Privacy notice
Who is responsible
AnyToBricks is an app by lowCAD. The controller’s verified legal identity, business address and privacy contact must be completed in the imprint. This notice describes the app’s current implementation, not every configuration of its hosting infrastructure.
Models and conversion
The converter reads selected model files and processes their geometry in your browser. The current conversion flow does not upload model contents to our server. When download access is checked, the app sends your account identifier, the model filename and brick count; an authorized download is recorded with its source and time. Avoid personal or sensitive information in filenames.
Account and payment information
Accounts store an email address, username, optional profile details, authentication credentials, plan, subscription status and download balances in a PocketBase database. Passwords are submitted for authentication and handled by PocketBase. Billing records include payment-provider references and, for legacy credit purchases, amounts and credit quantities.
Monthly subscriptions use Stripe-hosted checkout. We send your account reference, email and selected plan to Stripe and receive payment and subscription status. Card details are entered with Stripe, not in our app. Legacy PayPal credit purchases may also have associated records. Provider notices: Stripe privacy and PayPal privacy. The exact contracting entities and international transfer arrangements need deployment verification.
Storage on your device
The app uses localStorage entries named token and current_user to keep you signed in. Saved custom brick definitions are also stored locally. Signing out removes the authentication entries; clearing this site’s browser storage also removes locally saved custom parts. The reviewed app code does not include advertising or analytics tracking. Hosting and payment-provider cookies must be assessed separately.
Purposes and legal bases
Where the GDPR applies, account, requested conversion and billing processing is intended to support the contract or steps requested before a contract (Article 6(1)(b)). Security and abuse prevention may rely on legitimate interests (Article 6(1)(f)); mandatory accounting records may rely on legal obligations (Article 6(1)(c)). The operator must confirm the applicable obligations and legitimate interests. Acknowledging this notice is not consent to unrelated processing.
Hosting, recipients and retention
The server and network providers may process IP addresses, request details, timestamps and error logs. Provider names, server locations, backup locations, access controls, transfer safeguards and log retention periods remain to be confirmed. Database software alone does not identify the hosting provider.
The reviewed app has no automatic account or download-history deletion schedule. Exact retention periods and a working deletion process must be established before this notice is finalized. Local model data is held for the browser session; downloaded files remain on your device until you delete them.
Your rights
Where applicable, you may request access, correction, erasure, restriction or portability, object to processing based on legitimate interests, withdraw consent for consent-based processing, and complain to a supervisory authority. These rights can be subject to statutory exceptions. The operator must publish a working privacy contact and identify the competent authority. The current app has no self-service account deletion feature.