Policy

Privacy Policy

Last updated: 2026-08-27

Who is responsible

pls3d.store is operated as PLS:3D, a one-person workshop in Amsterdam, the Netherlands. PLS:3D is the data controller for everything described on this page.

For any privacy question or request, email info@pls3d.store. Every message reaches me directly.

If you need the full legal identity behind PLS:3D, for a formal request or a complaint to a supervisory authority, email me and I will provide it.

What I collect and why

When you place an order

Your name, email address, phone number if you give one, shipping address, and any delivery note you write. I need this to take payment, ship the device, and handle returns or warranty. The legal basis is performance of a contract, and a legal obligation for the tax records.

I never see or store your card details. Payment happens entirely on Stripe. My database only holds Stripe's reference IDs for the transaction.

When you join the batch 2 waitlist

Your email address, and optionally your country, device count, and any requirements you write. Used only to email you when batch 2 is ready. The legal basis is your consent, given with the checkbox on the form. I record when you gave it. You can withdraw at any time by emailing me.

When you click “I'm interested” on a project

A one-way salted hash of your IP address, so the counter cannot be inflated by one person clicking repeatedly. Your actual IP address is not stored and the hash cannot be reversed back to it. The legal basis is legitimate interest in a count that reflects real demand.

Every page you open

My own server counts the page, the site that linked you here if there was one, and a one-way salted hash that stands in for “a visitor”. That hash changes at midnight, so it cannot follow you from one day to the next, and your IP address is never written down. No cookie is involved and nothing leaves my server. Your country is looked up from the IP address on my own machine, using an offline database, and only the two-letter code is kept. I need this because consent-based analytics only shows a fraction of visitors, which is useless for knowing whether the shop works. The legal basis is legitimate interest.

When you accept analytics

If you press Accept on the banner, Google Analytics records which pages you visit, roughly where you are, and what device you use. Nothing from Google is loaded and no analytics cookie is set unless you accept. The legal basis is your consent, and you can change your mind by clearing this site's data in your browser.

How long it is kept

  • Order and invoice records: 7 years. Dutch tax law requires this, so these cannot be deleted on request until the period ends.
  • Waitlist entries: until you withdraw, or 24 months after batch 2 ships, whichever comes first.
  • Project interest hashes: 12 months.
  • Server-side page counts: 12 months.
  • Google Analytics data: 14 months, set in Google's console.

Who else handles your data

I use a small number of service providers. They process data on my instructions only, and I do not sell your data to anyone.

  • Stripe - payment processing
  • Brevo - sending order and shipping emails
  • Neon - database hosting
  • Hetzner - server hosting, Germany
  • Google - analytics, only if you accepted

Stripe and Google may process data in the United States. Both are certified under the EU-US Data Privacy Framework, which the European Commission recognises as providing adequate protection.

Cookies and local storage

  • pls3d.analytics-consent - remembers your answer to the banner so it is not shown again. Stored in your browser, never sent to a server.
  • order_access_… - set for 30 minutes after you confirm your email on an order page, so you can keep viewing that order. Strictly necessary, no consent needed.
  • _ga and _ga_… - Google Analytics, up to 2 years. Only set if you accepted.

The video on the home page is embedded from YouTube in privacy-enhanced mode. YouTube does not set advertising cookies unless you press play, but loading the page does contact Google's servers.

Your rights

Under the GDPR you can ask me to show you the data I hold about you, correct it, delete it, hand it over in a portable format, restrict what I do with it, or object to it being used. Where I rely on consent, you can withdraw it at any time without affecting what happened before.

Email info@pls3d.store and I will respond within one month. There is no charge.

If you are not happy with how I handle it, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Changes

If this policy changes, the date at the top is updated. Material changes affecting existing orders or waitlist entries will be emailed.