Last updated: 18 September 2026
| Data | Why |
|---|---|
| Account email & password (managed by Firebase Authentication - we never see or store your raw password) | To sign you in and manage your subscription |
| Printer profile (nozzle diameter, build plate size) | To generate and fit-check your designs |
| Design inputs & generated files | To generate, re-export and let you revisit past designs |
| Basic technical data (IP address, browser type, via standard server/hosting logs) | Security, abuse prevention, and diagnosing faults |
| Billing details | To process your subscription payment - handled entirely by our payment processor (Stripe), we never see or store your card details ourselves |
To provide the design/export service, run your subscription billing, respond to support requests, and meet legal/accounting obligations. We don't send marketing emails. The only automated emails you'll receive are transactional: an email verification link when you create an account with email/password (not needed if you sign in with Google, which is already verified), and billing receipts/invoices sent directly by Stripe for your subscription - delivery of your actual designs remains website-download-only, never by email.
We process your data on the basis of contract performance (to run your account and subscription) and legitimate interest (to operate and secure the service, and prevent fraud or abuse).
We may also disclose your information where required by law, or where necessary to investigate a suspected violation of our Terms & Conditions.
We take reasonable precautions and follow standard industry practice to keep your information secure from loss, misuse, or unauthorised access. Account data is kept for as long as your account is active, and deleted when you delete your account (see Section 7). Generated design files are kept until you delete them - you can remove any individual order yourself at any time from the My Orders page.
Under UK/EU GDPR you have the right to access, correct, delete, or export a copy of your personal data, and to object to certain processing. From the My Orders page, signed in, you can: delete any individual generated order yourself at any time; download a complete export of everything we hold about your account (profile, plan, and order history) as a JSON file; and permanently delete your entire account, which immediately cancels any active subscription and deletes all your orders, files, and login. Account deletion cannot be undone. For anything these self-service tools don't cover, or to correct inaccurate data, contact us using the details in Section 10.
CusTray is not directed at children and is not knowingly used by anyone under 16. By using this site, you confirm you meet the minimum age of digital consent in your country of residence.
We may update this policy from time to time. Material changes will be highlighted on this page. If CusTray is ever acquired or merged with another company, your information may transfer to the new owner so the service can continue to operate.
If you have any questions about this policy, or want to exercise any of the rights above, contact us at support@custray.com.