Privacy

We collect as little as possible. Family Print Lab stores projects on your computer. Print Lab Cloud processes the account information and data needed for the sharing, requests, remote controls and backups you choose to enable. AI integrations in the desktop app send enabled requests to your chosen provider separately from Cloud.

Who is responsible

Benjamin Favre, Entrepreneur individuel (EI), trading as Webdesign29, 16 rue Poullaouec, 29200 Brest, France, is the data controller. Contact: contact@webdesign29.net.

What we process, and why

Your account: email address, sign-in sessions (stored only as secure hashes). To provide the service (contract).
Linked computers: the name you gave the app, its version, when it was last connected. To deliver answers, shared status and enabled remote commands (contract).
Print requests sent by your app: the child’s first name (or “Your child” if you turned names off), the title, the child’s message, size, colour and a small picture. To show them to you (contract). Each app’s list is replaced every time it reports, so answered requests disappear after about a week, and all of them when you unlink.
Billing: your Stripe customer reference, plan status and credit history. To bill you and keep accounting records (contract, legal obligation: invoices are kept 10 years). What you agreed to at checkout, and any withdrawal or cancellation, is kept as long as the invoice, as proof of your consent and of our acknowledgements.
Shared printer status and queues, only when you enable sharing: printer names, jobs, progress, alerts and queue details. With a paired phone key, those details are encrypted on your computer. Without a phone key, opted-in status and queue data can reach Cloud in plain text. Cloud stores the latest shared state, computer and account links, printer identifiers, state, event type and time, update times and enabled switches to deliver it to your phone (contract).
Remote controls and camera, only when enabled locally: your phone signs pause, resume, stop and Start next commands, which your computer verifies. Command actions, identifiers and times are visible to Cloud. Camera images are encrypted and relayed without being stored; routing includes printer and request identifiers and capture time. Cloud does not hold your phone key (contract).
Encrypted backups, only if you turn on Cloud backup in the app: a copy of your projects and models, sealed on your computer with a recovery key that only you hold. We cannot open them. Cloud keeps the last 7 backups per computer; files older than 90 days are removed by a weekly cleanup. We also keep backup metadata, including computer, name, key identifier, time and file size. You can delete your backups from your account. The backup recovery key is separate from your phone key (contract).
Notifications: your browser’s push address, if you turn notifications on. The notification itself carries no content.
Security: short-lived technical logs and counters to prevent abuse (legitimate interest).

Children

Children do not have accounts. Their first names and messages reach us only through the parent’s own app, and only for the parent to see. We do not profile anyone, show ads, or use tracking. The only cookie is the one that keeps you signed in. To know how the site is doing, we count visits per page and day and installer downloads per system; nothing about the visitor is stored.

Who else handles data

Cloudflare, Inc. (hosting, United States; EU standard contractual clauses and the EU–US Data Privacy Framework)
Stripe Payments Europe, Ltd. (payments, Ireland)
Postmark by ActiveCampaign, LLC (emails, United States; standard contractual clauses)

How long

Your account data is kept while your account exists. Sign-in links expire after 15 minutes and sessions after 30 days. If you ask us to delete your account, we do so within 30 days, except invoices that the law requires us to keep.

Your rights