Privacy
Your names, artwork, character ideas, and recordings are personal.
This notice explains what we collect, why we use it, how long we keep it, and the choices available to you.
Who should use the service
The ordering customer must be an adult who is authorized to submit the drawing, fictional character design or description, sound recording, or photograph. The Kids experience is directed to parents, guardians, and adult gift buyers, not directly to children. The Tabletop experience accepts fictional character artwork, descriptions, or both—not real-person photographs. Photo Figurines may include real people or pets only when the ordering adult has the authority described in our Terms. A name entered in the personalized keychain workflow is intentionally stored as part of that custom order. Do not add school information, addresses, or other unnecessary personal details.
Information collected
The service processes the uploaded drawing, tabletop character reference images and/or written description, optional character details, rights attestation, personalized keychain name, font, size and colors, or uploaded/recorded audio, including a child's voice when an adult chooses to provide it, one to three photographs per selected person or pet for a Photo Figurine, optional private draft-preview geometry, paid design and production files, product selections such as a marketplace model, version, scale, and color, account credentials, contact information, shipping address, order status, payment identifiers, support messages, and security/audit records. Our payment processor hosts card entry; this application does not receive full card details. When the optional pre-payment 3D preview is enabled and available, a figurine draft may contain private generated geometry for its owner to inspect. Kids-production files, provider identifiers, task state, and internal review data remain private to human review and production, except for any separately offered Kids viewer. For a Tabletop order, the paid owning customer receives a private browser view of the exact white production 3MF. Viewing it is optional and does not pause production preparation.
How information is used
Information is used to admit and store the original source, create private Photo Figurine preview candidates where that product is available, collect payment, privately create and review the paid keepsake, manufacture it, provide support, ship the order, prevent abuse, and meet recordkeeping duties. Before an accepted figurine image is stored, its JPEG/PNG content is checked and screened by a contracted content-safety service; tabletop descriptions and reference images receive the same ordinary safety screening before a draft is saved. This screening does not decide copyright ownership or licensing. Kids direct-generation images retain their admitted bytes; tabletop references are auto-oriented, resized to a bounded resolution, stripped of embedded metadata, and stored as private normalized JPEGs. Customers should still remove names, addresses, and other sensitive content that appears visibly in an image.
Personalized name-keychain geometry is created in our application from the selected name, checked-in font outline, size, and colors. Those choices do not need to be sent to an AI image or 3D-model provider. We retain the name and exact deterministic production files with the private order for fulfillment, support, and the retention period described below.
For separate left and right footprint pictures with multiple possible ink regions, and only when our provider project is configured for Zero Data Retention, we may send a metadata-free, contrast-enhanced component view to a contracted AI image-analysis service solely to identify which regions belong to the intended impression. The view removes the surrounding page and masks pixels outside algorithmically detected ink candidates; a portion of printed text touching a candidate region may still be visible. The service selects labeled regions only; it does not generate the footprint used for the keepsake. We rebuild the accepted result from the submitted image pixels and verify it before creating the preview.
For a Photo Figurine, the submitted photographs and selected direction are sent to a contracted AI-assisted 3D-generation provider to create private preview candidates. The candidate a customer selects is normalized to the requested form and measured by a quote-only printer-slicing process before payment so the exact price can be shown. That process does not place a printer command or start physical production. Provider task identifiers, source-to-model lineage, slicer files, and internal review remain private to authorized staff. Our provider arrangements must permit this limited processing; providers may retain security or abuse-prevention records under their own contractual controls.
Figurine models and product-specific previews
A Photo Figurine preview is available only to its draft owner. The selected preview may be scaled, repaired, separated into printable parts, fitted with a stand or keychain interface, or prepared as a two-part spring bobblehead before its exact quote is shown. The browser view is a shopping preview, not a production-file download or a promise of an exact facial, pose, clothing, or color reproduction.
When the optional pre-payment preview is enabled and available, only the current draft owner may inspect the generated Kids or Tabletop model. It is not a production-file download, manufacturing approval, or condition of checkout. When it is off or no request is admitted, generation begins after payment instead. A terminal pre-payment failure remains a production-review issue after payment rather than a checkout barrier.
A Kids direct figurine has no customer geometry-approval step. After payment, only the paid owning customer may view the finalized GLB without a base or exact production 3MF with a selected base, and that view never gates production. For Tabletop, after payment only the owning customer can view the exact canonical white 3MF production artifact, including its integrated round base. The delivered piece is unpainted. No separate customer or operator approval checkbox is required before production preparation continues. The viewer does not expose provider/task status or offer a supported production-file download. It does deliver renderable 3D bytes to the browser, so someone with access to the session may inspect, copy, or recover geometry; access control is not digital rights management. Provider identifiers, source-to-model lineage, sliced files, and printer access remain private to authorized production staff. Sound-wave, baby-footprint, ready-model, or historical product versions may retain a separately authorized preview format when that feature is offered.
