SNOWFLAKE3D

Privacy & cookies

How the workshop handles your designs, privacy enquiries and optional analytics.

For questions about Snowflake3D’s handling of your information or to make a privacy request, use our privacy-enquiry form. Our receiving inbox address is kept private.

Last updated: 4 November 2026.

Creating and sharing designs

Snowflakes and download files are generated in your browser. You do not need an account. We do not operate a server-side design library or a website database of generated designs. The gallery is held in the page’s memory; downloads are saved to your device.

Design links contain encoded settings, including any entered text and seed. Encoding is not encryption. Anyone with the link can read and recreate the design. Opening or reloading it sends that URL to Cloudflare as part of the page request. Your browser may keep or sync the URL in its history.

3MF files include design settings; ZIP manifests include settings and design links. Share these only when you are happy for recipients to see their contents. Avoid using sensitive or confidential information in a design.

Hosting and security

Cloudflare hosts and protects the site over HTTPS. It processes technical information needed to deliver requests and prevent abuse, such as IP addresses, requested URLs, browser information and timestamps. Requested URLs can include the encoded design settings described above. Hosting and security providers may retain technical records; this service does not promise that no data is stored.

Privacy enquiries

Use the privacy-enquiry form to ask about your information or make a rights request. Your email address and message are sent through Cloudflare Email Service to a private receiving inbox. The receiving address is not published or sent to your browser. The website does not keep a submission database or explicitly write message contents to application logs. Email providers still process and retain correspondence.

Cloudflare Turnstile checks browser and connection signals to limit automated submissions. Cloudflare also describes its own use of those signals in its Turnstile Privacy Addendum. Only send information needed for your enquiry; do not send passwords or sensitive documents. There is no automatic acknowledgement email.

Optional Google Analytics

Analytics stays off until you accept it. Rejecting analytics leaves generation and downloads usable. With your permission, Google Analytics measures visits and actions such as generating designs, downloading files and copying design links. Scroll-depth measurement may record reaching the bottom of the workshop page. Google processes pseudonymous identifiers, browser/device information and approximate location.

Our analytics events exclude entered words, enquiry details, seeds, design recipes, generated filenames and copied URLs. We supply a fixed workshop address without a query string or fragment and an empty page referrer. Advertising personalisation and Google signals are disabled in our tag configuration. Privacy, help, usage, independence, enquiry and analytics-information pages do not load the Google tag.

Use Cookie settings below or in the workshop footer to accept, reject or withdraw consent. Withdrawing stops future collection, removes accessible analytics cookies and reloads tracked pages without the tag. It does not erase information already sent to Google. See Analytics & cookie details and Google’s information about partner sites.

What is stored and for how long

• The necessary sf3d_privacy_v1 cookie remembers your analytics choice and its expiry for 180 days.
• If you accept analytics, first-party cookies whose names start with sf3d_ga have a configured lifetime of up to 180 days without renewal. This browser-cookie lifetime is separate from Google’s server-side retention. Google retains analytics information according to the property’s data-retention settings and its applicable service policies; aggregate reports can have a different retention period.
• We keep privacy-enquiry emails while handling the enquiry and delete our copies within 90 days after resolution. We may keep the minimum necessary information longer for an ongoing complaint, dispute or legal obligation, and review that need. This is an inbox-handling policy, rather than automatic deletion by the website.
• Providers may retain separate delivery, security or backup records. Retention depends on the service, record type and applicable legal requirements. Your device controls downloaded files, browser history and copies of shared links.

Why information is used

We use necessary technical information to deliver and protect the website, prevent form abuse and answer enquiries. Where applicable data-protection law requires a lawful basis, optional analytics relies on consent; essential delivery, security and general enquiries rely on legitimate interests in running a reliable service and responding to visitors. Handling a statutory rights request may also be required by law.

Providers and international processing

Cloudflare provides hosting, security checks and enquiry-email delivery. Google provides optional analytics. Our receiving email provider handles enquiry correspondence. Providers may process information outside your country. Processing locations and applicable protections depend on the provider and service. You can use our privacy-enquiry form to request information about the arrangements relevant to your enquiry. Read Cloudflare’s Privacy Policy and Google’s Privacy Policy for their processing information.

Your choices and rights

Depending on applicable law and circumstances, you may have rights to access, correct, delete, restrict or receive a copy of your information. You may object to processing based on legitimate interests. You can withdraw analytics consent at any time. We do not use this service to make automated decisions with legal or similarly significant effects about you.

Send requests through the privacy-enquiry form. We may ask only for information reasonably needed to understand the request or verify identity. You may also complain to your relevant data-protection authority. Where UK rules apply, this includes the Information Commissioner’s Office.