Privacy

Photo2STL is operated by Melvin Global LLC and is designed to process an image without creating an account or permanent cloud library. Uploaded image bytes and generated model bytes are held temporarily in the generation service. Results are available for up to 45 minutes from submission, then expire automatically.

What is temporarily processed

We process the image you select, generation settings, anti-abuse verification, an opaque job identifier, queue timing, and technical error information. The browser keeps the delivered model in live page memory so you can inspect and download it. We do not ask for a name, profile, account, or email address to generate a model.

What we do not intentionally store

Images and generated models are not placed in a public gallery, user database, analytics payload, or session-replay recording. Temporary results expire automatically. Files you download remain on your own device until you delete them.

Browser storage

Photo2STL sets a signed, HttpOnly cookie named p2s_anon for up to one hour. It supplies an opaque browser identifier used for rate limits, one-use generation tickets, and recovery during the 45-minute result window. The browser may also store photo2stl:last-job and photo2stl:last-batch in local storage. Those records contain opaque job handles, model choices, result handles, and expiry times—not image or model bytes. Expired records are removed automatically, and starting over removes the current session record.

Cloudflare anti-abuse service

Cloudflare Turnstile helps distinguish ordinary visitors from automated abuse. Cloudflare may process an IP address, browser and device signals, a challenge response, and related technical data under its own privacy terms. Photo2STL does not send the selected image or generated model to Turnstile.

Ad-free service

Photo2STL is free and ad-free. The converter and guides do not load advertising scripts or use advertising cookies. The service uses Cloudflare for delivery and anti-abuse verification and keeps the private operational records described below.

Operational records

Private operational records help us measure reliability, useful conversions, and automated abuse. For up to 30 days we record timestamps, page paths without query strings, referral domains, country and coarse browser or crawler labels, ticket outcomes, opaque job and session identifiers, model choices, processing times, and artifact formats and byte counts. Network grouping uses a keyed daily hash; raw IP addresses and full user-agent strings are not saved in this operational database.

Accepted uploads are represented by SHA-256 hashes of the exact image file bytes and the ordered front/back image set. These hashes help identify retries and repeated inputs without saving image copies. File names, full referral URLs, search terms, uploaded image bytes, and generated model bytes are not stored in these records. Identical bytes produce the same hash; hashes do not identify a person.

Retention and security

Upload and result access is limited with short-lived opaque handles, signed browser identifiers, HTTPS, rate limits, and automatic expiry. The private operational database automatically removes records older than 30 days. No internet system is risk-free, so do not upload material that you are not permitted to process.

Children and international visitors

Photo2STL is a general-audience service and is not directed to children under 13. Visitors are responsible for using the service consistently with the privacy, consent, and image rights that apply where they live.

Your choices

You can clear this site's browser storage, start over to remove the active recovery record, or leave the site without creating an account. Files you already downloaded remain on your device.

Contact

For privacy questions, contact Melvin Global LLC.