// Legal

Privacy Policy

Effective date: 11 May 2026 · Last updated: 11 May 2026

STLVault ("we", "us", "our") runs the website stlvault.shop and sells digital STL file bundles. This Privacy Policy explains, in plain language, what information we collect, how we collect it, how we use and share it, the cookies and advertising tools we use (including the Meta/Facebook Pixel), and the rights you have over your data.

If you have any privacy questions, email us at support@stlvault.shop.

---

1. Who We Are

STLVault is a digital storefront that sells downloadable 3D printing files. We are the data controller for the information described in this policy. You can contact us about any privacy matter at support@stlvault.shop.

2. Information We Collect

We only collect what is needed to run the store, deliver your files, keep the site secure, and (where applicable) show and measure ads. The categories of information we collect are:

• Email address — used to send your download link and order confirmation, and to reply if you contact support.
• Payment information — your card number, billing details and payment data are collected and processed directly by our payment processor. STLVault never sees or stores your full card number.
• Purchase record — the product purchased, date and amount, kept for accounting and tax purposes.
• Support messages — anything you choose to send us by email (name, message content, attachments).
• Technical and device data — collected automatically when you visit the site: IP address, approximate location (country/region), browser type and version, operating system, device type, referring website, pages viewed, time spent on pages, and clicks.
• Advertising and analytics identifiers — cookie IDs and similar identifiers used by the Meta Pixel and our hosting provider's analytics to measure ad performance and site usage.

3. How We Collect Information

We collect information in three ways:

• Directly from you — when you fill in a form, complete a checkout, or email us at support@stlvault.shop.
• Automatically from your visit — when you browse the site, our servers and analytics tools record technical data such as your IP address, browser, device, pages viewed and actions taken.
• Through cookies and similar tracking technologies — small text files stored on your device that let us recognise your browser, remember settings, measure traffic, and serve and measure ads (see Section 5).

4. How We Use Your Information

We use your information to:

• Process your order and deliver your download link.
• Send order confirmations and customer-service replies.
• Keep accounting and tax records as required by law.
• Operate, secure and improve the website (for example, detect fraud or fix bugs).
• Run, measure and optimise advertising on Meta (Facebook and Instagram) and other ad platforms — including showing ads to people who have visited STLVault, building lookalike audiences, and measuring how well our ads convert into purchases.
• Send marketing emails — only if you have explicitly opted in. You can unsubscribe at any time using the link in any marketing email.

5. Cookies and Tracking Technologies

STLVault uses cookies and similar technologies (pixels, local storage, web beacons) to make the site work, understand how it is used, and run advertising. The main categories are:

• Essential / functional — including a localStorage entry that stores a countdown-timer expiry value so the site works correctly. No personal data is stored in it.
• Analytics cookies — set by our hosting provider (Vercel Analytics) to count visitors and understand how pages are used.
• Advertising cookies — Meta Pixel — STLVault uses the Meta Pixel (also known as the Facebook Pixel) on this website. The Pixel is a piece of code from Meta Platforms, Inc. that sets cookies (such as _fbp) and similar identifiers in your browser. It tells Meta which pages you visited on STLVault and which actions you took (for example, viewing a product or completing a purchase) so that we can measure our ads, optimise delivery, and show relevant ads on Facebook and Instagram to you and to people similar to you.

You can control or block cookies in your browser settings. Blocking advertising or analytics cookies will not stop you from using the site, but some features and ad personalisation will not work.

6. Advertising and the Meta Pixel

We advertise STLVault on Meta platforms (Facebook and Instagram). To do this, we share certain information with Meta Platforms, Inc.:

• Pixel events — when you visit pages on stlvault.shop or take actions such as viewing a product or completing a purchase, the Meta Pixel sends event data to Meta, including the action taken, the page URL, your IP address, browser/device details, and a Meta cookie ID.
• Custom and lookalike audiences — we may upload hashed (encrypted) email addresses of customers to Meta so we can show ads to existing customers or to people with similar profiles. Meta is contractually required to delete the hashed email after matching.

Meta uses this data both as our service provider (to measure and optimise our ads) and for its own purposes as described in Meta's Privacy Policy. Where the data is shared jointly under EU law, Meta and STLVault are joint controllers for the collection and transmission of Pixel data, and Meta is solely responsible for any further processing.

How to opt out of advertising tracking:

• Adjust your Meta ad preferences at facebook.com/adpreferences and your Instagram ad settings inside the app.
• Use the industry opt-out tools at YourAdChoices.com (US), YourOnlineChoices.eu (EU/UK) or the Digital Advertising Alliance of Canada at youradchoices.ca.
• Enable "Limit Ad Tracking" or "Do Not Track" in your device or browser settings.
• Block third-party cookies in your browser, or use a tracker-blocking extension.

