Privacy policy
Last updated: 21 August 2026
1. Who we are
Fudge3d is a product of Trium Designs Private Limited ("we", "us", "our"), a company registered in India at 105 Pratham Residency, Kapurai, Waghodiya Road, Vadodara, Gujarat 390025, India, CIN U72100GJ2015PTC084009.
For any privacy question, contact us at legal@fudge3d.com.
This policy explains what personal data we collect when you use the Fudge3d website (fudge3d.com), the Fudge3d desktop application for Windows 10/11 and macOS on Apple Silicon, and your customer dashboard.
2. The short version
Fudge3d is built to run creative operations on your machine. Your images, prompts, 3D models, textures and generated output are processed on your own computer and are not uploaded for creative processing.
We keep only the account, licence, device, subscription, security and support information described below. We do not sell personal data, share it for advertising or build advertising profiles.
3. What we collect
3.1 Account information. When you use a sign-in provider offered on the sign-in page, we receive and store:
- your name (or the name you have chosen to share with the provider);
- your email address, which may be a provider-issued relay address;
- your profile picture URL, where the provider supplies one;
- a permanent identifier issued by the provider ("subject" identifier) that lets us recognise you on return visits.
We do not receive and never have access to your sign-in provider password.
On first sign-in, we also ask you to confirm your full name, optionally choose a shorter display name we use to greet you in the dashboard and desktop app, and enter your date of birth. We use your date of birth only to confirm you meet the minimum age described in section 11, and do not use it for any other purpose.
3.2 Licence and device information. To enforce the limit of three simultaneously activated devices per subscription, the desktop application sends us, at activation and periodically thereafter:
- a device fingerprint - a one-way hash derived from an operating-system identifier, salted per user account. We cannot reverse this value to a hardware serial number, and it is not linkable to you across other products;
- a device name (by default your computer's hostname, editable by you);
- the operating system and its version, and the Fudge3d version;
- the date and time of activation and of the most recent licence check.
3.3 Technical information. Our web servers record, for security and abuse prevention: IP address, browser user-agent, requested URL, response status and timestamp. Our licence servers record the same for activation and validation requests.
3.4 Optional website analytics. If you accept analytics cookies, Google Analytics collects a randomly generated client identifier, page views, approximate location derived from your IP address, browser and device information, referring page, session activity and interactions such as outbound links, site search, scrolling and file downloads. We do not send Google Analytics your name, email address, account identifier, prompts, files or generated content. Google Analytics is not loaded before you consent.
3.5 Subscription information. Payments are processed by our reseller, Paddle (see section 6). We never receive or store your card number, bank details, billing address or tax identifiers. Paddle sends us only: a customer reference, your subscription plan, its status, and the current billing period dates.
3.6 What we do not collect.
- We do not collect the images or text you use as prompts.
- We do not collect the 3D models, meshes, textures or PBR maps you open, generate, remesh or re-paint.
- We do not collect your file names, folder paths or project contents.
- The desktop application contains no analytics, telemetry or usage tracking, and does not send crash reports. If we introduce crash reporting in a future version, it will be strictly opt-in, off by default, described in this policy before it ships, and switchable off at any time in the application's preferences.
- We do not use advertising cookies or enable Google advertising signals. Optional website analytics remains off unless you consent.
- We do not knowingly collect data from children (see section 11).
4. Why we use it, and our legal basis
| Purpose | Data used | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Creating and maintaining your account | Account information | Performance of a contract |
| Issuing licences and enforcing the three-device limit | Licence and device information | Performance of a contract |
| Providing your dashboard and device management | Account, licence, device, subscription | Performance of a contract |
| Sending service emails (licence key, receipts, expiry and security notices) | Email address | Performance of a contract |
| Preventing fraud, abuse and unauthorised licence sharing | Technical, device information | Legitimate interests |
| Keeping records required by tax and company law | Subscription information | Legal obligation |
| Understanding and improving website use, if you opt in | Optional website analytics | Consent (withdrawable at any time) |
| Product news and marketing emails, if you opt in | Email address | Consent (withdrawable at any time) |
Where Indian law applies, we process personal data for these purposes on the basis of your consent and for the legitimate uses permitted by the Digital Personal Data Protection Act, 2023.
5. Offline operation and licence checks
A successful licence check caches a signed token on your computer for 30 days, allowing Pro to continue offline during that period. When an internet connection is available, Fudge3d may periodically refresh entitlement information. Licence requests contain account and device entitlement information only. Images, prompts, models, textures and generated output are not transmitted as part of generation, texturing, remeshing or repainting.
