Privacy Policy
Last updated: 14 October 2026
This policy explains what Cutter Canvas (“we”, “us”) collects when you use cuttercanvas.com or the Cutter Canvas Android app, why, and what you can do about it. Cutter Canvas is operated by Charles Ostman, a sole proprietor, at 625 Bluegrass Dr, Wheaton, IL 60189, United States.
What we collect
- Google account details. If you sign in, we receive your Google account identifier, name, email address, and profile picture from Google. We do not receive your password, and we only accept accounts whose email address Google has verified. Signing in is optional — building shapes and exporting STL files works without an account.
- Saved designs and recent history. Cutter outlines, geometry settings, generated images, prompts, and tags are stored against your account when you save them. Signing in also syncs recent cutter, icing, and theme history between devices, including recent history already stored in this browser. Guest history stays on the device.
- Images you trace. Exact photo tracing uploads the image to our server to convert it to an outline, even though this feature is free and does not use AI. Plain-vector SVG import, built-in shape editing, and STL generation run in your browser. If you choose Trace SVG appearance for artwork with clips, masks or CSS, your browser renders a PNG and uploads that image for free tracing without AI. The original SVG is not sent by this action. Choosing a cloud save uploads the content needed for that feature. Existing physical order files remain available for fulfillment and support; new physical orders are closed.
- Prompts and images you submit to AI features. Text prompts, uploaded photos, and reference images are sent to Google's Gemini API to generate a result. Google may retain these submissions and results for abuse monitoring under its Gemini data handling policy.
- Order details and correspondence. For existing printed-cutter orders: design/model files, reference images, descriptions, size and quantity, mockups and approvals, your shipping name and address, email, and shipment tracking details. We also process messages you send about an order or a support request. Replies to mockup emails are processed by Resend, recorded with the order, and forwarded to our team; clear approval replies can automatically mark the mockup approved.
- Payment records. Stripe processes web purchases and existing printed-cutter payments. Google Play Billing processes digital purchases in the Android app. We receive transaction identifiers and purchase details to verify payment, add credits or storage, and handle refunds. Google Play purchase tokens are linked to your account for purchase verification and recovery. We do not receive or store your full card number.
- Notifications. If you turn on push notifications, we store a browser push-subscription endpoint linked to your account. Your browser or device push provider delivers a signal, and the app fetches the notification details from our server. The push signal itself contains no order or message content. In-app notification records include the related order, event, and read status.
-
Analytics. Which page and tool you used, the browser you used it in, and
where you arrived from. This covers Google Analytics 4 and our own usage records, kept in
our Google Cloud account. Our own records can include a session identifier and, when you
are signed in, your account identifier and email. With analytics enabled we also measure
page loading, responsiveness, layout shifts, and a broad viewport-size category; those
performance events do not include image content, DOM text, or raw URL query strings.
If you are in the UK, EU, or EEA, analytics storage and our own usage records stay off until you accept the prompt shown on your first visit. Google Analytics runs in Consent Mode and may send cookieless measurement pings while storage is denied. Denying storage does not mean no network data is sent to Google. Our own usage records and page-performance reporting remain off until analytics is enabled.
Everywhere else, analytics is on by default and you can turn it off at any time using the control under “Your choices” below. We also honour the Global Privacy Control signal if your browser sends one. The app works identically either way. - Advertising measurement. If you reached us from a Google ad, we measure whether that ad led to a purchase. Outside the UK, EU, and EEA this uses Google’s advertising cookies, which are on only while analytics is on and go off with it. We do not use them for personalised advertising or remarketing, and we do not build advertising audiences from what you do here. In the UK, EU, and EEA they are off entirely, and accepting the analytics prompt does not turn them on.
- Transaction records. Purchases and credit activity (what you bought, what it cost, credits spent and refunded) are kept as business records whether or not you accept analytics. We need them to run accounts, honour refunds, and meet tax and accounting obligations.
- Email list. If you enter your email address to hear about new shapes and guides, we store that address, the date, and which page you entered it on. Nothing else, and only if you type it in - signing in or ordering does not add you.
- Server logs. Standard request logs, including IP address, retained for security and debugging for 30 days.
- Abuse-prevention counters. To stop automated sign-in attempts, checkout spam and mass newsletter signups, we count recent requests against the IP address they came from. These counters hold a request count and a timestamp — no name, no email, nothing about what was requested — and are deleted automatically within a few hours.
Why we use it
- To provide the app: tracing images, generating designs, syncing your work, and fulfilling existing print orders.
- To send order confirmations, mockups, approval reminders, shipment updates, and notifications you enable.
- To take payment and prevent fraud and abuse, including limiting free credit grants.
- To understand which features are used, unless you have turned analytics off.
- To measure whether an ad we paid for led to a purchase, unless you have turned analytics off or are in the UK, EU, or EEA.
- To respond when you contact support.
Where the UK or EU GDPR applies, our lawful bases are performance of a contract (providing the app and fulfilling orders), legal obligation (keeping transaction records for tax and accounting), legitimate interests (security and abuse prevention), and consent (analytics only, which you may withdraw at any time). Outside the UK and EEA we rely on our legitimate interest in understanding which features are used, and you may opt out at any time.
