EtchFire

Privacy policy

Last updated: October 11, 2026

Who we are

EtchFire is operated by [operator] (“we”). For anything about your data, write to contact@etchfire.com.

This policy covers this website, the EtchFire waitlist and the EtchFire app with its online services.

This website

The website sets no cookies and uses no analytics, advertising or third-party scripts. Fonts and images are served from our own hosting.

The Tools page shows videos hosted on YouTube. A video loads only when you press play; YouTube (Google) then receives your IP address and the page you are on, and may store cookies or similar data on your device, under Google’s privacy policy. We use YouTube’s privacy-enhanced mode (youtube-nocookie.com). If you do not press play, nothing is loaded from YouTube.

Our hosting provider records technical logs of requests (such as IP address, time and page) to keep the site secure and working. These logs are kept for a limited time by the provider.

The waitlist

If you join the waitlist we store your email address, the language of the page, the time you signed up and confirmed, and the version of the consent text you agreed to.

We use the address to tell you when EtchFire launches and, now and then, about new tools. The legal basis is your consent (Art. 6(1)(a) GDPR).

We first send one email to confirm the address. Unconfirmed addresses are deleted after 7 days. Every email has an unsubscribe link; when you use it, your address is deleted from the list.

The list is stored on our web hosting and the emails are sent from it.

The contact form

When you write to us through the contact form we store your name if you give it, your email address, the topic, your message, the language of the page and the time it was sent. We use them only to answer you and to follow up on what you asked. The legal basis is our legitimate interest in answering messages, or the steps you ask for before buying (Art. 6(1)(f) and (b) GDPR).

Messages are stored on our web hosting and forwarded to our mailbox. We delete them 12 months after they were sent.

Affiliate applications

When you apply to the affiliate program we store your name, email address, country, the links you send, your audience size, your message, the code you would like, the language of the page and the time. We use them to review your application, to answer you and, if you are approved, to run the program. The legal basis is the steps you ask for before an agreement with us (Art. 6(1)(b) GDPR).

Applications we do not accept are deleted 6 months after our answer. For affiliates, we keep the data while you take part in the program and afterwards for as long as accounting law requires.

On your computer

Your designs, tool settings and sessions, your AI results and your AI Library, exported files and your app preferences are stored on your computer. They are not sent to us.

Your EtchFire account

When you use the app, our server keeps:

  • Your name, email address, language and password (stored only as a secure hash), to provide your account (Art. 6(1)(b) GDPR).
  • Your choice about marketing emails, with the date and where you made it.
  • Your devices: a technical identifier of the computer, its name, the operating system, the app version and when it was last used, to apply the device limit of your license.
  • For the free trial: your email address, the device identifier and a hash of your IP address, so that each person gets one trial (our legitimate interest in preventing abuse, Art. 6(1)(f) GDPR).
  • Your license, plan, AI credits and credit transactions. Records needed for accounting are kept as long as the law requires (Art. 6(1)(c) GDPR).
  • For each AI request: the tool, the type of action, the provider, the names of the fields sent and the credits used. We do not keep your photos, the images generated or the text of your prompts: our server passes them to the provider and returns the result.
  • When you turn an image into vectors (tracing), the image is sent to our server, converted and returned. It is not stored.
  • Price Calculator data: your materials, prices, workshop costs and pricing rules.

AI and other service providers

Some features need outside services. They receive only what the feature needs:

  • ImgBB: the photo you upload in Laser Cut Portrait or Photo to Stained Glass, at a temporary public address, so the AI provider can fetch it. ImgBB deletes it automatically after 10 minutes.
  • kie.ai: the temporary address of that photo and the styling instructions.
  • Google (Gemini): the text you write for AI features, and for some features an image.
  • OpenAI: the same, only as a fallback when the main provider does not answer.
  • OpenStreetMap (Nominatim, Overpass): the place you search for and the map area, sent through our server. The map background in Map Art is loaded by the app directly from the OpenStreetMap tile servers, which see your IP address.
  • Map data providers (such as Mapbox, MapTiler, Amazon terrain data and USGS): the map area requested, for topographic maps.
  • Resend: your email address, name and the message, for account emails (codes, password changes, account deletion, trial and payments).
  • Stripe: payment and billing details, when you buy.
  • The companies that host our servers.

Some of these providers process data outside the European Economic Area, including in the United States. Where they do, we rely on the safeguards the provider offers, such as the EU Standard Contractual Clauses.

Photos of other people

Only upload photos you have the right to use. If a photo shows other people, make sure they agree.

How long we keep data

  • Account data: until you delete your account.
  • Accounting records (credit transactions and invoices): as long as the law requires.
  • Waitlist: until you unsubscribe; unconfirmed addresses for 7 days.
  • Backups of our database are overwritten within 30 days.

Deleting your account

You can delete your account at any time from My account in the app, with your password. Your name, email address, password, language, marketing choice, devices, AI request log and Price Calculator data are deleted, licenses are revoked and remaining credits are lost.

What remains, without anything that identifies you: credit transactions and invoices needed for accounting, and the trial record, where your email address is replaced by a keyed hash so that deleting and signing up again does not give a second trial. The files on your computer stay there until you remove them.

Your rights

You can ask for access to your data, correction, deletion, restriction, a copy in a portable format, and you can object to processing based on our legitimate interest. Where we rely on your consent, you can withdraw it at any time. Write to contact@etchfire.com.

You can also complain to a data protection authority. In Romania this is the ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal).

Children

EtchFire is not meant for children under 16.

Changes

If this policy changes, we update the date at the top. For important changes we let account holders know by email.