Last updated: October 23, 2026
Privacy Policy
Spritfy (the "Service") values your privacy and is committed to protecting your personal information in accordance with applicable laws. This Privacy Policy explains what information we collect and how we use it.
1. Information We Collect
The editor features of this Service can be used without registration. However, registration is required to use certain features. When you register, the following personal information is collected:
- Email address (upon registration)
- Password (stored encrypted)
- Profile information from social login (Google, GitHub) such as email and display name
When you buy a pass, use image-to-3D generation or save work to your account, the following information is also processed:
- Pass payment records: order number, plan, amount and currency, payment date, payment status, and receipt link. Card details are handled by the payment provider and are never stored by the Service. The name, mobile number, and email entered at checkout are sent only to the payment provider (PortOne) for card verification and are not stored by the Service.
- Images you upload for image-to-3D generation, and the generated 3D models
- Work you save to your account after signing in
- Your own Tripo API key, if you choose to use it (kept in your browser; see section 5)
Additionally, the following non-identifying information may be automatically collected for service improvement:
- Page URLs visited and time spent on pages
- Browser type and operating system information
- Screen resolution and device type
- Approximate location (country/city level)
2. How We Use Information
The information collected is used for the following purposes:
- Creating and authenticating user accounts
- Processing pass payments, granting and returning credits, and handling refunds
- Running the image-to-3D generations you request
- Analyzing usage statistics and improving service quality
- Optimizing user experience
- Diagnosing issues and resolving technical errors
3. Cookies and Tracking Technologies
This Service uses web analytics tools to understand site usage. We measure UTM campaign labels and export-ready events by tool through Umami to understand advertising results. Campaign labels are retained in sessionStorage within the same tab and expire after 30 minutes without measurement activity. These events do not include filenames, file contents, API keys or account identifiers, and authentication and payment callbacks are excluded from Umami tracking. Additionally, we display advertisements through Google AdSense, during which Google may use cookies to show ads based on your interests. You can manage or disable cookies through your browser settings.
4. Third-Party Sharing and Service Providers
This Service does not sell or share your personal information with third parties. However, the following third-party services may collect non-identifying data:
- Web analytics tools: collecting site usage statistics
- Google AdSense: using cookies for ad display
In addition, to provide the Service, the following providers process the information needed for their tasks on our behalf:
- PortOne and KG Inicis: processing pass payments in Korean won (including card details and the name, mobile number, and email entered at checkout)
- Tripo (3D generation service): image-to-3D generation. The images you submit for generation are sent to Tripo. When you use your own Tripo API key, the key is used to authenticate with Tripo, and Tripo bills your own Tripo account.
5. Data Retention
Email and account information provided during registration is securely stored on our servers and will be deleted upon user request or account deletion. Image data created in the editor is processed within the browser and is not transmitted to our servers unless you save the work to your account.
However, the following information is kept as described below:
- Payment and refund records: kept for 5 years as required by Korean e-commerce law, even after you delete your account, and then destroyed.
- Work saved to your account: when you save work to your account after signing in, it is stored on our servers until you delete it or delete your account.
- Images for 3D generation: images you upload for image-to-3D generation are kept temporarily in your private account storage only until Tripo accepts the generation task (or the job ends), and are then deleted.
- Generated 3D models: kept in My 3D works until you delete them or delete your account.
- Your own Tripo API key: stored only in your browser (localStorage). It is sent over HTTPS to our server only to start a generation (or to resume that job after a server restart), kept in server memory only for that job, and never stored in our database or written to logs.
6. Your Rights
You may exercise the following rights:
- Request account deletion and removal of personal data
- Delete your own Tripo API key stored in the browser at any time (on the 3D Creator page)
- Delete or block cookies through browser settings
- Disable personalized ads in Google Ad Settings (https://adssettings.google.com)
7. Children's Privacy
This Service is not intended for children under the age of 14, and we do not knowingly collect personal information from children.
8. Changes to This Policy
This Privacy Policy may be updated due to changes in laws or service policies. Changes will be posted on this page, and significant changes will be announced through the service.
9. Contact
If you have questions about this Privacy Policy, please contact us at:
Email: [email protected]
