Privacy · ButterySpace

Who we are

ButterySpace is operated by DialUpDuo LLC, a limited liability company registered in Arizona, USA. DialUpDuo LLC is the entity responsible for the personal data described in this policy (the "data controller" under GDPR). You can reach us through the contact page or the data request form at the bottom of this page.

Scope of this policy

This policy covers the public ButterySpace web tools at butteryspace.com and the conversion API at api.butteryspace.com. You use the tools anonymously. There are no user accounts, logins, or paid features today. If we introduce account-based or paid features in the future, we will update this policy (or publish a separate one for that product) and tell you before any such feature begins collecting your data.

What we collect, why, and for how long

Data	Purpose	Legal basis	Retention
Files you upload (images, STL models)	Running the conversion you asked for	Contract (doing the thing you asked for)	Processed to produce your result and not retained afterward
The result file we generate (SVG, STL, 3MF, ZIP)	Handing the finished result back to you to download	Contract (doing the thing you asked for)	Up to 24 hours on Cloudflare R2, then deleted automatically
Improvement program files (that session's input and output)	Internal benchmarking to improve our own algorithms	Consent (a separate opt-in, see below)	Up to 30 days, then deleted automatically
Waitlist email and the features you ticked	Telling you when new features launch	Consent (you signed up)	2 years from your most recent signup activity, then deleted
Data request records (email, request type, notes, a hashed IP address, browser info)	Handling your privacy request and keeping proof that we did	Legal obligation	12 months, then deleted
Server logs and per-IP counters (IP address, timestamp, request path)	Rate limiting, the daily free allowance, and abuse prevention	Legitimate interest (keeping the service up and fair)	Allowance counters expire the same day; logs are kept briefly, then deleted
Analytics events (page views, tool events)	Understanding which features get used so we can improve them	Consent where the law requires it; legitimate interest elsewhere	Held by Google Analytics under its retention controls
Advertising data (not yet collected)	Helping fund the free tier once advertising launches	Consent	Set by our advertising partners once advertising is live, see Advertising below

We do not sell your personal data, and we do not use your files for anything beyond returning your result unless you opt in to the product improvement program described below.

Cookies and device storage

Cookies that we or Google set:

Cookie	Type	Purpose	Lifetime
`_ga`, `_ga_ME3W9CS24T`	First-party (Google Analytics)	Distinguish visitors and sessions	2 years
`bc_attr`	First-party (ButterySpace)	First-touch attribution: stores UTM parameters and click IDs (gclid etc.) so conversions can be traced back to the original traffic source	90 days
Google advertising cookies (not yet active)	Third-party (Google AdSense)	Ad delivery, measurement, and (only if you allow it) personalization. Nothing is set until advertising launches.	Set by Google, varies
Sovrn and partner advertising cookies (not yet active)	Third-party (Sovrn and its advertising partners)	Ad delivery, frequency capping, measurement, and (only if you allow it) personalization. Nothing is set until advertising launches.	Set by Sovrn and its partners, varies

Entries in your browser's local and session storage. These stay on your device and disappear when you clear site data:

Key	Purpose	Lifetime
`bs_consent_v2`	Your cookie and consent choices, so we don't ask on every visit	Until you clear it
`bs_geo_cc`	Two-letter country code used to pick the right consent flow	Current session
`bc_sid`	A random analytics session id, so the page views in one visit count as a single session (only set after analytics is allowed)	Current session
`bs-theme`	Your light or dark theme choice	Until you clear it
`bc_pats`, `bc_files`	The free pat allowance display and your recent results list (names, dates, and links; the result files themselves live on our storage for up to 24 hours)	Until you clear them
Editor preferences and hand-offs (`dcToolOrder`, `dcLastTool`, `bs.bc.*` keys)	Remember your tool order, last tool, and editor layout, and carry a file from the home page dropzone into the editor	Until you clear them; the dropzone hand-off is removed as soon as it is read

How consent works by region

EEA, UK, and Switzerland: analytics and advertising are off by default and stay off until you turn them on yourself, through the cookie banner or Cookie settings in the footer. Until you do, nothing optional runs.
Everywhere else: analytics runs by default so we can count visits and see which tools get used. You can switch it off at any time with Cookie settings in the footer. Advertising cookies are always off until you turn them on.
Global Privacy Control: if your browser sends a GPC signal, we treat it as an opt-out. Advertising stays off on that browser and we do not turn analytics on by default.

The product improvement opt-in is never bundled into "Accept all". It is always its own switch.

