Your data, plainly explained.

Droid Division is a small UK workshop selling 3D-printable STL files. This page explains what personal data we hold, why we hold it, how long we keep it, and how to get it removed. For any privacy question or request, open the support chat — the bubble in the corner of every page — and ask for a human.

What we collect, and why

Your account. Email address, display name, country, your marketing opt-in choice, and an optional avatar photo. Used to sign you in, deliver your files, and — only if you opted in — send occasional product news.

Orders. What you bought, the price, the VAT country and rate applied, and an approximate country derived from your connection (kept as tax and fraud evidence). Payments are processed entirely by Stripe (card, Apple Pay, Google Pay) or PayPal — we never see or store card details.

Etsy purchases. If you bought from our Etsy shop, we keep a minimal copy of each order: order number, the name on the order, and country. We use it for our sales and tax records, and so you can retrieve your files here if you choose to — never for marketing. We also store Etsy’s pseudonymous buyer identifier against those orders, so that retrieving one order here restores access to the rest of your Etsy purchase history in one step.

Downloads. Each file download is logged (IP address, country, browser identifier) for licence enforcement.

Support chat. Your messages, plus your email and name if you provide them so we can reply. Conversations are only used to improve the assistant’s answers when we explicitly mark them for that.

Builder gallery. Photos you upload (camera metadata is stripped on the server before storage) and an optional social handle you choose to display.

Etsy reviews. We display star ratings and review text published by buyers in our Etsy shop alongside reviews left on this site. We store no name, email address or account identifier alongside them, and Etsy reviewers appear only as “Etsy buyer”. Later edits or deletions on Etsy aren’t picked up automatically — if you’d like your review removed from this site, ask in the support chat.

Errors. We use Sentry to capture technical errors so we can fix them. It isn’t used to profile you, and we run no analytics or advertising trackers.

Who processes data for us

Supabase (database, file storage, sign-in), DigitalOcean (website hosting), Stripe and PayPal (payments), Brevo (email), Sentry (error reporting), OpenAI (the support-chat assistant), and Anthropic (automated photo moderation). Each receives only what its job needs.

How long we keep things

Order records: around six years, as UK tax law requires. Download logs: two years. Raw notification records from our payment, email and Etsy connections (Stripe, PayPal, Brevo, Etsy): 90 days. Etsy unlock attempts and raw receipt payloads: 90 days. Everything tied to your account (profile, wishlist, reviews, builds): until you delete your account.

Cookies

We set essential cookies only: your sign-in session, an anonymous token that keeps a support chat attached to your browser, and your location choice. Your cart is kept in your own browser’s storage, not a cookie. There are no analytics or advertising cookies. On the checkout pages, Stripe and PayPal set their own cookies to prevent fraud.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Open the support chat and ask for a human, and we’ll respond within 30 days. If you’re unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office (ICO).

Deleting your account

You can request deletion from your account’s security page, or via the support chat. Deletion is permanent: you lose access to all file downloads and your purchase history. Anonymised order records are retained for tax law. If you bought on Etsy, those purchases stay retrievable at /unlock with your Etsy order number and surname. Requests are actioned within 30 days.