Privacy policy

Corrupted Industries (“we”) operates this website and the print-on-demand service on it, and decides how the personal data described here is used. The operator details are shown above and in the site footer. For anything related to your personal data, email the address above: data-protection requests are answered by the owner personally, not a support queue.

We collect the minimum needed to run a manufacturing business. The reason we're allowed to is in brackets.

• Contact form — your name, email address and message, so we can reply to you (to answer your request).
• Project briefs & quotes — your contact details, the project description and any files you attach, so we can prepare an offer (steps before a contract, at your request).
• Orders — your name, company (optional), delivery address, phone number, email, the model files you upload and your print settings, so we can make, invoice and ship your parts (to perform the contract) and keep the records Serbian accounting and tax law requires (legal obligation).
• Checking order details — before an order is accepted, we check that the address and phone number look valid and that your email address's domain can receive mail. Only the domain (the part after @) is looked up in public DNS, through Cloudflare's resolver (our legitimate interest in being able to deliver to you and reach you).
• Accounts (optional) — your email, display name and password. The password is stored only as a salted cryptographic hash; we cannot see or recover it. Your order history is linked to the account so you can follow it (to perform the service you open the account for).
• Security & abuse protection — IP addresses are checked in memory to rate-limit abusive traffic. They are not written to our database and are not used to profile you (legitimate interest in keeping the site safe).
• Site statistics — Cloudflare Web Analytics, which Cloudflare provides for our domain, counts page views and loading times in aggregate. It sets no cookies, does not identify you and does not follow you across other websites (legitimate interest in knowing the site works).

We use only what the site needs to work, or what you choose yourself. There are no advertising, tracking or third-party cookies, which is why you don't see a cookie banner:

• NEXT_LOCALE (cookie) — remembers the language you are reading in.
• ci_user (cookie) — keeps you signed in to your account. Set only when you log in; it expires after 30 days or when you sign out.
• ci-theme (local storage) — remembers light or dark mode, if you switch it.
• Discount notice (local storage) — remembers that you closed the registration-discount notice, so it does not come back.
• A model opened from Discover (session storage) — holds its summary for a moment while it opens in the slicer, then it is removed.
• Local and session storage never leave your device.

The website and your data are stored on our own server in Serbia. These services process data on our behalf, only to deliver what you asked for:

• Cloudflare (USA) — all traffic to this website passes through Cloudflare, which provides the encrypted connection, the domain's DNS and protection against attacks. While your browser talks to us, Cloudflare handles your IP address, browser details and what you send, including forms and uploaded files, in transit; it does not keep your orders. Cloudflare also forwards mail sent to our address to our inbox, and provides the anonymous statistics described above.
• Resend (USA, sending from the EU) — sends our emails to you: order confirmations, status updates and password resets. Your email address and the message pass through it.
• Google Gmail (USA) — our inbox. Messages you send to our address, and our own order notifications, are kept there.
• Shipping carriers — your name, address and phone number are given to the carrier that delivers your package (e.g. Post Express, D Express, BEX, or an international courier for EU orders).
• Printables (Prusa Research, Czech Republic) — when you browse Discover, model pictures load directly from Printables' servers, which see your IP address as they would for any image on the internet. Searches are relayed through our server without your personal data. Printables' own terms and privacy policy apply on their site.
• Translation — Serbian searches are translated on our own server. Model names and descriptions shown in Serbian are translated by Google's public translation service; only the model's text is sent, never your personal data.
• Transfers to the USA rely on these providers' EU–US Data Privacy Framework certification and the standard contractual clauses in their data processing agreements.

• Contact messages — until resolved, then up to 1 year in case the conversation continues.
• Quotes and their files — up to 2 years, so a returning project doesn't start from zero. You can ask us to delete files sooner.
• Orders and invoices — for as long as Serbian accounting and tax law requires; the uploaded model files can be deleted on request once warranty questions are settled.
• Accounts — until you ask us to delete yours. Deleting the account does not delete invoices we are legally required to keep.
• Backups — encrypted copies of our database are kept for up to 30 days, then overwritten.

Under Serbian data-protection law (ZZPL) and, where it applies, the EU GDPR, you can:

• get a copy of the data we hold about you;
• have inaccurate data corrected;
• have your data deleted where no legal obligation forces us to keep it;
• restrict or object to processing;
• receive your data in a portable format;
• withdraw any consent at any time.

Email us and we'll handle it — usually within days, at most within 30. You can also complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs) or, if you are in the EU, to your local supervisory authority.

The site runs over HTTPS end to end. Passwords are stored as salted scrypt hashes, sessions use signed tokens, and the database and your uploaded files live on our own server, isolated from the rest of our network, with encrypted backups. Only the owner has access.

The service is not directed at children. We do not knowingly collect data from anyone under 15; if you believe that happened, tell us and we will delete it.

When this policy changes, the new version is published here with an updated date. Substantial changes affecting active accounts will be announced by email.