Privacy Policy
Last updated 13 July 2026
The short version. We keep your email, your plan, your projects and a record of what you exported. We do not sell your data. We do not train anything on your artwork. There are no advertising trackers on this site. Your images are processed in your own browser for the preview; the final file is built on our server, because that is the only way a licence on it means anything.
What we collect
When you make an account
- Your email address, and a hash of your password. We never store the password itself and we cannot read it.
- The date you signed up, and the IP address you signed up from.
We keep the signup IP for one reason and we will say it out loud: to spot people making dozens of accounts to farm free exports. It is not used for advertising, it is not sold, and it is not shared.
When you use a studio
- Your saved projects: the settings, and the artwork you used, so you can open them again.
- A record of every export: which studio, which version, when, and under which licence.
When you pay
We never see your card. Payments are handled by Stripe, who send us only your subscription status and a customer reference. Your card number never touches our server.
What happens to your artwork
The live preview runs entirely in your browser. Your image is not sent anywhere to be previewed.
When you press Export, the settings and the artwork go to our server, which builds the file, stamps the licence on it and sends it back. This is deliberate: if the file were built on your computer, the licence on it would be a suggestion rather than a fact.
We keep the artwork of a saved project so we can reopen it. If you delete the project, we delete the artwork. We do not use your artwork for anything else. We do not train models on it. We do not show it to anybody, unless you choose to post it to the gallery.
Cookies
One cookie: the one that keeps you logged in. There are no advertising cookies, no third party trackers, and no analytics that follow you around the internet. There is nothing here to consent to, because we are not doing the thing you would be consenting to.
We email you for account things: verifying your address, resetting your password, and telling you about a payment. If we ever start a newsletter, it will be something you opt into, and you can leave it in one click.
Who else sees your data
- Stripe, for payments. They see your card. We do not.
- Our email provider, to deliver account emails.
- Nobody else. We do not sell data and we do not share it with advertisers.
Where it lives
On our own server. Not in a data broker's warehouse. The database sits outside the web root and is not reachable from the internet.
How long we keep it, and what happens when you delete your account
What we destroy
When you delete your account we permanently erase your email address, your name, your username, your password, your saved projects and the artwork in them, and every session you are signed in on. Not hidden. Not archived. Removed from the database.
We do it after 30 days, so that you can change your mind, and so that somebody who breaks into an account cannot destroy it before you have noticed.
What we keep, and exactly why
We keep the licence record of each file you exported: which studio made it, when, what licence it carries, and the signature that proves it. We keep these permanently.
Your name comes off them. When your account is deleted, those records stop naming you. Your identity is replaced with an irreversible pseudonym, so the record says what the file is and no longer says who made it.
Three reasons, and we would rather set them out than write "for legal reasons".
- It is the record of a contract. The right to erasure does not extend to data needed for the establishment, exercise or defence of legal claims (UK and EU GDPR, Article 17(3)(e)). A licence is precisely that.
- The law requires it. Records of transactions must be kept for years for tax purposes, whatever anybody asks.
- It protects you. If you sold prints under Merchant, those designs keep their commercial rights for life. That promise is worth nothing if the proof disappears the day you close your account. This record is what lets you, or a marketplace, verify a licence you legitimately paid for, years later.
We also keep a hash of your email address, so we can recognise a returning account without keeping the address. It is not the address, it cannot be turned back into one, and it is deleted after six years, because "kept to defend a legal claim" stops being true once no claim can be brought.
Anything you published to the gallery
You choose, at the moment you delete: take it down, or leave it up credited to a deleted account. We do not decide that for you.
Your rights
You can, at any time:
- See what we hold about you.
- Correct it.
- Export your projects.
- Delete your account, from your account page. You will be shown exactly what is destroyed and exactly what is kept, before anything happens.
Email privacy@meshminter.com and we will do it.
Children
Mesh Minter is not for children under 13, and we do not knowingly collect anything from them.
Changes
If we change this policy in a way that matters, we will email you before it takes effect, rather than quietly editing this page and hoping.