Back to Split3MF

Data Controller

Split3MF values user privacy and treats privacy as part of the product. The data controller for Split3MF is Taejoo Um, operating as Morpii. Address: Unit 201, 2F, 9 Daecheongbuk-gil 17beon-gil, Jung-gu, Busan, Republic of Korea. For privacy requests, contact [email protected] or call +82 502-6681-7382.

File Processing

Split3MF processes the 3MF, OBJ & STL files you load to provide the features you use, such as viewing, splitting, cutting, editing and exporting models.

Account Data and Usage Counts

If you sign in, Split3MF stores your email address and sign-in data with Supabase. Passwords are stored only in hashed form. If you sign in with Google, Google shares your email address, name and profile picture with Split3MF. To allow one active sign-in per account, we store the current session ID and sign-in time. We also store daily upload and download counts for your account, with the country and time zone used to determine the day. Split3MF does not store your model file names, model labels, or model contents for these counts.

Paddle Pro

Paddle processes Pro subscription and one-time payments. We store your account ID, Paddle customer, subscription and transaction IDs, subscription status and paid periods in Supabase to manage Pro access. We do not store card details.

Paddle Privacy Policy

Emails

Split3MF sends account emails, such as sign-up confirmation and password reset, and emails about your Pro purchase. We may also send emails about Split3MF updates, and each one includes an unsubscribe link. If you unsubscribe, we keep your email address, language and the date so that we do not email you again. Emails are sent through Resend.

Bot Protection

To reduce automated abuse, Split3MF uses Cloudflare Turnstile on account forms such as sign-up and sign-in, together with email verification, rate limits and usage limits. Turnstile checks signals such as your IP address and browser and device characteristics.

Analytics

Outside China, Split3MF uses Google Analytics and PostHog to understand basic product usage, such as page visits and feature interactions. Google Analytics may process sanitized page URLs, browser and device information, IP-derived location, and cookie or consent signals. It is not loaded on authentication callback pages, advertising and personalization signals are disabled, and analytics storage defaults to denied in regions requiring consent. PostHog session replay is disabled. Analytics are used to improve the tool and are not used to inspect your model file contents.

To show how many people are using Split3MF right now, each open page sends a random ID created for that tab, and we record it with your country. Each record is deleted about 10 minutes after the tab stops sending it.

Advertising

Split3MF displays a Google AdSense banner to help fund the service. Google and its advertising partners may use cookies, IP addresses, browser information, and ad interactions to deliver and measure ads, subject to applicable consent choices. Advertising code is not loaded on authentication callback pages or in China mode. Model file contents are not sent to Google by this integration.

How Google uses information for advertising

Cookies and Browser Storage

Split3MF uses your browser's storage for your language and settings, your sign-in session and the work you save to reopen. Google Analytics, PostHog and Google advertising use their own cookies or identifiers, as described above. You can delete or block cookies and site data in your browser settings; doing so signs you out and removes saved settings and work. You can turn off personalized Google ads at myadcenter.google.com.

Service Providers and Transfers Abroad

Split3MF is operated from the Republic of Korea and uses the following providers, so your information is processed in the countries listed.

How Long We Keep Data

Account-related data is retained while your account exists and is deleted when your account is deleted, unless a longer retention period is required by law or needed to resolve abuse, security, or support issues.

After account deletion, Split3MF keeps a hashed version of the deleted account email for 48 hours to prevent immediate re-registration with the same email. This temporary block is used only for the re-registration limit.

Pro billing records that Split3MF stores are deleted with your account, while Paddle keeps its own purchase records as the seller, as required by law. Support emails are kept as long as needed to handle your request and any related dispute. Unsubscribe records are kept until you ask us to delete them. Analytics and advertising data are kept according to the retention settings of Google and PostHog.

Your Rights

You can reset your password and delete your account in Split3MF, and unsubscribe from update emails with the link in each email. To access, correct or delete your information, or to object to or restrict how it is used, email [email protected]. We may need to confirm your identity first. Additional rights that apply in your country or region are listed below.

