Privacy Policy

The controller of personal data is Фізична особа-підприємець Саєць Максим Володимирович (Інтернет-магазин Monadruk, Україна, Хмельницька обл., м. Хмельницький, вул. Завадського, 38). We are guided by the Law of Ukraine "On Protection of Personal Data"; for visitors from the EU, the GDPR also applies where relevant. For any question about your data, write to [email protected].

• Account: your email address and sign-in identifier via Google (Firebase Authentication). We never see or store your password.
• Order: name, phone number, delivery method, city and branch or address, comment, estimated price, screenshots of the model from the builder.
• Model: the coordinates of the selected map area, the settings you chose (size, style, engraving, the "my home" marker), the generated files (GLB for preview, 3MF/STL for printing), and the GPX route if you uploaded one.
• Anonymous visit counter (no cookies): page address, referrer, language, country code and a hash that changes every day (the IP address is not stored). More detailed analytics only with your consent to cookies (see "Cookies and Analytics").
• Monadruk Pro subscription: subscription status and period, charge history (amount, date, LiqPay payment ID — no card data) and a record of your consent to the terms (time, terms version, language, country code, hashed IP address). We need it to provide access and, if necessary, to show what exactly you agreed to. Kept while the subscription is active and then up to 3 years for accounting.

Solely to: build your model and show you a preview; fulfill and deliver your order and contact you about it; keep records as a sole proprietor (FOP); measure traffic and improve the website (in aggregated form). We do not sell your data or share it with third parties for advertising.

• Model files and previews (GLB, 3MF/STL, service files) — 90 days from creation, after which they are automatically deleted. The record stays in your account history, but the file becomes unavailable after this period — generate the model again if you need it.
• Models tied to a placed order — together with the order: up to 3 years (the retention period for primary accounting documents).
• Order data (name, phone, delivery) — up to 3 years for the same reason.
• Account and history — until you delete your account (a button in your account) or ask us to.
• Analytics — anonymized records of limited scope (the log is rotated), kept for no longer than 12 months.
• Backup copies of key data are kept for 7 days.

For the website to work, part of the data is processed by services we work with. Each one receives only what it needs for its function:

• Google Firebase Authentication — account sign-in (email, Google identifier).
• Cloudflare — website protection and content delivery network; we only see the visitor's country code, which Cloudflare adds to the request.
• LiqPay (PrivatBank) — online payment. Card details are entered on LiqPay's side; we never receive them.
• Nova Poshta / Ukrposhta — delivery: name, phone, branch or address.
• Telegram — our internal messaging channel: your order card (name, phone, delivery, screenshots) is sent to the team's private chat. No third parties have access.
• OpenStreetMap and Nominatim — the map and place search: only the search text and coordinates are sent, without your contact details.

Model files, orders and accounts are stored on a server under our control in Ukraine; access to it goes through Cloudflare. Only the owner has access to order data.

Without cookies and without your consent, only an anonymous visit counter runs on our own server. When you open a page, we record its address, the referrer, the language, the country code (from Cloudflare) and a hash computed from your IP address and browser data together with the date and a secret key. The hash changes every day, we do not store the IP address itself, and nothing is written to your device. This is how we count daily visitors. The legal basis is our legitimate interest in basic website statistics (Art. 11 of the Law of Ukraine "On Personal Data Protection"; for the EU — Art. 6(1)(f) GDPR). This data is not shared with third parties and is not used for advertising.

Without your consent, the website sets only technical cookies: account sign-in, your chosen language, and the record of your cookie choice itself. After clicking "Agree" in the banner, the following are enabled:

• Our own analytics on our server: page views, clicks and steps in the builder (which scenario, size, and place you chose). No IP address is stored — only a daily hash and country code.
• Google Analytics 4 and Google Ads (conversion measurement) and Meta Pixel — the standard cookies of these services under their own policies. They operate under Consent Mode and are not enabled if you decline.

You can change your choice at any time via the "Cookie Settings" button in the website footer.

If you click "Share in 3D", a page with your model is created, open to anyone who has the link. It contains none of your personal data — only the 3D model. The link works for as long as the model file is stored (90 days).

If you upload a GPX file (for example, an export of your own activity from Strava or another app), we process the route coordinates solely to build your 3D model. This is your own data — we do not publish it, share it with third parties or use it for advertising. The route points are simplified and stored under the same retention periods as model files.

You have the right to know what data we hold, to correct it, or to have it deleted. Your account has a "Delete account and all data" button — it immediately deletes your account, history and model files. Order data remains for the accounting retention period (up to 3 years). You can also send any request to [email protected] — we respond within 30 days.

The service is intended for adults. Orders must be placed by a person aged 18 or over.

If we change our data-handling practices, we update this document and the "Updated" date on this page.

For privacy questions: [email protected].