Privacy Policy

The Short Version

Most free 3STF tools process your input locally in your browser. Tools that require an account, payment, server processing, or an external service are clearly treated differently. We use only the information reasonably needed to operate, secure, and support those services, and we do not sell personal information or share it with advertisers.

1. Who Is Responsible

3STF Tools is operated by Fateh Raiyan Ishmum. For privacy questions or requests, email hello@3stf.com.

2. Information We Process

• Free local tools: inputs and outputs remain on your device when the tool is labeled as client-side. We do not receive that tool content.
• Accounts and support: email address, account identifiers, preferences, messages, and information you choose to provide when requesting help.
• Purchases: product, credit balance, transaction identifiers, payment status, country, currency, tax details, and receipt information. Paddle processes complete payment credentials; 3STF does not receive or store full card numbers.
• Premium tool content: prompts, saved character canons, mock-data schemas, picker configurations, uploaded or approved reference material when supported, moderation signals, and generated outputs needed to perform the request and prevent abuse.
• Hosted pickers: choice labels, weights, colors, and picker settings are available to anyone who has the unlisted link for the displayed hosting period. Draw history remains in the visitor's browser and is not sent back to 3STF.
• Technical and usage data: IP address, browser and device details, pages and features used, approximate location, referral information, timestamps, performance data, and security events.

3. Why We Use Information

We process information to:

• Provide accounts, purchases, credit balances, and requested tool results.
• Moderate prohibited content and detect fraud, abuse, and security threats.
• Provide support, transaction notices, and essential service communications.
• Measure reliability and aggregate usage so we can improve the Service.
• Comply with tax, accounting, legal, and regulatory obligations.

Depending on your location, our legal bases may include performing a contract, complying with law, protecting legitimate interests in operating a safe and reliable service, and consent where required.

4. Service Providers

We share information only as needed with providers that help operate the Service, such as:

• Paddle, our merchant of record, for checkout, payments, tax, receipts, fraud prevention, and refunds. See Paddle's Privacy Policy.
• Vercel, for website hosting and infrastructure. See Vercel's Privacy Policy.
• AI processing providers used only to fulfill premium generation requests.
• Email, security, storage, and usage-measurement providers used to operate and protect the Service.

We may also disclose information when legally required, to protect rights and safety, or as part of a business transfer subject to appropriate safeguards.

5. Cookies and Local Storage

We may use browser storage and cookies for theme preferences, authentication, checkout continuity, fraud prevention, and service measurement. You can block or clear cookies through your browser, although some features may then not work. We do not use third-party advertising cookies.

6. Retention

We keep account and transaction records for as long as needed to provide the Service and meet legal, tax, fraud-prevention, and accounting requirements. Support messages and security logs are retained only as reasonably necessary. Saved studio projects and private generated assets remain available with your account until you delete the project, close the account, or a disclosed service limit requires earlier removal. Hosted picker data expires after the period shown at publication, currently 90 days. Moderation, credit-use, dispute, and security records may be retained separately as reasonably necessary. Paddle retains payment records under its own policy.

7. Security and International Processing

We use reasonable technical and organizational safeguards, but no online service can guarantee absolute security. Our providers may process data in countries other than yours. Where required, appropriate contractual or legal safeguards are used for international transfers.

8. Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to withdraw consent. You may submit a request to hello@3stf.com. We may need to verify your identity before completing a request. Payment-related requests may also need to be handled by Paddle.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect their personal information. Premium purchases require the legal capacity to enter a contract or the involvement of a parent or legal guardian. We prohibit sexual or exploitative content involving minors.

10. Changes and Contact

We may update this policy as our Service, providers, or legal obligations change. The updated date will appear above. Questions and privacy requests can be sent to hello@3stf.com or through our contact page.