Privacy

Last updated: 15 October 2026

unflatten.org is a free, non-commercial project run by one person. This page says what the site stores about you, why, for how long, and how to reach me. Short version: the picture you upload, the model made from it, and either your IP address or your email are kept for three days and then deleted. Nothing is sold, shared for marketing, or used to train anything.

Who is responsible

Leonardo Scapinelli
Route Cantonale, 1025 St-Sulpice
Switzerland
hello@unflatten.org

I am the data controller under the Swiss Federal Act on Data Protection (FADP) and, where it applies to visitors from the European Union, the General Data Protection Regulation (GDPR).

What is collected and why

• The picture you upload and the 3D model made from it. Needed to do the one thing the site does. Kept for three days so you can download the result, then deleted.
• Your IP address. Stored with each job so the fairness limits can work (one model at a time, ten per six hours, one batch a day per connection). Deleted with the job after three days. The web server does not keep access logs.
• Your email address, only if you send a batch. Used to send you a single email with a link to your finished models. Deleted with the batch after three days. It is not added to any list.
• The original filenames of batch pictures, shown back to you on your batch page. Deleted with the batch.

There are no analytics, no cookies, no advertising, no tracking pixels, and no accounts. The site does not read anything else from your device.

Legal basis

Processing is necessary to provide the service you asked for (GDPR Art. 6(1)(b)). The IP-based limits are in my legitimate interest in keeping a free service usable for everyone (Art. 6(1)(f)).

Where the data goes

• The website and your files are stored on a server rented from OVHcloud in Canada.
• Your picture is sent to a graphics-card server rented through the Vast.ai marketplace to be turned into a 3D model, then deleted from that machine. The physical host may be located outside Switzerland and the EU; I select hosts in Thailand. Only the picture itself is sent there, never your IP address or email.
• Batch emails are sent through Resend, Inc. (USA), which processes your address only to deliver the message.
• The 3D viewer on the page loads a small piece of software from Google's servers (ajax.googleapis.com). Your browser fetches it directly, so Google sees your IP address as with any hosted script. No other data is sent to Google.

Transfers outside Switzerland and the EU rely on the providers' standard contractual clauses or, for the USA, the Swiss–US and EU–US Data Privacy Frameworks where the provider is certified.

Your rights

You can ask what data I hold about you, ask for it to be corrected or deleted, object to processing, or ask for a copy. Because nothing is kept for more than three days and nothing is tied to an account, the simplest way to exercise these rights is usually to wait three days. To ask sooner, email hello@unflatten.org with the download link or batch link so I can find the right files. If you are in Switzerland you may complain to the Federal Data Protection and Information Commissioner (FDPIC); in the EU, to your national data protection authority.

Children

The site isn't aimed at children and I don't knowingly collect their data. If you think a child has uploaded something, email me and I'll delete it.

Changes

If this page changes, the date at the top changes with it.