Sound recordings and optional tap-to-play audio
For a sound-wave keepsake, we validate the recording, trim silence, apply the clip chosen by the customer, normalize the audio, and turn its waveform into the preview and printable modules. We keep the original and normalized recording private for order fulfillment, support, playback when purchased, and the retention purposes described below. Public showcase pages and downloadable production bundles do not include the recording.
If the optional tap-to-play add-on is purchased, the normalized clip is served through a private capability link programmed into the physical NFC tag. Anyone who possesses the keepsake or a copy of that link can play the clip, so customers should not include a sound they do not want the holder to hear. The guaranteed playback period shown before purchase begins when the order is shipped. The fulfilled-audio retention schedule is configured to keep the clip for at least that promised period. Playback stops after the audio is purged, after an eligible deletion request is completed, or when an order is canceled or refunded.
Optional public showcase
A signed-in adult with a paid order may separately choose to submit one raster example for public showcase review. This choice is off by default and does not affect the order. Nothing is published unless the piece has been printed and a person approves the image for privacy and safety. The public “Examples of what we can make” gallery is curated inspiration, not a generated preview of a shopper's upload. It does not show the uploaded drawing or 3D model, name, contact details, address, order number, or printable files. Permission can be withdrawn from the order page, which stops future access from this site, but it cannot recall a screenshot or copy someone already made while the image was public. Anonymous totals count only printed orders with confirmed customer payment.
Optional digital files
A marketplace order includes a custom physical print only, not the catalog's STL/3MF source or production model. Likewise, a figurine order does not include an STL/3MF production-file download or a separate digital-file license. An optional pre-payment preview, the Kids GLB viewer, and the protected Tabletop 3MF viewer are not digital packs, although browser-delivered geometry can be copied or recovered as described above. A different product version includes digital files only when Checkout explicitly lists a separately licensed digital pack and its exact contents, retention, and download limits. Such a bundle does not include the uploaded drawing, contact details, or shipping address.
Cookies and analytics
We use essential cookies and similar technologies for signed-in sessions, security, checkout, and core site operation. We may use basic analytics to understand performance and improve the service. You can restrict cookies in your browser, but account, product-versioned preview, or checkout features may no longer work correctly.
Retention and deletion
Photo Figurine source photographs are deleted after shipment. Its private printable artifacts, such as normalized model files and slice evidence, are deleted 30 days after delivery. An unpaid Photo Figurine session is retained only while its preview and quote are active, then expires and is deleted under the same private-retention process. Other eligible draft orders and their private source files are ordinarily removed after 24 hours. Active 3D-generation work is deferred until it can be safely settled. Never-paid Checkout, failed-payment, or canceled records are ordinarily removed after 30 days. Personalized-name, drawing, model, and sound-recording files for shipped or refunded orders are removed under the current 90-day fulfilled-asset schedule, measured from shipment or refund. We may adjust these periods as operations or law require and will update this notice when appropriate. Signed-in customers can download a customer-safe JSON copy of their account and order data or submit a deletion request from the account page. That export never contains private Admin QA, production, or product-versioned preview 3D files, file paths, or model download links. Eligible unpaid data is removed immediately unless an optional 3D-preview job is still active. In that case the verified request and deletion fence remain in effect, the order stays private, and deletion remains pending until the job reaches a state that can be safely settled and reviewed. A verified paid-order deletion request removes source-derived files, including source and normalized recordings, disables tap-to-play access, and removes account credentials once unsettled payment, active fulfillment, and legal-hold checks pass. Minimum transaction and audit facts may remain for fraud, tax, chargeback, or legal duties without retaining account ownership or artwork. For a Tabletop order, those minimal legal facts include the exact rights-attestation version and text, acceptance time, attestation digest, and order linkage; they do not include the character description or image references. Backups follow a separate retention schedule. Showcase consent, withdrawal, and moderation events may be retained as audit records even after the public raster is removed.
Service providers and disclosure
Payment, pre-payment content-safety screening and optional private 3D-preview generation, post-payment production generation and analysis, hosting, shipping, email, security, and support providers receive only the information needed for their role. They must handle that information under their agreements with us and applicable law.
We do not sell or rent personal information or a child’s artwork. Uploaded artwork is not published, displayed, or shared publicly unless an adult gives the separate, explicit showcase permission described above.
Security and choices
The product uses signed sessions, access controls, private file routes, validated uploads, and audit records. No internet service is risk-free. Signed-in customers can use the account controls for access and deletion requests. The configured support address is published on the Contact page before paid ordering is enabled.