Security

We protect your information with encrypted connections (HTTPS), hashed passwords, database access controls and administrative access limited to the operator. Payment card details are handled by Paddle and are not stored by Split3MF.

Children

Split3MF is not directed at children. If you are under 14, or under the age at which the law of your country allows you to consent to the processing of your personal information, use Split3MF only with the consent of a parent or guardian. If we learn that we have collected a child's information without the required consent, we will delete it.

Information You Provide

If you contact us by email, we may receive your email address and the information you choose to send. Do not send confidential model files unless you are comfortable sharing them.

Model Ownership

You keep ownership of the model files and intellectual property you load into Split3MF. Split3MF does not claim ownership of your uploaded, processed, or exported model files.

Changes to This Policy

When we change this policy, we update the date at the top. We announce important changes on the site or by email at least 7 days before they take effect, or at least 30 days before if they significantly affect your rights.

Information for Your Country or Region

Republic of Korea

Retention required by law

Information that Korean law requires us to keep is stored separately for the required period: records of consumer complaints and dispute handling for 3 years (Act on the Consumer Protection in Electronic Commerce). Records of Pro contracts, payments and refunds are kept by Paddle, the seller, as required by law.

Provision to third parties

We do not provide your personal information to third parties except with your consent or where the law requires it. When you buy Pro, you enter your payment information directly with Paddle, the seller, and we pass a checkout reference to Paddle so that the purchase is linked to your account.

Transfers abroad

Your personal information is transferred abroad as follows. It is sent over encrypted network connections when you use the related feature.

Cloudflare, Inc.
Contact
[email protected]
Country
United States and Cloudflare's global network
Items transferred
IP address, browser and device information, requested pages, bot check signals
Purpose
Hosting and delivering the site, security and bot protection
When
Whenever you use the site
Retention
Until our service contract ends, or a shorter period under Cloudflare's retention policy
Supabase, Inc.
Contact
[email protected]
Country
United States (Northern Virginia)
Items transferred
Email address, hashed password, name and profile picture from Google sign-in, session ID and sign-in time, daily usage counts with country and time zone, Pro billing IDs, status and paid periods, unsubscribe records
Purpose
Accounts and database
When
When you sign up, sign in or use account features
Retention
Until you delete your account (unsubscribe records: until you ask us to delete them)
Google LLC
Contact
policies.google.com/privacy
Country
United States
Items transferred
Cookie identifiers, pages visited, browser and device information, location derived from your IP address, ad interactions, and your Google account details if you sign in with Google
Purpose
Analytics, advertising and Google sign-in
When
When you use the site outside mainland China
Retention
According to Google's retention settings
PostHog, Inc.
Contact
[email protected]
Country
United States
Items transferred
Random identifier, pages visited, feature usage events, browser and device information, country derived from your IP address
Purpose
Product analytics
When
When you use the site outside mainland China
Retention
According to PostHog's retention settings
Paddle.com Market Limited
Contact
[email protected]
Country
United Kingdom and other countries where Paddle operates
Items transferred
Email address, country and payment details you enter at checkout, checkout reference
Purpose
Selling Pro as reseller, payments and refunds
When
When you buy Pro or request a refund
Retention
As long as the law requires Paddle, the seller, to keep them
Resend (Plus Five Five, Inc.)
Contact
[email protected]
Country
United States
Items transferred
Email address, language, email content
Purpose
Sending emails
When
When we send you an email
Retention
Until our service contract ends, or a shorter period under Resend's retention policy

If you do not want these transfers, do not create an account, or delete your account or ask us at [email protected]. You can block analytics and advertising cookies in your browser or in Google's ad settings. Transfers to Cloudflare and Supabase are needed to provide the site and accounts, so if you refuse them you cannot use account features such as downloads and Pro.

Destruction

When the retention period ends or the purpose has been achieved, we destroy the information without delay. Electronic files are deleted so that they cannot be restored, and paper records are shredded or incinerated.

