Privacy and Cookie Notice
Website and software · last updated: 24 September 2026
This notice is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and covers both browsing the 3dgsoftware.com website and using the 3DG software.
1. Data controller
Guido Bazzotti, trading as “3DG” (the “Controller”)
Certified email (PEC) [email protected] — Mantua, Italy
VAT IT01914500200
Email: [email protected]
2. Browsing the website
The Controller collects no personal data while you browse and uses no tracking, analytics or profiling tools. Cloudflare, Inc., which hosts the website, processes the IP address of your device in order to deliver the pages and protect the site from abuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Cookies
The website uses technical cookies only, for which no consent is required: the security cookies that the infrastructure (Cloudflare) may set to protect the site from abuse, and a value stored in your browser to remember that you have closed the cookie notice. There are no profiling cookies, no analytics and no third-party content: the fonts are also served by the site itself, and browsing involves no requests to other services.
3. Use of the software: data processed and purposes
Your work files never leave your computer. The camera computation runs on your computer: photographs, models and file names are never sent to the Controller or to anyone else. Only the licence data described below reaches the Controller's servers.
The software relies on an online licensing system, for the operation of which the following data are processed:
| Email address | Provided by you for the free trial, or given at the time of purchase. It is used to send the verification code and the licence key, to associate the licence with you and for support communications. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). |
|---|---|
| Computer identifier | Generated by the software as a cryptographic fingerprint (SHA-256 hash) of a system identifier: it contains no serial numbers in clear text. It is used to associate the licence with the registered computers and to count the workstations in use. Legal basis: performance of a contract and legitimate interest in preventing misuse (Art. 6(1)(b) and (f) GDPR). |
| Computer name | Read from the operating system, to show you which of your computers is using the licence. Legal basis: performance of a contract. |
| Software version and host program | The version of the plugin and the name and version of the 3D program in which it is installed, sent on every activation and check, for support purposes and to ensure the compatibility of updates. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). |
| Sales channel | Where the software was downloaded from a reseller's website, the reseller's code, sent with the trial request, in order to attribute the sale. Legal basis: legitimate interest. |
| IP address, date and time of requests | Logged by the server on every activation and check, for security, prevention of misuse and troubleshooting. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). |
| Licence key, licence type and status | Generated by the licensing system, to manage the licence and provide support. Legal basis: performance of a contract. |
| Payment and billing data | Collected by Paddle at checkout. The Controller has no access to payment data. Legal basis: performance of a contract and compliance with legal obligations. |
The software also periodically retrieves from the website the list of available versions, in order to notify updates; this request contains no data about you other than the IP address, processed by Cloudflare as described in section 2.
4. Recipients of the data
The data are processed by the following providers, acting as processors on behalf of the Controller:
- Cloudflare, Inc. — licensing servers, database and website hosting;
- Resend, Inc. — sending of the emails containing the verification code and the licence key;
- the provider of the email service for the support mailbox.
Payment, by contrast, is handled by a party that does not act on behalf of the Controller:
- Paddle.com Market Ltd (United Kingdom) and Paddle.com Inc. (United States) — reseller acting as merchant of record: Paddle is the seller to the customer, collects the price and taxes and issues the invoice. It processes purchase data as an independent controller under its own privacy notice, and provides the Controller with the email address and the order details needed to issue the licence.
Cloudflare, Inc. and Resend, Inc. are established in the United States: data are transferred on the basis of the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework, in which both participate, and of the standard contractual clauses contained in their respective data processing agreements. The email service provider is established in Italy and stores the data within the European Economic Area.
The data are never sold or disclosed to third parties for marketing purposes.
5. Retention period
| Licence, registered computers, email | For the whole duration of the licence and for 10 years thereafter, in order to prove the licence entitlement and protect the Controller's rights (ordinary limitation period) |
|---|---|
| Free trial not followed by a purchase | 24 months from registration, in order to prevent repeated trials |
| Correspondence with support | 24 months from the last exchange; longer only where necessary to handle a dispute, until it is concluded |
| Technical events with IP address | 12 months |
| Verification codes sent by email | 10 minutes |
6. Your rights
You may exercise at any time the rights set out in Articles 15–22 GDPR, and in particular request access to your data, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest, by writing to [email protected]. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
Erasure of the licence data makes it impossible to use the software, whose operation depends on the online check.
7. Whether providing the data is mandatory
Providing the email address and the computer identifier is necessary in order to use the software: without them, the trial and the licence cannot be activated.
8. Security
Communications between the software and the Controller's servers take place over an encrypted connection (HTTPS). Licence authorisations are digitally signed by the server and verified by the software. The computer identifier is stored only in hashed form.
9. Changes
This notice may be updated; the version in force is the one published on this page, with the date shown at the top.