Privacy Policy

1. Who We Are

CutterForge is a product of WobbleSoft, a business registered in the Netherlands. WobbleSoft is the controller for the personal data described in this policy.

We have not appointed a Data Protection Officer. Privacy requests can be sent to the email address above.

2. Scope

This policy applies when you visit cutterforge.com, create an account, upload or generate designs, download STL files, buy credits, subscribe to a paid plan, contact us, or otherwise use CutterForge.

If you use CutterForge on behalf of a business customer, our Data Processing Agreement may also apply where we process personal data on that customer's behalf.

3. Data We Collect

Account and Authentication Data

• Name or display name
• Email address
• Password authentication data, stored in protected form
• Google account identifiers if you use Google sign-in
• Session identifiers, login timestamps, and account settings

Project and Design Data

• Project names, project type, design settings, and editor state
• Images, masks, SVG files, thumbnails, and generated previews you upload or create
• AI prompts, generated images, and generation metadata
• STL download records and project activity

Payment and Subscription Data

• Subscription tier, status, renewal dates, cancellation status, and credit balance
• Mollie customer, mandate, payment, and subscription identifiers
• Invoice, transaction, tax, discount, and accounting records

We do not store full card numbers or complete payment card details. Payments are handled by Mollie.

Technical, Analytics, and Security Data

• IP address, browser, device, operating system, referral URL, page URL, and timestamps
• Cookie consent choices and analytics events when you consent to analytics
• Rate-limit, fraud-prevention, error, and security logs

Communication Data

• Messages you send through contact forms, email, or support channels
• Transactional email delivery data such as delivery and bounce status

4. Purposes and Legal Bases

We process personal data only when we have a legal basis under the GDPR. The main processing activities are:

5. Uploads and AI Features

CutterForge is designed for cookie cutter and stamp design. Do not upload images, prompts, or project content that contain special categories of personal data, highly confidential information, or content you do not have the right to use.

When you use AI or image-processing features, your prompt, uploaded image, mask, and related generation settings may be sent to fal.ai and the selected AI model provider to process your request. Our current AI image features use fal.ai endpoints for Nano Banana 2 image generation and editing, a Google image model served through fal.ai. We currently disable web-search grounding for these requests.

We configure supported fal.ai requests with temporary storage controls where available, including immediate-expiration upload options for uploaded source images and no-store request headers for generated media. Even with those controls, fal.ai and model providers may process, log, store, use, or disclose request metadata and usage data as described in their own terms and privacy documentation, including for service operation, abuse prevention, analytics, support, and product or model improvement.

We may automatically reject, rate-limit, or log generation attempts to prevent abuse, enforce credits, and comply with provider safety rules. These automated controls do not make decisions that produce legal effects or similarly significant effects for you.

6. Cookies and Analytics

We use essential cookies, local storage, and similar technologies for authentication, security, and consent storage. We use analytics tools such as Google Analytics and PostHog only if you consent to analytics.

You can change or withdraw analytics consent at any time through the cookie settings button in the footer or on the Cookie Policy.

7. Sharing and Subprocessors

We share personal data only where needed to operate CutterForge, process payments, provide support, comply with law, or protect the service. Not every provider receives every category of data.

We may also disclose information if required by law, court order, payment disputes, tax authorities, regulators, or to protect the rights, safety, and security of CutterForge, users, or others.

8. International Transfers

Some providers may process data outside the European Economic Area. Where required, we rely on adequacy decisions, Standard Contractual Clauses, data processing agreements, and supplementary safeguards provided by our vendors.

9. Retention

We keep personal data only as long as needed for the purposes above, unless a longer period is required by law or needed to resolve disputes, enforce agreements, or protect the service.

• Account data: Kept while your account is active. After deletion, we delete or anonymize account data unless retention is legally required.
• Projects and uploaded files: Kept while stored in your account until you delete them or delete your account, subject to backups and legal retention.
• AI processing data: Kept in our records as needed for credits, abuse prevention, support, and debugging. Temporary files handled by AI providers follow their processing and retention controls.
• Payment and accounting data: Kept as required by tax and accounting law, typically up to 7 years in the Netherlands.
• Support messages: Kept for as long as needed to handle the request and maintain business records, normally up to 2 years unless a longer period is needed.
• Security logs: Normally kept up to 90 days, unless needed longer for investigations, abuse prevention, or legal claims.
• Analytics data: Kept according to the analytics provider settings and your consent choices.

10. Security

We use technical and organizational measures designed to protect personal data, including HTTPS/TLS in transit, provider-managed encryption at rest, authentication controls, access restrictions, session management, rate limiting, and operational logging.

No online service can be guaranteed to be completely secure. You are responsible for using a strong password, protecting your account credentials, and ensuring you have the rights to the content you upload.

11. Your Rights

Depending on your location and the legal basis for processing, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Delete personal data, subject to legal retention requirements
• Restrict or object to certain processing
• Receive your data in a portable format where applicable
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with a supervisory authority

To exercise your rights, email [email protected]. We may need to verify your identity before responding. We aim to respond within one month, unless the law allows an extension.

If you are in the Netherlands, you can contact the Autoriteit Persoonsgegevens at autoriteitpersoonsgegevens.nl.

12. Children

CutterForge is intended for users aged 16 and older. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us so we can take appropriate action.

13. Changes

We may update this policy when our service, providers, or legal obligations change. If changes are material, we will provide reasonable notice, such as by updating this page, showing an in-product notice, or emailing account holders where appropriate.

14. Contact

For privacy questions, rights requests, or complaints, contact: