Privacy policy

What we collect

Browsing

You can browse, download, and use the labs without an account. Visits are counted with Vercel Web Analytics, which uses no cookies and doesn’t follow you to other sites. Along with page views it records a few actions, such as a file download or an STL export and which design it was, but nothing that identifies you.

Your account

Signing in needs an email address. If you sign in with Google, Google also shares your name and profile picture: your name becomes your display name, which you can change, and the picture’s address is stored but not shown. Your display name and bio are public, alongside your designs and reviews. Your email address is not.

What you post

Published designs are public: their details, files, photos, the files’ original names, and your reviews of other designs. Location and camera details are removed from photos when they upload. Drafts are visible only to you, and an upload abandoned halfway is deleted within a day.

Private to you

Saved holds and saved lab settings. Signed out, lab settings stay in your browser instead. Photos sent from your phone with the QR code wait in a private inbox and are deleted within a day if they aren’t added to a design.

Feedback and reports

The feedback and “Report this design” forms store your message and the page you sent it from. Signed in, your display name and email go with it; signed out, only the contact details you choose to add. Each message is also forwarded to a private Discord channel that only the person running the site reads.

Technical data

Like any website, our host sees your IP address. It is used to stop abuse, such as limiting how often one address can send feedback, and the site itself doesn’t store it. When a page breaks, the site sends itself an alert with the page’s address pattern and the error, never your details. Server logs are kept for about an hour.

Cookies and browser storage

Signing in sets the cookies that keep you signed in. Your browser also remembers your light or dark theme and, when signed out, your saved lab settings. That is all. There are no advertising or tracking cookies. The “Sign in with Google” button on the sign-in page is loaded from Google, which may set its own cookies there.

Who handles your data

We use these services to run the site, and they handle data only to provide it: Vercel (hosting and visit counts), Supabase (accounts and the database), Cloudflare R2 (files and photos), Brevo (sign-in code emails), Google (sign-in with Google and our support email), and Discord (feedback and alerts to the site’s owner). They may process data in the United States.

Some links leave the site: tips go through Ko-fi, and gear links go to Amazon. Those sites have their own privacy policies. We don’t sell or share personal data for advertising.

How long it’s kept

Your account, designs, reviews, and saved items are kept until you delete them or your account. Feedback is kept for as long as it is useful, and deleted sooner if you ask. Abandoned uploads and phone inbox photos are deleted within a day.

Seeing, changing, and deleting your data

You can change your display name and bio on your account page, delete a design and its files from its edit page, and remove saved holds and lab settings yourself.

To delete your account or a review, or to get a copy of your data, email support@garageholds.com from the address you sign in with. We’ll do it within 30 days. Deleting an account removes your profile, designs, files, photos, reviews, saved holds, and lab settings; feedback you sent stays, without your name.

If you’re in the EU or UK

We use your data to provide the account and features you ask for, and, for security, preventing abuse, fixing errors, and counting visits without cookies, because we have a legitimate interest in running the site safely. You can ask to see, correct, delete, or export your data, or object to or limit how we use it, at the address below. You can also complain to your data protection authority.

Children

Accounts are for people 13 and older. If you’re under 18, ask a parent or guardian first. If we learn that someone under 13 has an account, we’ll delete it.

Changes and contact

When this policy changes, the date at the top changes. For a change that matters, such as collecting something new, we’ll also post a notice on the site for 30 days. Questions go to support@garageholds.com. The terms of use cover the rest.