You may use the free viewer without an account and without any network connection. In that mode we collect nothing.
The 14-day free trial of the generation features requires an account and an activated device, and is subject to the same licence checks described above.
6. Who we share data with
We use a small number of processors, each bound by contract to process data only on our instructions:
| Provider | Role | Data they receive | Location |
|---|---|---|---|
| Paddle.com Market Ltd | Merchant of record - sells the subscription to you, processes payment, handles tax and invoicing | Your email, billing and payment details you enter with them, transaction records | UK / EU / US |
| Google LLC | Sign-in provider (only if you choose it) | The fact that you signed in to Fudge3d | US |
| Google LLC | Website analytics (only if you accept analytics cookies) | The optional website analytics listed in section 3.4 | US |
| BigRock | Website, dashboard and licence server hosting | Account, licence, device, subscription and server-log data described in section 3 | India |
| BigRock | Transactional email delivery | Your email address and message content | India |
Paddle is an independent controller for the payment relationship. Their privacy notice governs the data you give them: https://www.paddle.com/legal/privacy.
We may also disclose data where we are legally required to, or to establish or defend legal claims. We do not sell personal data and have never done so.
7. International transfers
We are based in India. Our processors are located in the regions listed above. Where personal data of individuals in the European Economic Area or the United Kingdom is transferred outside those areas, the transfer is made under the European Commission's Standard Contractual Clauses (and the UK Addendum, where applicable), or another lawful transfer mechanism.
8. How long we keep data
| Data | Retention |
|---|---|
| Account and identity records | While your account is open, then deleted within 30 days of account deletion |
| Device records | Until you deactivate the device, then 90 days |
| Issued licence tokens (audit records) | 180 days after expiry |
| Web and licence server logs | 90 days |
| Google Analytics user-level and event-level data | 14 months |
| Payment and subscription records | Retained by Paddle per their policy; our mirrored records are kept for 8 years to meet Indian tax and accounting requirements, even after account deletion |
| Support correspondence | 2 years from last contact |
9. Security
We protect your data with HTTPS, passwordless sign-in through supported identity providers, one-way hashes for stored session tokens, restricted database access, signing keys kept outside the web root and rate limiting on authentication and activation endpoints.
No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authority as required by law and without undue delay.
10. Your rights
You may, at any time:
- Access the data we hold about you;
- Correct your full name, display name, date of birth or email address from your dashboard, or ask us to correct anything else;
- Delete your account and personal data - there is a Delete account control in your dashboard, and it works immediately;
- Export a copy of your data in a machine-readable format;
- Object to or restrict processing based on legitimate interests;
- Withdraw consent for marketing or website analytics at any time, without affecting your subscription;
- Complain to a supervisory authority - the Data Protection Board of India, your EU or UK data protection authority, or another competent regulator.
Write to legal@fudge3d.com for any of these. We respond within 30 days. Deleting your account does not automatically cancel your subscription - cancel it through your dashboard or the Paddle billing portal first.
11. Children
Fudge3d is not intended for anyone under 18, and we do not knowingly collect their personal data. We ask for your date of birth at sign-up specifically to confirm this minimum age, and do not use it for any other purpose. If you believe a child has provided us with personal data, contact us and we will delete it.
12. Cookies
We always use strictly necessary cookies: a session cookie that keeps you signed in and a short-lived cookie used during sign-in to prevent request forgery. Paddle sets its own cookies within checkout; Paddle's policy governs those cookies.
With your consent, Google Analytics sets stream-specific cookies whose names contain _ga to distinguish visitors and sessions. These analytics cookies can remain for up to 2 years. We store your analytics choice in your browser's local storage for up to 12 months so we can respect it across visits. Select Cookie settings at the bottom of any page to accept, decline or change your choice. Declining analytics does not affect the website's functionality.
We also store a small, strictly functional flag in your browser's local storage for up to 12 hours, recording only whether you appear to be signed in, so the website's own header can show a "Dashboard" link instead of "Sign in" without checking on every page. It contains no personal data and does not affect whether you can actually reach your dashboard, which always depends on your session cookie above, never on this flag.
13. Changes to this policy
We will post any change on this page and update the date above. If a change materially affects your rights, we will email you at least 30 days before it takes effect.
14. Contact
Trium Designs Private Limited
105 Pratham Residency, Kapurai, Waghodiya Road
Vadodara, Gujarat 390025, India
legal@fudge3d.com