Privacy

If you never sign in

You can browse every published design, and open any of them in the RapidCAM app, without an account. Doing so stores nothing on your device and creates no record of you.

Downloading a file increases a counter on that design. The counter is a single number — the site does not record who downloaded what, and could not tell you.

If you make an account

Signing up stores:

• Your email address, and a hash of your password. If you sign in with Google instead, Google tells us your email address and name; we keep the name and discard the profile picture it offers.
• Your profile — the username, display name, bio, website and avatar you choose. All of it is public, which is the point: it is what appears beside your designs.

A released username is kept in a reserved list so that nobody else can take it and inherit your old links. That list stores the handle and which account released it, and it is not readable by anyone using the site.

What you post

• Designs you publish, including the file itself, its description and a generated preview. Published designs are public; drafts are visible only to you.
• Photos you post of parts you have made, with anything you write about the machine, tools and cutting time.
• Likes. Worth being plain about: who liked which design is readable by anyone. It is not shown in the interface today, but it is not private.

Photographs are stripped of their metadata before they are stored. Phone cameras write the location the photo was taken into the file, and for most people a workshop is their home. Every uploaded image — make photos and avatars alike — is decoded and re-encoded on the server, which removes the GPS coordinates, the camera model and everything else of that kind. What is stored is an image the server produced, not the file you sent.

Reports

If you report a design or a person, the report records what you chose, anything you wrote, and which account filed it. Only moderators can read reports; the person you reported cannot see them, and neither can you afterwards.

Cookies and analytics

There is one cookie, and only after you sign in. It holds your session so that you stay signed in here. Signing out removes it. Nothing is stored on your device before you sign in.

The RapidCAM app does not use that cookie. When you connect it to your account (the “Connect RapidCAM to rcamhub?” page), it receives its own sign-in token, kept in the app’s storage on your device, which lets it see who you are and save designs to your account. You can disconnect it at any time under Connected appson your account page.

Page views are counted using Vercel Web Analytics, which sets no cookie and stores nothing on your device. It records the page, the referring site, and coarse information such as country, browser and device type. To count repeat visits without identifying anyone it derives a short-lived identifier by hashing your IP address together with your browser details and a salt that is rotated; the IP address itself is not retained. This is used to see whether anyone is finding the site and which designs get looked at.

There is no advertising network, no tracking pixel and no profile built about you across sites.

Who else handles it

The site runs on services that necessarily see some of this:

• Vercel — hosting and the page-view analytics above.
• Supabase — the database, sign-in, and storage for photos and avatars.
• Resend — sends the emails the site has to send: confirming an address, resetting a password. No newsletter, and no marketing email.
• Google — only if you choose to sign in with a Google account.

Nobody else receives your data, and none of it is sold.

How long it is kept

Your account and what you have posted are kept until you delete them. Deleting a design removes the file, its previews and its version history, along with photos other people posted against it. Deleting your account removes your profile and everything attached to it.

Two things outlive that on purpose: a released username stays reserved so it cannot be used to impersonate you, and a report keeps its text so a moderator can act on it.

Your choices

You can edit or clear your profile, avatar, designs and photos yourself from your account at any time. If you want a copy of what is held about you, or want the account deleted outright, email tutti.studios@gmail.com and it will be done.

If you are in the UK or EU, the lawful basis for running the site for signed-in users is performing the service you asked for, and for the page-view counting it is legitimate interest in knowing whether the site works. You can object to that at the address above.

Changes

If this page changes in a way that affects what is collected, the date at the top changes with it.