7. Payment Processing & PCI Compliance

STLVault uses industry-standard payment processors (Stripe and Wise) to handle all payment transactions. We comply with PCI DSS (Payment Card Industry Data Security Standard) requirements and do not store, process, or retain your full payment card details. All payment data is encrypted using HTTPS and processed securely by our payment providers.

Payment processors may use your transaction data to prevent fraud, comply with legal obligations, and improve their services as described in their respective privacy policies.

8. Third Parties We Share Data With

We do not sell or rent your personal information. We share data only with the service providers listed below and only as needed to run STLVault:

• Meta Platforms, Inc. (Facebook / Instagram) — advertising, ad measurement and audience building through the Meta Pixel and custom-audience uploads. See Meta's Privacy Policy.
• Stripe Inc. — payment processing and fraud detection. See Stripe's Privacy Policy.
• Wise (formerly TransferWise) — payment processing. See Wise's Privacy Policy.
• Vercel Inc. — website hosting and basic visitor analytics. See Vercel's privacy policy.
• Legal and regulatory authorities — if required by law, court order, or to protect our rights, property or safety.

9. International Data Transfers

STLVault is operated online and most of our service providers (including Meta and Vercel) are based in the United States. This means your information will be transferred to, stored in and processed in the United States and other countries that may have data-protection laws different from those in your home country.

Where required by law (for example for visitors in the EU, UK or Switzerland), these transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses and the EU–US Data Privacy Framework.

10. Data Retention

We keep your information only for as long as we need it:

• Email address and purchase record — at least three (3) years, to meet accounting and tax requirements. After this period the data is deleted or anonymised.
• Support emails — for as long as reasonably necessary to handle your request, usually up to two (2) years.
• Analytics and Pixel data — typically retained by Meta and Vercel for the standard periods set in their products (often up to 24 months) before being aggregated or deleted.

11. Security

We use reasonable technical and organisational measures to protect your data, including HTTPS encryption across the site, access controls on our accounts, and trusted service providers (Vercel, Google, Meta) that maintain their own security programmes. No system is 100% secure, and we cannot guarantee absolute security, but we work to reduce risk.

12. Your Rights

Wherever you live, you can ask us to:

• Confirm what personal data we hold about you and get a copy of it.
• Correct information that is wrong or out of date.
• Delete your data, subject to our legal retention obligations.
• Restrict or object to how we process your data.
• Receive your data in a portable format.
• Withdraw any consent you have given (for example, for marketing emails).

To exercise any right, email support@stlvault.shop. We will reply within 30 days. We may need to verify your identity before responding.

13. GDPR — Notice to Visitors in the EU, UK and Switzerland

If you are in the European Economic Area, the United Kingdom or Switzerland, the General Data Protection Regulation (GDPR) and the UK GDPR apply to your data. Our legal bases for processing are:

• Contract — to process your order and deliver your files.
• Legal obligation — to keep tax and accounting records.
• Legitimate interests — to keep the site secure, prevent fraud, measure traffic, and improve STLVault. We balance these interests against your rights.
• Consent — for advertising cookies (including the Meta Pixel), analytics cookies and marketing emails. You can withdraw consent at any time.

You have all the rights listed in Section 11, plus the right to lodge a complaint with your local data protection authority (in the UK, the ICO at ico.org.uk).

14. CCPA / CPRA — Notice to California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, gives you the following rights:

• Right to know — what personal information we collect, the sources, the purposes, and the categories of third parties we share it with. This is described in Sections 2, 3, 4 and 8 above.
• Right to delete — request deletion of personal information we hold about you.
• Right to correct — request correction of inaccurate personal information.
• Right to opt out of "sale" or "sharing" — under California law, the use of advertising cookies such as the Meta Pixel for cross-context behavioural advertising can be considered "sharing" of personal information. You have the right to opt out.
• Right to limit use of sensitive personal information.
• Right to non-discrimination — we will not deny you service or charge you a different price for exercising your rights.

To exercise these rights, including to opt out of sharing for advertising, email support@stlvault.shop with the subject "Do Not Sell or Share My Personal Information", or use the opt-out tools in Section 6. We do not knowingly sell or share the personal information of consumers under 16.

15. Children's Privacy

STLVault is intended for adults and is not directed to children. We do not knowingly collect personal information from anyone under the age of 13 (or the equivalent minimum age in your country, such as 16 in parts of the EU). If you are under 13, please do not use the site or send us any personal information. If you are a parent or guardian and believe your child has provided us with personal data, contact us at support@stlvault.shop and we will delete it promptly.

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective date" and "Last updated" date at the top of this page. If the changes are significant, we will make a clearer announcement on the site. Your continued use of STLVault after changes are posted means you accept the updated policy.

17. Contact

For any privacy question, request, complaint, or to exercise any of your rights, contact us at support@stlvault.shop. We aim to reply within 30 days.