Privacy Policy & Data Protection (GDPR)

The website digital3d.com (hereinafter "the Site") respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR - EU 2016/679).

This policy describes what data we collect, why we collect it, how we use it, and what your rights are.

The data controller is David Dolinski, a natural person operating under the name Digital3D.

• Rue Célestin Cherpion 17, 1390 Grez-Doiceau, Belgium
• Company number (VAT): BE 0558.686.841
• E-mail: support@digital3d.com

You can also contact me at any time via the Contact page.

We collect the following data:

Upon registration (user account)

• Username: to identify you on the site
• Email address: for logging in, password recovery, and notifications
• Password: stored only in hashed form, never in plain text
• Registration IP address: recorded in pseudonymized form (HMAC-SHA256), to prevent abuse
• Last login date: for account management
• Newsletter preference: voluntary opt-in, with the date of consent and the pseudonymized IP address that proves it

When browsing (analytics)

• Pseudonymized IP address: transformed using hashing (SHA-256) before being recorded in our statistics. This is pseudonymization, not anonymization.
• Approximate location: country, city, and internet service provider, inferred from your IP address
• Browser User-Agent: for compatibility statistics (browser, OS)
• Pages visited: to understand how the site is used
• Referrer: the page from which you visited
• Engagement measurement (first-party): active visit duration, scroll depth, and clicks on outbound links, measured directly by our site, without any third-party service. This data is pseudonymized and used only to improve our content.

When using the site

• Blog comments: associated with your user account
• Article subscriptions: to receive email notifications when updates are made
• Newsletter: for each mailing, the email delivery status (sent, accepted, rejected)
• Contact messages: sent by email, not stored in our database

When using our software and APIs

• Usage telemetry: account used, device fingerprint, product, version, platform, usage events, and pseudonymized IP address
• Trial period and license: device fingerprint and User-Agent at the time of activation, to prevent repeated trials
• Downloads and API calls: history and counters linked to your account, to enforce quotas

When subscribing (payment)

• Payments are processed by Stripe. We do not store any bank card number.
• We retain the Stripe identifiers for your customer account and subscription, its status, payment amounts and dates, the card brand and last four digits, and a technical fingerprint provided by Stripe.
• If you complete your billing details: company name, address, VAT number, and billing email.

Paid subscriptions: fraud prevention

For subscribed accounts, we retain the IP address, date, and device type at the time of subscription, logins, and termination, in order to prove the subscription and usage in the event of a payment dispute with your bank. Legal basis: our legitimate interest in preventing fraud and defending our rights (Art. 6.1.f GDPR). Recipients: Stripe and, in the event of a dispute, your bank and the card network. Retention period: 24 months. You may object to this; however, we may retain it as long as it is needed to defend an ongoing dispute.

Your data is used exclusively to:

• Provide our services: account management, access to software, APIs
• Secure the site: abuse prevention, limiting the number of API requests
• Improve the site: pseudonymized browsing statistics
• Notify you: updates to articles you are subscribed to (opt-in only)
• Manage payments: via Stripe for subscriptions

We never sell your data to third parties. We use no advertising on this site.

This site uses a minimal number of cookies, all functional or for internal measurement (no advertising cookies):

Your browser’s local storage also keeps your login identifier and your response to the cookie banner.

No third-party advertising or audience measurement tools (Google Analytics, Facebook Pixel, etc.) are used. Google reCAPTCHA may set its own technical cookies.

The following third-party services may receive data as part of the operation of the site:

• Stripe (stripe.com): payment processing: email, name, billing address and VAT number entered during checkout. Stripe Privacy Policy
• Google reCAPTCHA v3: anti-bot protection for registration, login, password reset and the contact form; the script is loaded on the site's pages. Google Privacy Policy
• Gravatar (gravatar.com): displaying your avatar based on your email address (MD5 hash). Automattic Privacy Policy
• ip-api.com: approximate location (country, city, internet service provider) based on your IP address, for our statistics
• Google Fonts, jsDelivr and cdnjs: your browser downloads the site's fonts and display libraries from them, which communicates your IP address to them

We do not transmit your data to any other third parties.

In accordance with the GDPR, you have the following rights:

• Right of access: you can request a copy of all the data we hold about you
• Right to rectification: you can modify your data from your My Account page
• Right to erasure: you can delete your account from My Account ("Delete my account" button). Your account is then deactivated; the complete deletion of your data is carried out upon request via the Contact page, except for data that we are legally required to retain (invoices).
• Right to object: you can unsubscribe from the newsletter and article notifications at any time
• Right to data portability: you can request your data in a structured format

To exercise your rights, contact us via the Contact page.

• User account: retained as long as the account is active. An account that has never been validated is deactivated after 45 days. A deleted account is deactivated; its data is erased upon request.
• Analytics data: IP addresses are pseudonymized by hashing before being recorded. Browsing and engagement measurement events are retained for a maximum of 24 months, then automatically deleted.
• Product telemetry: usage events from our software and APIs are pseudonymized and retained for a maximum of 24 months, then automatically deleted.
• Comments: retained as long as the article exists.
• Payment data: subscription history and invoices are retained for legal and accounting reasons (7 years, under Belgian regulations).

• Emails that the site sends you: they are retained along with their date, subject, and text, as evidence in the event of a payment dispute and for the defense of our rights (legitimate interest). Retention period: 7 years for an account that has made at least one payment, 24 months in other cases, including after the account is deleted.

We take the security of your data seriously:

• HTTPS: all communications with the site are encrypted via TLS
• Passwords: hashed, never stored in plain text (BCrypt for any password created or reset on the current site)
• Pseudonymized IPs: SHA-256 or HMAC-SHA256 with a secret key before being recorded in statistics
• Payments: processed exclusively by Stripe (PCI DSS certified)
• Restricted access: only the administrator has access to the database

Security Officer: David Dolinski, creator and administrator of Digital3D, personally ensures the security of the applications and infrastructures he operates, including access management, security maintenance, and vulnerability remediation. He can be contacted via the site's Contact page.

For any questions about your personal data or to exercise your GDPR rights, you can contact us:

• Via the Contact page on this site
• By requesting account deletion from My Account

If you believe your rights are not being respected, you can file a complaint with the Data Protection Authority in your country (in Belgium: autoriteprotectiondonnees.be).