Legal

Privacy Policy

Last updated: July 17, 2026

In short: the free converter runs entirely in your browser — images you convert are never uploaded for free modes. We keep limited first-party visit counts; account and payment data is processed only if you sign in with Google or pay for AI 3D mode (Stripe).

Where Clarity is enabled, with your analytics consent we associate signed-in visits on approved public pages with a site-prefixed internal account ID to understand visits across devices. Clarity hashes this identifier before transmission. We do not supply your email or name through this feature. Signing out or switching accounts ends the current recording and clears Clarity cookies. Private pages remain excluded. You can withdraw analytics consent in Cookie preferences.

1. Who we are

ImageToSTL.online converts 2D images into 3D printable STL files at https://imagetostl.online/. Contact: [email protected].

2. Free converter

Photo Relief, Logo Extrude, Lithophane and Keychain run locally with Canvas/WebGL. Images are not uploaded or stored. No account is required for these modes.

3. Accounts & AI mode

If you sign in with Google we store your Google subject id, email, name and avatar in our Postgres database. AI Full 3D sends your image to our generation provider (fal.ai) solely to produce your model; we do not keep a durable copy of your upload or the resulting mesh on our servers (results are temporary provider URLs). Payments are processed by Stripe; we store Stripe customer ids and credit balances.

4. Static media

Public marketing assets (demo STLs, sample images, OG image, testimonial avatars) are served from our object-storage CDN. They are not user uploads.

5. Cookies

We use a secure session cookie after sign-in. Theme preference and a random first-party visitor identifier may be stored in localStorage on your device. The identifier lets us count unique page visits without uploading converter images or loading optional third-party analytics before consent.

6. Your rights

Email [email protected] to request access or deletion of account data.

Welcome-credit abuse prevention

To prevent repeated welcome-credit claims, an essential first-party browser cookie lasts up to one year. Our server stores a hashed random browser identifier to limit the welcome offer to once per browser per site. This does not use Google Analytics, track you across sites, or change existing balances or daily check-in rewards. Shared-browser users can still register and use their accounts; contact support if you believe an offer was withheld in error.