מדיניות פרטיות

1. Who We Are

MY3DBROS is a 3D printing service based in Ra'anana, Israel, operated by Asher Fishman. We sell 3D-printed products and offer custom printing services via my3dbros.com.

Contact: my3dbros@gmail.com

2. Data We Collect

When you place an order, request a quote, or contact us, we collect:

• Full name
• Email address
• Phone number (optional)
• Shipping address
• 3D files you upload (STL, OBJ) for quoting or printing
• Order details (products, quantities, preferences)
• Messages you send us

We do not collect payment card information directly — card data is handled entirely by Stripe and never passes through our servers.

When you browse the site we record anonymous usage statistics (see section 8). If you accept analytics cookies, Google Analytics also collects usage data.

3. How We Use Your Data

Your data is used solely to:

• Process and fulfil your order — legal basis: contract performance (GDPR Art. 6(1)(b))
• Communicate with you about your order or enquiry — legal basis: contract performance
• Send order confirmations and updates — legal basis: contract performance
• Tell you about changes to our policies — legal basis: legal obligation and legitimate interest
• Send newsletters, if you opted in — legal basis: consent (GDPR Art. 6(1)(a)); you can unsubscribe at any time
• Improve our website using aggregated, anonymous statistics — legal basis: legitimate interest (GDPR Art. 6(1)(f))

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. 3D Files You Upload

Files you upload for quoting or printing remain your intellectual property. We use them only to fulfil your order and do not share, publish, or sell them. Files may be retained briefly for order fulfilment and then deleted.

5. Email & Communications

Order confirmation emails and contact replies are sent from my3dbros@gmail.com. By placing an order or submitting a contact form you consent to receiving transactional emails related to your request.

6. Data Retention

We retain order records for as long as necessary for accounting and customer service purposes. Contact messages are retained for up to 12 months. Anonymous site statistics are kept for 395 days. You may request deletion of your data at any time by emailing us.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent for marketing communications

To exercise these rights, email my3dbros@gmail.com.

8. Cookies & Analytics

• Our own site statistics — cookie-free. When you view a page we record the page, the referring site, your approximate location (country/city, from your IP address, which is not stored), device type, browser, how long you stayed, how far you scrolled and which links or buttons you clicked. You are identified only by an anonymous code that changes every day, so we cannot recognise you across days or link the statistics to your name or orders. If your browser sends a "Do Not Track" or "Global Privacy Control" signal, nothing is recorded.
• Google Analytics (GA4) — only loaded if you accept analytics cookies. Sets _ga and _ga_* cookies to distinguish visitors and sessions. These cookies expire after 2 years. Data is processed by Google LLC. See Google's Privacy Policy.
• Vercel Analytics — lightweight, cookie-free site analytics that do not identify individual users.
• localStorage — used to store your cart, quote selections, and cookie consent preference. No personal data beyond what you enter.

You are shown a consent banner on your first visit and may decline analytics cookies at any time. If you decline, Google Analytics is not loaded and no tracking cookies are set.

9. Third-Party Data Processors

We use the following third-party services that may process your personal data on our behalf:

• Stripe — payment processing. When you pay online, your card data is sent directly to Stripe. Stripe is PCI-DSS Level 1 certified. See Stripe's Privacy Policy.
• Supabase — database hosting for orders, messages and site statistics. See Supabase's Privacy Policy.
• Google — Gmail for email, and Google Analytics if you consent. See Google's Privacy Policy.
• Vercel — website hosting and serverless functions. Your request data (IP, headers) passes through Vercel's infrastructure. See Vercel's Privacy Policy.

10. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top of this page reflects the latest version. When we make a significant change we will email customers who have ordered from us before it takes effect.