Privacy Policy

1. Data Controller

The data controller responsible for processing your personal data is Sipers Mechatronics, trading as Eyeball Engineering, located at Wycker Smedenstraat 1 D01, 6221 ER Maastricht, Netherlands. Contact: support@eyeball.engineering.

2. Information We Process

• Purchase and billing: Your payment details, country and e-mail address are processed securely through Stripe. We do not store raw card numbers. We keep the order (product, amount, currency, payment reference, your e-mail address) and the invoice for our tax and accounting records.
• Account sign-in: Your account, session tokens and e-mail verification codes are processed through our platform’s sign-in service.
• Downloads and generator use: We record your downloads, your IP address at download time and the times you use the G-code generator. We use this only to check that you are entitled to the files and that the licence terms are followed.
• Delivery consent record: When you expressly request immediate delivery before your first download or generator run, we record the exact wording you accepted, its version, the time, your account, order and licence. We also e-mail you a confirmation. This record is evidence of the consent the law requires for digital content, and we keep it with the order.
• Licence marks in delivered files: Every pack you download is marked with your licence. The marks sit in an attribution entry in the archive, in comment lines in the text-based files (STEP, G-code, 3MF metadata, settings, documentation) and in the file name. They carry your licence number, a fingerprint and trace code derived from that number with a secret key, and the time of issue. The pack’s geometry, print settings and tool paths are not rewritten. G-code made by the online generator carries a fingerprint derived from your e-mail address with a secret key. It is written as header and comment lines, as trailing spaces on header lines, and as a shift of at most 0.005 mm on a few travel positions of the toolchange routine. Extrusion, temperatures and feed rates are not changed. The marks contain no name or e-mail address. They can be linked to you only through our records. We use them to enforce the one-person licence and to trace unauthorised redistribution (legal basis: legitimate interest).
• Withdrawal and support requests: If you use the online withdrawal function or write to support, we store your name, e-mail address, order reference and the content of your statement as a support record. We notify our support mailbox and e-mail you the acknowledgement of receipt. Withdrawal records are kept with the order for as long as the purchase and accounting records are kept.
• Optional Discord link: If you connect Discord from your account, we store your Discord user ID and display name with your account, to grant and revoke the buyer roles. If you do not connect it, we store none of this and nothing is sent to Discord.

3. Cookies & Local Storage

The Mechams storefront uses no advertising or marketing cookies. The deployed site can collect cookieless page views through Vercel Web Analytics. Optional acquisition analytics stay off until you accept: we remember a limited source, campaign, public landing page and available link click identifier for the browser session, and attach that context to checkout and the order. Link identifiers are observed URL tags, not verified advertising identities. We do not retain full referring URLs, arbitrary query parameters or email addresses in this context. Rejecting or making no choice leaves the purchase source unknown. Your choice, theme preference (plate setting: dark or paper) and unit preference (metric or freedom units) use local storage; accepted acquisition context uses session storage. Clear this site's stored data to change your choice. The account app runs error and performance monitoring (Sentry) on every visit. It runs optional product analytics (PostHog, EU endpoint) only after you choose “Accept analytics”. The Eyeball Engineering privacy policy describes both.

4. Services That Process Data For Us

• Vercel: hosts the storefront and the account app (both deployed to Vercel’s Frankfurt region) and processes IP addresses and request data to serve pages.
• Neon (PostgreSQL): holds the account, order, licence, delivery, consent and support records described above.
• Stripe: checkout, payment processing, VAT calculation and invoicing. Stripe is an independent controller for the payment data it collects on its own pages.
• Resend: sends our service e-mails (order, account, consent confirmation, withdrawal acknowledgement) and delivers support notifications to our support mailbox.
• Discord, Sentry, PostHog: only as described in sections 2 and 3.

5. Your Rights

Your rights under the GDPR (access, rectification, erasure and portability), the legal bases and how long data is kept are set out in the full Eyeball Engineering privacy policy.