Your rights and how to exercise them

You can ask to access, correct or delete your personal information, ask us to suspend its processing, or withdraw your consent, by email or phone. Your legal representative or a person you authorize can also make these requests for you. We respond within 10 days.

Behavioural information for ads

Google AdSense may collect behavioural information, such as visits and ad interactions, through cookies to show and measure ads. You can turn off personalized ads at myadcenter.google.com and block cookies in your browser.

Privacy officer

Taejoo Um (Representative) · [email protected] · +82 502-6681-7382

Remedies

For advice on or to report a privacy violation, you can contact the following organizations.

  • Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
  • Personal Information Infringement Report Center: 118, privacy.kisa.or.kr
  • Supreme Prosecutors' Office: 1301, www.spo.go.kr
  • Korean National Police Agency: 182, ecrm.police.go.kr

EEA, United Kingdom and Switzerland

Legal bases

We process your information to provide the service and Pro you request (performance of a contract); to keep the service secure, prevent abuse, count usage and visitors, and tell you about Split3MF updates (our legitimate interests); to use analytics and advertising cookies where consent is required (your consent); and to keep the records the law requires (legal obligation).

Your rights

You have the right to access, correct and delete your data, to restrict or object to its processing, including for direct marketing, to data portability, and to withdraw your consent at any time. You can also lodge a complaint with the data protection authority in your country. We do not make decisions based solely on automated processing that significantly affect you.

International transfers

The European Commission and the United Kingdom have recognised the Republic of Korea as providing adequate protection for personal data. For transfers to the United States and other countries, we rely on the EU-U.S. Data Privacy Framework and its UK and Swiss extensions where the provider is certified, or on standard contractual clauses.

Brazil

Legal bases

Under the LGPD, we process your data to perform our contract with you, for our legitimate interests (security, abuse prevention and usage statistics), with your consent where required, and to comply with legal obligations.

Your rights

You can request confirmation that we process your data, access, correction, anonymization, blocking or deletion, portability, and information about the entities we share data with and about the option to refuse consent, and you can withdraw your consent. You can also file a complaint with the National Data Protection Authority (ANPD).

International transfers

Your data is transferred to the Republic of Korea and to the countries of the providers listed above, with the contractual safeguards those providers offer.

Data protection officer

Encarregado: Taejoo Um · [email protected]

United States

Your privacy rights

Depending on the state you live in, you may have the right to know what personal information we collect and how we use it, to access, correct or delete it, to obtain a copy, and to opt out of targeted advertising. Email us to make a request. If we decline your request, you can appeal by replying to our response. We will not treat you differently for exercising these rights.

Sale and sharing

We do not sell your personal information for money. Google's advertising cookies may be considered sharing for targeted advertising under some state laws; you can turn off personalized ads at myadcenter.google.com or block cookies in your browser.

Children

We do not knowingly collect personal information from children under 13.

Japan

Handling under Japanese law

We use personal information for the purposes described in this policy. We entrust personal information to the providers listed above in foreign countries, mainly the United States and the United Kingdom; information about the personal information protection systems of these countries is published by the Personal Information Protection Commission of Japan. We take organizational, personnel, physical and technical security measures as described in the Security section. To request disclosure, correction, suspension of use or deletion of your retained personal data, email us.

Mainland China

Processing outside mainland China

In mainland China, Split3MF does not load Google Analytics, PostHog, Google advertising or Google sign-in. If you create an account, your personal information is processed outside mainland China, in the Republic of Korea and in the countries of the providers listed above, for the purposes described in this policy. You have the right to know about and decide on the processing, to restrict or refuse it, to access, copy, correct, delete and transfer your information, and to ask us to explain these rules. Email us to exercise these rights; deleting your account stops further processing.

Other countries

Rights under local law

You can ask to access, correct or delete your personal information, object to its use, or withdraw your consent by emailing us. You may have additional rights under the laws of your country, and you can complain to your local data protection authority.

Contact

For privacy questions, contact [email protected].