Privacy Policy

Last updated: 1 October 2026. This policy describes what this site actually does, not what a policy template usually claims — every statement here can be checked against the live pages.

The short version

• Your file is not uploaded. It is read into memory in your browser and processed there; nothing of your model ever reaches a server.
• This site’s own code sets no cookies and stores nothing in local storage or session storage.
• Visits are counted anonymously by a cookieless counter from the hosting provider. It counts page views, not people.
• This site may carry third-party advertising. Ad networks are separate parties and may use their own cookies and identifiers; their policies govern them, not this one.
• No accounts, no forms, no history. There is nothing here to sign up to, and a reload clears the page completely.

Your files stay on your machine

The converter has no upload step because it has no server to upload to. There is no API endpoint and no form POST anywhere on this site. Concretely, what happens to a model file is this:

1. Reading. Your browser’s own File API loads the bytes into the tab’s memory when you drop or choose a file. The file name is used only to pick the reader and to name the download.
2. Converting. A dedicated worker thread in the tab runs a WebAssembly build of OpenCASCADE and tessellates the model there. The worker’s only network request is fetching its own engine file from this site’s folder.
3. Writing. This page serialises the triangles into a binary or ASCII STL in memory and hands it to your browser as a download.
4. Forgetting. Nothing is written to disk by the page, nothing is cached server-side, and closing or reloading the tab leaves no trace of the file anywhere.

Since no model reaches us, we cannot view, keep, analyse, or hand over anything you converted — to a customer, a partner, or an authority. Your model file is not among the requests below and cannot be: no code on this site sends file bytes anywhere.

Every request these pages make, named:

Cookies and browser storage

The site’s own code sets no cookies. It does not use localStorage or sessionStorage, and it does not need either to work — the converter is fully functional in a browser configured to block all cookies and all site data.

That statement covers the site’s own code. Third-party advertising is a different party: see advertising below.

Anonymous visit counting

The site is hosted on Cloudflare Pages, which loads one small script on each page and sends one request per page view to its Web Analytics service. We keep it because without a counter we cannot tell whether anyone uses this tool. It is built to measure traffic without identifying individuals: it sets no cookie, uses no browser storage, and does not fingerprint devices.

For each page view it records:

• a random identifier for that single page load, discarded after the visit;
• the page path you loaded and the address of the site you came from (the referrer), when your browser sends one;
• the browser family, device type and country implied by your connection — derived values, not your identity;
• performance timings describing how quickly the page and its assets loaded and became usable.

Your IP address is not kept as a personal identifier and is not joined to anything else to name you. There is no click tracking, no session replay, no cross-site profile, and nothing from this counter feeds advertising targeting. We read aggregate numbers: how many visits, which pages, how fast. Your model file, its name and its contents are not part of any of it.

Third-party advertising

This site may display third-party advertising. When an ad is shown, it is delivered by an ad network from that network’s own servers, and the network can see that a browser loaded an ad on this page. Ad networks typically set and read their own cookies, device identifiers or similar technology in order to serve, measure and frequency-cap ads, and — depending on the network — to build a cross-site advertising profile. Their privacy policies, not this one, govern what they do with that data, and this site cannot control it.

As of the date above, no ad unit is placed on these pages; advertising is described here because it is how the site is funded and may be enabled at any time. When an ad is live, this section will be updated to name the provider and link its privacy policy and opt-out.

If you would rather not be shown personalised advertising anywhere on the web, these industry pages let you set opt-outs per browser:

• US — optout.aboutads.info
• EU/EEA and UK — youronlinechoices.com
• Google ads — google.com/settings/ads

Blocking scripts at the browser level (an extension that blocks third-party requests) also prevents ads from loading. It does not affect the converter: the tool works entirely from this site’s own files, so a blocked ad changes nothing about a conversion.

What we do not do

• We do not sell, rent or trade any data about you. There is no data product here.
• We do not share anything about your conversions with anyone, because we hold nothing about them.
• We do not send you email. There is no newsletter, no marketing list, and no address is collected unless you write to us first.
• We do not run the conversion on a server, so there is no server-side file to leak.

Mail you send us

[email protected] is a forwarding address on this domain, handled by Cloudflare Email Routing, which delivers what you write to the maintainer’s personal mailbox. When you send a message, the parties involved hold its normal metadata: the address you sent from, the subject, the body, the timestamp, and the routing and abuse-protection records attached to the delivery.

We keep a message for as long as we need it to answer you or to act on what you asked — a bug report may stay referenced for years, a one-off question gets deleted once it is resolved. Writing to us is entirely your choice; please do not attach a model or drawing you are not free to share, since the tool never needs one.

Hosting and security logs

Like any site served through a content delivery network, this one passes through infrastructure that records standard request metadata for security and abuse purposes: the requested URL, a timestamp, and enough of the connecting address to detect an attack or a scrape. The site’s own code reads none of this. Handling is governed by the host’s terms, and it exists for abuse defence rather than for profiling visitors.

Where this is operated

The site is run by an independent developer and served by Cloudflare; if advertising is enabled, ad networks are involved as well. Each of those parties processes data on its own infrastructure, which may be in a different country from yours, and each acts under its own terms. Using this site means your browser makes requests to whichever of those providers a given page loads.

Your choices

The converter asks nothing about you, so in the ordinary case there is nothing held to remove. Where data-protection law gives you rights anyway — for example under the GDPR, UK GDPR, CCPA/CPRA, or Brazil’s LGPD — you can ask to access, correct, delete, or object to the processing of anything we or our providers hold that relates to you, such as mail you sent. Write to [email protected] and say which you want; no account and no identity document is required to ask. If we cannot match a request to anything we hold, we will tell you that rather than invent a record. You can also complain to your local supervisory authority.

Two practical notes. First, you can use this tool with cookies blocked, in a private window, and while signed out of everything — the visit counter will still record an anonymous page view, but nothing identifies you in it. Second, we cannot delete data held by the host or by an ad network from their own systems; only they can, and the links above are how you reach their controls.

Children

This is an engineering utility aimed at adults working with CAD files. It is not directed at children, it collects no profiles, and it knowingly gathers nothing from anyone.

Changes to this policy

If the practice changes — a new script, a new vendor, the first ad unit, a different host — this page is updated before or at the same time the change goes live, the date at the top moves, and the short version at the top is rewritten to match. Continued use after an update means the updated version applies.

Questions about this policy

Write to [email protected]. More about who is answering is on the about page; the converter itself is at the top of the site.