Security & Trust
Plain answers about your work.
VASE 3D runs in your browser and makes files you can hold. Here is who touches your designs, what we keep, and how to reach us if you find a problem.
Your designs are yours
You own what you make. A vessel you shape, pattern and export belongs to you, and the files you download are yours to print, share and sell. We claim no rights over your designs and we do not train anything on them.
That holds on every plan, free included. What a paid plan changes is the studio: more patterns, deeper stacks, and a clean base with no forced mark.
How your data is handled
We keep data minimal. To use the studio you sign in without a password — either with Google or with a one-time link we email you. Both give us a verified email address. Google’s signed response may also contain your name and Google profile picture; it never gives us your Google password. If you upgrade, payment runs through our payment provider, and your card details go to them, never to us. We see the fact that you paid, not your card number.
The studio works from a copy on your device. While you are signed in, it also keeps an account copy of saved vessel parameters, saved glazes, favourites, your local maker name and allowed studio settings and progress records on our server, so saved work can follow the account. It tries to sync after sign-in, on open or return, after saves and before sign-out. The vessel currently on screen, rendered thumbnails, recovery copies, session credential, optional-measurement state and local celebration, taste and home-personalisation records are excluded. The server copy is included in the configured service backup set; see the privacy page for its full contents and retention.
We do not sell your data and we do not run advertising trackers anywhere on VASE 3D. Optional product measurement is cookieless; usage events stay off unless you allow them in Settings. Allowed events are sent to our consent-gated telemetry endpoint; if a named optional measurement service is configured, the browser can separately send the permitted events to it. You can ask us to delete your account and your saved designs at any time. See the privacy page for the full detail.
Sub-processors
A few trusted services help run VASE 3D. We name every one of them here, including the ones that are not switched on yet, so you know exactly who can be in the loop with your account. The same list, with the same detail, is in section 4 of the privacy page.
Hosting
Fly.io
Runs the site and the studio servers. This is where the app is served from, so everything you send us passes through it.
Resend
Carries our waitlist confirmations, one-time sign-in links and account or product emails. Resend receives the recipient and sender addresses, subject and full message text; a sign-in message therefore contains the link, which expires after 15 minutes and works once. There is no password email, because there is no password to reset.
Sign-in
One of the two ways into the studio, if you choose it over the one-time emailed sign-in link. Its signed response contains your verified email address and may include your name and Google profile picture. We never see your Google password.
Payments
Paddle
Handles checkout, billing and tax as merchant of record, if you subscribe. Your card details stay with Paddle and never reach us.
Payments (standby)
Polar
A second merchant of record we have built support for and have not switched on. Polar has received nothing from us. If billing ever moves to it, we will say so here first.
Launch mailing list
Loops
Holds the launch mailing list, if we switch it on. It would receive the email address you already gave us for that purpose, and nothing else about you.
Optional measurement
PostHog
Cookieless product measurement, if we switch it on. Off unless we do. No session replay, no advertising profile, and never your vessel geometry or project files.
Optional measurement
Plausible
Cookieless event measurement, if we switch it on. Off unless we do. VASE sends only allowlisted interaction events, with no automatic pageview, raw page address or raw referrer; it does not follow you to other sites.
Model inference
DeepInfra
Answers Ask. If we switch it on, it receives your question, a summary of your piece and any reference photograph you attach. The photograph is re-encoded on our server first, so no camera metadata — including location — leaves with it, and your email address is never sent. Nothing the model replies is trusted: every setting it suggests is re-checked against the studio's own shape list and your plan before it can touch a piece.
Print bureau
FacFox
Our intended print bureau for ordering a finished piece. Direct ordering is not built yet, so FacFox has never received a model or an order from us. If you use its quote page today, you send your file there yourself. We will say so here before that changes.
Watertight by construction
Integrity is built into the geometry, not checked after the fact. Every vessel is one closed, watertight solid by the way it is made, so the file reaches your slicer closed, with no repair step in between. What you see on screen is exactly what comes out as STL, OBJ or GLB.
VASE 3D outputs the master vessel and a small sidecar file. It does not make molds. Mold work is the job of Moldy, a separate engine that reads that sidecar later. We keep the line between the two clear so you always know what each tool is responsible for.
Reporting an issue
We are a small independent studio and we take security and privacy reports seriously. If you find something, email afekhershko@vase3d.io and we will acknowledge it as quickly as we can. Please give us a reasonable window to fix an issue before sharing it publicly.
Machine-readable contact details live at /.well-known/security.txt (RFC 9116).