Privacy Policy
Version 1.4, in force from 19 October 2026
This policy explains which personal data p2print processes when you use p2print.net, why, who receives it, and what rights you have. It applies under the Swiss Federal Act on Data Protection (FADP).
1. Who is responsible
The controller is:
Crypter GmbHKapfstrasse 43
8608 Bubikon, Switzerland
[email protected]
+41 79 537 07 65
For anything to do with your data, write to [email protected].
2. What data we process, and why
| Data | Purpose |
|---|---|
| Account: e-mail address, name, profile picture (from Google, if you sign in with it), language, settings | Your account, signing in, messages to you |
| Addresses: delivery and billing address, phone number given at payment | Delivery, invoices, the shipping label, payment checks |
| Designs: your descriptions, answers and changes, and the versions, drawings and 3D files of your designs | Providing the design tool |
| Photos (up to three per design), scanned drawings, uploaded models | Providing the design tool. Photos are stored without metadata (location, camera) |
| Orders: what you ordered, prices, payments, delivery and tracking, warranty cases, refunds | Selling, delivering and invoicing your part |
| Balance: top-ups, bonuses, every payment from and refund to the balance | Running your balance |
| Messages with the Partner who makes your order, and feedback you send us | Communication about your order and support |
| Acceptable-use decisions, quoting your words | Checking that what is designed and printed is lawful and allowed (section 6) |
| Technical data: IP address, browser, time, the pages and functions used, error logs | Running the site securely, preventing abuse, fixing errors |
We look at designs that went wrong in order to find and fix errors in our software. We do not use your content to train AI models, for advertising, or to show others.
Payment details (card number, TWINT) are entered with Stripe; we only receive the payment status, the type of payment method and its last digits.
Please do not upload content that reveals sensitive data (for example about health) or shows other people without their consent.
3. How we use AI
Your descriptions, answers, changes and images are processed by AI model providers (section 5) to create and check your design and to check that the request is allowed. A person does not look at every design. The providers process this data only to provide the service and do not use it to train their models; they may keep requests for a limited time to detect abuse. Search services receive search queries, not your name or contact details.
4. Partners who make your part
The Partner who makes your order receives the model file, the order details (material, colour, quantity) and the shipping label with your name and delivery address. Partners do not receive your e-mail address, phone number, payment data, photos, your conversation with the design assistant or your other orders. They may use this data only to make and ship your part.
If you exchange messages with the Partner on p2print.net, the Partner sees your name and your messages. Messages are checked automatically for contact details, which are blocked, and can be translated automatically.
5. Service providers and other recipients
We use service providers of the following categories. They process data on our behalf and only for us, unless stated otherwise. Where a recipient is outside Switzerland, the country and the safeguard are named; the EU and EEA countries are recognised as providing adequate protection. On request we name the individual recipients.
| Recipient | What for | Data | Where | Safeguard |
|---|---|---|---|---|
| Hosting provider | Servers | All data described here | Germany | Adequate country |
| Sign-in and database provider | Sign-in and database | Account data and all records | Stored in Germany; provider in the USA | Standard contractual clauses |
| Content delivery and file storage provider | Delivery of the website, protection against attacks, file storage | IP address, technical data; files (models, photos, documents) | Worldwide network; files stored in the EU; provider in the USA | Swiss-US Data Privacy Framework |
| AI model providers | Design tool, text recognition, acceptable-use checks, translating and classifying messages | Descriptions, answers, changes, images of photos, drawings and uploads, messages | EU and USA; worldwide, wherever the model runs | Adequate country, Swiss-US Data Privacy Framework or standard contractual clauses; otherwise necessary to perform our contract with you (Art. 17(1)(b) FADP) |
| Web search services | Web search | Search queries | USA | Swiss-US Data Privacy Framework or standard contractual clauses; otherwise necessary to perform our contract with you (Art. 17(1)(b) FADP) |
| Resend, Inc. | E-mail delivery: the sign-in code and every other e-mail to you | E-mail address and the e-mails we send you | Sent from the EU; provider in the USA | Standard contractual clauses |
| Google LLC | Address suggestions while you type | The address text you type | USA | Swiss-US Data Privacy Framework |
| Stripe Payments Europe, Ltd. | Payments, refunds | Name, e-mail, billing address, phone, payment data, amounts | Ireland, with transfers to the USA | Adequate country; Swiss-US Data Privacy Framework |
Stripe is also responsible itself for the payment data it needs to prevent fraud and to meet its own legal obligations (for example anti-money-laundering rules); its privacy policy applies to that: stripe.com/privacy.
Swiss Post (Die Schweizerische Post AG, Switzerland) receives your name, delivery address and the weight of the parcel to deliver it, and is itself responsible for that delivery. If you sign in with Google or Apple, they process your sign-in under their own responsibility.
We also disclose data to authorities, courts and our advisors where the law requires it or to establish, exercise or defend legal claims, and to a buyer of our business, who would be bound by this policy. We do not sell personal data.
6. Automated decisions
Before anything is designed or printed, an automated system checks whether the request is allowed under our Acceptable Use rules. If it refuses a request, that decision was made automatically. You are told why, and you can explain your view and ask for a person to review the decision.
Prices are calculated automatically from our price list. No other decision about you is made solely automatically.
7. Cookies and storage in your browser
We use no analytics, no advertising and no tracking. We set no cookies of our own. Our website delivery provider may set a strictly necessary security cookie to tell people from bots.
Your browser stores, in its local storage, your sign-in session and a few settings (language, light or dark display, the last view of a design). You can delete them in your browser at any time; you will then be signed out.
8. How long we keep data
- Account, designs, photos and drawings: as long as your account exists, or until you delete them. Photos can be deleted on their own at any time.
- Models (your uploads and the files of your designs): as long as your account exists. A model you delete is hidden from you and kept. Hidden models without an order or an acceptable-use decision are erased at the latest 2 years after you deleted them, or with your account. On request we erase them earlier.
- Orders, invoices, the balance’s records and other accounting records: 10 years, as required by Swiss law (Art. 958f CO, Art. 70 VAT Act). Designs, files and addresses that an order needs are kept with it.
- Server logs: a few days to a few weeks.
- So that each email address gets the free designs of signing up and of a voucher only once, we keep a keyed fingerprint of your address (a hash computed with a secret key, from which the address cannot be worked out) and, for a company address, one of its domain. It is kept after you delete your account, so that a new signup with the same address gets no second free designs (our legitimate interest in preventing abuse).
- When we refuse free designs (a signup withheld, a voucher code refused), we record the email address, the IP address the request came from, the reason and, for a voucher, the code tried, so that we can review the decision and recognise abuse. This record is deleted after 6 months, also when you delete your account earlier (our legitimate interest in preventing abuse).
When you delete your account, we delete or anonymise your data, except what we must keep by law. On account deletion, files tied to an order, and files and designs with an acceptable-use decision, with the photos you attached to them (the evidence for legal claims), are kept. Everything else is erased.
9. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a common format. You can download your data and delete your account yourself in your profile. Where we process data on the basis of consent, you can withdraw it at any time with effect for the future.
For anything else, write to [email protected]. We may ask you to prove your identity and answer within 30 days.
You can complain to the Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch).
10. Security
Data is encrypted in transit and at rest, and access is limited to those who need it. If a breach is likely to put you at high risk, we inform you and the authority.
11. Children
p2print.net is for people aged 18 and over. We do not knowingly process data of children.
12. Changes
We update this policy when our processing changes. The version and date are shown at the top; we tell you of significant changes by e-mail.