Who we share it with
We do not sell your personal information. We share it only with providers that run the service:
- Google Cloud — hosting, database and file storage, image tracing, and the analytics and transaction records described above.
- Google Gemini API — processes prompts and images you submit to AI features.
- Google Identity — sign-in.
- Google Analytics — usage analytics under the consent settings described above, including possible cookieless pings when analytics storage is denied.
- Google Ads — measures whether an ad led to a purchase. Outside the UK/EEA only, and only while analytics is on.
- Stripe — payment processing; Stripe is an independent controller for your payment data.
- Google Play — Android digital-purchase processing and verification.
- Resend — sending transactional emails and receiving replies to order/mockup emails, including the email addresses, message content, and relevant order details or attachments needed for those messages.
- Shippo and shipping carriers — recipient name and address, parcel and tracking information needed to buy postage, deliver cutters, and track shipments.
- Browser/device push providers — delivering notifications when you enable them. The provider depends on your browser or device; our push request contains no notification message body.
How long we keep it
Saved designs stay until you delete them or close your account. Order records are kept for 7 years to meet tax and accounting obligations — if you close your account first, they are stripped of your name, email, address and app account identifier. Amounts, dates and payment references remain; payment providers may still link those references to their records. Standard request logs are kept for 30 days. Cloud provider administrative audit logs have a separate 400-day retention period.
Daily database backups are retained for 7 days. The backup archive is configured to delete objects after 30 days, followed by a 7-day recovery period. Uploaded-file storage also keeps older file versions and a 7-day recovery period after deletion. Some older versions currently have no automatic expiry. Historical order reference images and mockups may also remain after account deletion; removing an account does not immediately erase every stored copy.
Historical checkouts that were started but never paid for have two cleanup stages. The order details — shipping name, address and email — are scheduled to expire after 24 hours. Files under the pending-order storage prefix become eligible for deletion after 30 days. Background cleanup can run later; the stored-copy exceptions above still apply. The gap is deliberate: if a payment succeeds but the step that files the order away fails, the longer window is what lets us still find your model and send you the cutter you paid for, rather than losing the order to a tidy-up.
Our first-party usage and transaction reporting tables currently have no automatic age-based expiry. Account deletion requests target rows linked to your account in both tables through a scheduled background job after account cleanup completes, with automatic retries when needed. If account cleanup reports an error, retry it or contact support. Deleted analytics data can remain in a 7-day recovery window followed by Google's additional 7-day emergency-recovery period. This is separate from Google Analytics and from retained accounting records.
Email list entries are kept until you ask us to remove you, or until you close your account — closing your account removes your address from the list as well.
Recent design history is limited to a rolling set of recent items. Push subscriptions are removed when you turn push off in the app or delete your account; subscriptions reported expired by the push provider are also removed. Payment, email, and shipping providers may retain their own records under their policies and legal obligations.
Closing your account also leaves abuse-prevention markers keyed to your Google account identifier for one-time signup and referral credit grants. These prevent repeated bonuses through deletion and re-registration. They retain no name, email, or design history. We also keep a session-version marker keyed to your Google account identifier to prevent old sign-in cookies from becoming valid after account deletion or session revocation. This security marker has no automatic expiry and contains no name, email, or design history. Full details.
In the Android app, export counts and reminder timestamps for the optional Google Play review link are stored only in your browser's local storage. This reminder does not send a rating or tell us whether you wrote a review. Clearing site storage removes its history.
Your choices
A saved choice applies to this browser on this device, including other open app tabs when they receive the change. If your browser cannot save it, this page shows an error. Turning analytics off denies analytics and advertising storage and stops our own usage records. Google may still receive cookieless measurement signals.
- Delete any saved design from the app at any time.
- Turn push notifications off in the app’s notification menu, or block notifications in your browser or Android settings. Notification permission is optional.
- Delete your account yourself, from your profile in the app. See Delete your account for removal timing and retained records.
- Download your account records as a JSON file, from the same place in your profile. Uploaded files and retained service logs are not included in this export.
- Turn analytics on or off with the control above, at any time and as easily either way. If your browser has JavaScript disabled, this control is unavailable. Clearing site data resets the choice to the regional default; it does not always turn analytics off.
- Request access to, correction of, or deletion of your information, request a copy in a portable format, or object to processing, by emailing support@cuttercanvas.com. We respond within 2 business days and complete requests within 30 days.
- If you are in the UK or EU and are unhappy with our response, you may complain to your local supervisory authority.
Where your data is stored
We operate from the United States and use Google Cloud for app hosting, databases, and files. The service providers listed above also process information on our behalf or for their payment and delivery services. Processing and storage locations vary by provider; your information may be processed in the United States and other countries outside your home country. Our app hosting region does not determine where every provider stores data. New physical orders are closed; existing print orders ship to US addresses only. We do not currently sell AI credits in the UK, EU, or EEA. The rest of the app is available there, so using it can still involve international processing.
Children
Cutter Canvas is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has given us personal data, email us and we will delete it.
Changes
We will update the date at the top when this policy changes, and give notice in the app for material changes.