Product improvement program (opt-in only)

If you opt in via the cookie preferences panel, we may retain a sample of your conversions: the uploaded file (image or STL model) and the resulting output (SVG, STL, 3MF, or converted image), for up to 30 days. Not every opted-in conversion is kept. This data is stored on Cloudflare R2 and used for internal quality benchmarking and to develop and improve ButterySpace's own conversion and repair algorithms, for example by comparing results before and after an algorithm change.

Participation is completely voluntary. The tool behaves identically whether you opt in or not.
We do not sell this data, share it with third parties, or use it to train external AI models.
Retention is capped at 30 days even if consent remains active. After 30 days the files are automatically deleted.
You can withdraw consent at any time by clicking Cookie settings in the site footer and toggling off "Product improvement." Withdrawing consent stops new files from being retained but does not automatically delete files already held under prior consent. Use the data request form below to request deletion of those.

Advertising

We plan to introduce display advertising so the free tier can stay free. Advertising is not running yet. When it launches it may use Google AdSense, Sovrn, or both. Ads will only use cookies if you allow the advertising category, and the networks and their partners may then personalize ads based on your activity across the web. Sovrn works with a number of advertising partners; its authorized sellers are listed in our ads.txt file, and once advertising is on, your device may connect to those partners to request and measure ads. You can refuse or withdraw advertising at any time via Cookie settings or Your Privacy Choices in the footer. You can manage Google's own controls at adssettings.google.com, and read Sovrn's privacy notice at sovrn.com/privacy-policy.

Your privacy choices (US state laws)

California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and a growing list of other states give their residents rights over personal data. We honor these rights for everyone in the US, whichever state you live in:

Know what personal data we hold about you, and get a copy.
Correct it or delete it.
Take it with you in a portable format.
Opt out of "sale", "sharing", and targeted advertising.
No discrimination for exercising any of these rights.

We do not sell personal data for money. When advertising cookies are allowed, ad personalization can count as "sharing" or "targeted advertising" under these laws. You can opt out three ways: the Your Privacy Choices link in the footer, a Global Privacy Control signal from your browser (we honor it automatically), or the data request form below.

Appeals: if we decline a request, you can appeal by replying to our decision email within 30 days, and a human will take a second look. If you are still unsatisfied, your state attorney general's office accepts complaints.

If you are in the EEA, the UK, or Switzerland, you have the right to access, correct, export, and delete your personal data, to restrict or object to processing based on legitimate interest, and to withdraw consent at any time (without affecting processing that happened before you withdrew). Use the form below for any of these. You also have the right to lodge a complaint with your local data protection authority.

International transfers: our infrastructure runs in the United States. Google and Cloudflare are certified under the EU-US Data Privacy Framework and its UK and Swiss extensions; where the framework does not apply, we rely on the European Commission's standard contractual clauses.

Other regions

We extend the same rights to everyone, wherever you live, including under Canada's PIPEDA, Brazil's LGPD, and Australia's Privacy Act. Use the form below and your request gets the same treatment.

Subprocessors

Provider	Role
Cloudflare	Hosting, CDN, edge security, temporary file storage (R2)
Google Analytics	Usage analytics
Google AdSense	Advertising (not yet active)
Sovrn	Advertising (display ad exchange and its authorized partners; not yet active)
Resend	Transactional email (waitlist and data request confirmations)

Children

ButterySpace is not directed to children. We do not knowingly collect personal data from children under 13 (or under 16 where EEA consent rules apply), and the service has no accounts or social features. Color Book is built for parents, teachers, and makers: the adult does the uploading. If you believe a child has submitted personal data, use the form below and we will delete it.

If you upload a child's drawing and you have also opted into the product improvement program, that drawing and its result may be kept for up to 30 days. We store those samples without names or account identifiers and they delete automatically; if you would rather we keep no improvement samples, simply leave the product improvement option turned off.

Security

All traffic is encrypted in transit with TLS. Result files are stored with scoped, expiring access links, and short retention is our main safeguard: the less we hold and the faster it deletes, the less there is to lose. No internet service can promise perfect security, so we engineer for a small blast radius instead.

Changes

We will post a notice on this page at least 14 days before any change that reduces your rights or expands what we collect. Updates that only add detail, fix accuracy, or expand your rights take effect when posted. The 2026-06-12 revision is that kind: it documents existing practice more completely (regional consent behavior, retention periods, our email provider) and adds rights (Global Privacy Control support and an appeal process). The "Last updated" date at the top of this page always reflects the most recent revision.