and revocable at any time
Aggregated, cookieless internal statistics to improve the site	Legitimate interests (Art. 6(1)(f) GDPR)
Platform security and prevention of fraud, abuse and unauthorised access (rate limiting, attack protection)	Legitimate interests (Art. 6(1)(f) GDPR)
Keeping a record of your acceptance of the Terms and this Policy; responding to authorities and defending legal claims	Legal obligation and legitimate interests (Art. 6(1)(c) and (f) GDPR)

We do not sell personal data, do not use it for advertising and do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

4. Who we share data with

We share personal data only with providers that process it on our behalf and under our instructions (processors), to the extent necessary:

Hosting and storage: the application, database and uploaded files run on servers managed by Comunidad 3D.
Cloudflare, Inc. (United States): content delivery network, DNS and attack protection. All traffic to the site passes through Cloudflare, which processes your IP address and technical request data.
Google LLC (United States): Google Analytics 4, only with your consent, and the email delivery service (Google Workspace), which processes your email address and the content of service messages.
Public authorities: when required by law, a court order or a request from a competent authority.

Content you post in public areas (forum, designs, public profile) is visible to other users and visitors.

5. International transfers

Because Comunidad 3D is a Uruguayan company and uses the providers above, your data is processed outside your country, mainly in Uruguay and the United States.

Uruguay: the European Commission recognises that Uruguay provides an adequate level of protection (Decision 2012/484/EU).
United States: Google LLC and Cloudflare, Inc. are certified under the EU-U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023) and also offer Standard Contractual Clauses approved by the Commission (Art. 46(2)(c) GDPR).

6. How long we keep data

Account, profile and calculation data: while your account is active. When you delete it, personal data is erased or anonymised; public content (for example, forum messages) may remain anonymously, with no link to you.
Access and security logs: up to 6 months, unless they must be kept longer at the request of an authority or to deal with an incident.
Aggregated internal statistics: up to 90 days, without identifying you.
Google Analytics: according to the Google Analytics retention setting, at most 14 months.
Backups: kept for a limited period and replaced in regular cycles; deleted data disappears from them when the cycle completes.
Data needed to meet legal obligations or to defend legal claims: for the periods set by law.

7. Your rights

Under Articles 15 to 22 of the GDPR, you have the right to:

Access: find out whether we process your data and obtain a copy.
Rectification: correct inaccurate or incomplete data.
Erasure: ask us to delete your data when, among other reasons, it is no longer needed.
Restriction of processing in the cases provided for by the GDPR.
Data portability: receive the data you gave us in a structured, commonly used format.
Object to processing based on legitimate interests.
Withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.

We respond within one month of receiving your request, extendable by two further months where necessary given the complexity or number of requests, in which case we will tell you within the first month (Art. 12(3) GDPR). Exercising your rights is free of charge.

How to exercise them

From your account: in Settings → Privacy you can download a copy of your data and delete your account. Registration and profile details can be corrected at any time in Settings.
Cookies: you can give or withdraw consent in .
By email: [email protected], for any other request. We may ask for information to confirm your identity before acting on it, to protect your data.

8. Supervisory authority

If you believe we have not handled your rights properly, you can lodge a complaint with the data protection authority of your country of residence or, if you live in the European Economic Area, with the supervisory authority of your Member State (Art. 77 GDPR). As a Uruguayan company, Comunidad 3D is supervised by Uruguay's Personal Data Regulatory and Control Unit (URCDP). We recommend that you write to us first: we want to resolve it.

9. Security

We apply technical and organisational measures to protect personal data against unauthorised access and against accidental or unlawful destruction, loss, alteration or disclosure, including:

encryption in transit (HTTPS/TLS);
passwords stored using hashing algorithms;
role-based access control, limited to authorised staff;
rate limiting and attack protection;
regular backups and system monitoring.

If a security incident affects your data, we will notify you and the competent supervisory authority within the GDPR deadlines (Arts. 33 and 34).

10. Cookies

Cookies are small files stored by your browser. We use:

Essential cookies (always on): session and authentication, CSRF protection, your chosen country and language (NEXT_LOCALE) and a record of your cookie choice (cookie_consent, for 12 months). They are needed for the site to work and cannot be switched off.
Analytics cookies (optional): Google Analytics (_ga, _ga_*, lasting up to 2 years), to measure use of the site. They are only set after you click “Accept”; until then, the Google Analytics script is not even downloaded.

We also use the browser's session storage (sessionStorage) only to avoid counting the source of your visit twice in internal statistics; it is cleared when you close the browser.

Managing cookies: in the banner shown on your first visit you can accept, reject non-essential cookies or configure your choice. To change it later, use (also in the footer). When you withdraw consent, analytics cookies are deleted. You can also block or delete cookies in your browser settings, but blocking essential cookies may prevent you from signing in.

11. Children

Comunidad 3D is intended for people aged 18 or over. We do not knowingly collect data from minors. If we find an account belonging to a minor, we will delete it along with its data. If you know of such a case, please let us know.

12. Changes to this Policy

We may update this Policy to reflect changes in the service or the law. The current version will always be on this page; we will notify registered users of material changes by email and, where a change requires new consent, we will ask for it first.