Privacy Policy

We collect the following categories of information:

• Account information. When you sign up, we collect your name, email address, and password (stored only as a secure cryptographic hash). If you sign in with Google, we receive your name, email address, and profile picture from Google.
• Order & profile information. Phone number, shipping address(es), order history, and any notes or messages you send us about an order.
• Uploaded 3D files. The 3D model files you upload (e.g. STL, OBJ, STEP, 3MF) and the print configuration you select (material, color, layer height, quantity). See Section 6.
• Payment information. Payments are processed by our payment provider (Midtrans). We do not collect or store your full card or banking details on our servers; we receive only the transaction status and a payment reference.
• Communications. Messages exchanged through our order chat, contact form, or email.
• Technical & usage data. IP address, browser type, device information, pages viewed, and similar diagnostic data collected automatically.

We use your information to:

• Create and manage your account and authenticate your sign-ins;
• Generate instant price estimates by analyzing (slicing) your uploaded models;
• Process, manufacture, fulfil, and ship your orders;
• Process payments and send receipts and order updates;
• Provide customer support and respond to your messages;
• Detect, prevent, and address fraud, abuse, and security issues;
• Comply with legal obligations and enforce our Terms of Service.

We use a strictly necessary session cookie to keep you signed in across our sites on the superfreakstudio.com domain. This cookie is essential to the operation of the Service and does not track you for advertising. We do not use third-party advertising cookies.

We do not sell your personal information. We share it only with trusted service providers who process it on our behalf, and only to the extent necessary to operate the Service:

• Midtrans — payment processing;
• Cloudflare R2 — secure storage of your uploaded files and order assets;
• Resend — sending transactional email (verification, password reset, order and payment notifications);
• Google — optional sign-in with your Google account;
• Shipping couriers and logistics partners — to deliver your orders (we share your name, address, and phone number for delivery).

We may also disclose information when required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets.

If you choose to sign in with Google, we access only your basic profile (name, email address, and profile picture) through the openid, email, and profile scopes. We use this data solely to create and authenticate your account. We do not request access to Gmail, Drive, Contacts, or any other Google service, and we do not sell or transfer Google user data to third parties except as needed to provide the Service.

The 3D models you upload remain your property. We use them only to provide the Service — to generate quotes, manufacture your order, and provide support. We do not share your files with anyone other than the service providers and production partners needed to fulfil your order, and we never sell them.

Files uploaded for a quote that do not result in an order are treated as temporary and are automatically deleted after a short retention window. Files associated with a paid order are retained so we can produce, re-print, or support your order.

We retain your personal information for as long as your account is active or as needed to provide the Service, comply with our legal obligations (such as tax and accounting requirements), resolve disputes, and enforce our agreements. Temporary upload files are deleted automatically as described in Section 6. You may request deletion of your account at any time (see Section 9).

We protect your information using industry-standard measures, including encrypted connections (HTTPS), hashed passwords, access controls, and storage with reputable infrastructure providers. No method of transmission or storage is completely secure, so while we strive to protect your information, we cannot guarantee absolute security.

Subject to applicable law, you may request to access, correct, update, or delete your personal information, or object to or restrict certain processing. You can update most account details directly in your profile, or contact us using the details in Section 13. We will respond within a reasonable timeframe.

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

We are based in Indonesia, and our service providers may process and store data in other countries. Where information is transferred across borders, we take steps to ensure it remains protected in accordance with this policy.

We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Last updated” date above and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or how we handle your information, contact us at hi@superfreakstudio.com.

Superfreak Studio — PT Orang Aneh Super, Indonesia.