Privacy policy

1. Controller

Roman Moor, Milbertshofener Straße 54, 80807 München, Germany. Email: contact@cagestep.com

2. No cookies, no tracking

This website sets no cookies and uses no tracking technologies that would require consent. No advertising networks are embedded. The one page that loads anything from a third party is the feedback form (section 8), and it loads nothing until you open that page.

3. Hosting (Vercel)

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open the site, Vercel processes technically necessary connection data (IP address, timestamp, page requested) in order to deliver and secure the service (Art. 6 (1) (f) GDPR). Transfer to the USA takes place on the basis of the EU standard contractual clauses and the EU-US Data Privacy Framework.

4. Audience measurement (Vercel Analytics)

We use Vercel Analytics for anonymous audience measurement. The service works without cookies and without cross-device identifiers; IP addresses are not stored and visits are evaluated in aggregate only (Art. 6 (1) (f) GDPR — legitimate interest in statistical evaluation of website usage).

5. Purchase via Polar

Purchases are processed by Polar Software Inc. as merchant of record. At checkout, Polar processes the data required for the purchase (name, email address, billing and payment data) as its own controller; payment data is not passed on to us. We receive the order data needed for license management and support (name, email, license purchased). Details: polar.sh/legal/privacy.

6. The software itself

CageStep runs entirely on your machine. Your 3D models and geometry data never leave your computer and are at no point transmitted to us or to any third party. The software sends no telemetry.

7. Contact by email

If you contact us by email, we process the information you provide in order to handle your request (Art. 6 (1) (b) or (f) GDPR) and delete it once it is no longer required.

The mailbox itself is Migadu-Mail GmbH — Rohnen 587, CH-9414 Schachen, Switzerland. They take delivery of everything addressed to contact@cagestep.com, store it, and send the replies we write by hand. They act as our processor under Art. 28 GDPR; their privacy policy is also the data processing agreement. Switzerland holds an adequacy decision under Art. 45 GDPR, so no standard contractual clauses are needed for that hop and none is claimed.

The two messages our system sends on its own — your licence file after a purchase, and a trial licence if you ask for one — are delivered by Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) as our processor under Art. 28 GDPR, on the basis of their data processing addendum. A mailbox host is not built to send automated mail, which is why this is a separate provider. Only the recipient address, the subject and the message itself are involved, and these messages are processed in their Ireland (EU) region.

No campaign platform, no marketing tool and no mail-tracking service sits anywhere in this path — nothing we send you reports back when you opened it or what you clicked. We operate no newsletter and send no advertising email.

8. Free trial

If you request a trial we use the address you give us to send you a licence file, and to answer you if you reply (Art. 6 (1) (b) GDPR — steps taken at your request before entering into a contract). We do not add it to any mailing list; there is none.

So that a trial cannot simply be requested over and over, we have to remember that an address already had one. We store a one-way hash of it, never the address itself — together with the single date the trial was issued. That record can confirm whether an address we are given has already had a trial; it cannot be turned back into an address, and no list of our users can be produced from it. It is held for us by Convex, Inc. as our processor, in their Ireland (EU) region, and deleted once it is no longer needed to prevent repeat issues.

9. The feedback form

The form on our feedback page is provided by Tally (tally.so) and runs in an embedded frame. Opening that page loads the form from Tally, which means your IP address and browser reach them; no other page on this site does that. What you type into the form — and any file you choose to attach — is submitted to Tally and stored there for us to read (Art. 6 (1) (f) GDPR, our interest in receiving bug reports and product feedback).

If you arrive from the CageStep add-on, the link carries six technical fields and nothing else: add-on version, Blender version, operating system, license status, engine status and how the last run ended. They travel with the report so you are not asked to look them up. Your models and geometry are never among them — nothing is attached unless you attach it yourself. If you would rather not use the form at all, email reaches the same person; see section 7.

10. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on Art. 6 (1) (f) GDPR. You also have the right to lodge a complaint with a data protection supervisory authority.