Privacy Policy
Last updated: 2 October 2026
This policy explains what data 3dp.sale collects, why, the legal basis for it, who we share it with, how long we keep it, and the rights you have. Cookies are covered in more detail in our separate Cookie Policy.
Who we are (data controller)
The site is operated by 3D Konsult Månsson, a Norwegian sole proprietorship (enkeltpersonforetak) run by Anton Månsson, who is the data controller responsible for your data. "3dp.sale" is the trading name (the site was called "3DPTD Deals" until October 2026); the legal entity is 3D Konsult Månsson.
- Operator: 3D Konsult Månsson (Anton Månsson)
- Organisation number (org.nr): 922 641 374
- Postal address: Sjøbakken 5, 6260 Skodje, Norway
- Privacy contact: privacy@3dp.sale
The short version
- We only collect your email address if you choose to subscribe to deal alerts.
- Analytics (Google Analytics) is optional and off until you accept it, wherever you are.
- We run no advertising, no cross-site tracking, and no profiling.
- We never sell or share your data, and you can unsubscribe or opt out at any time.
What we collect, why, and our legal basis
The table below is the full picture of what we process. "Legal basis" refers to the article of the EU/EEA General Data Protection Regulation (GDPR) we rely on.
| Data | Why | Legal basis | Shared with | Retention |
|---|---|---|---|---|
| Email address, alert preferences, and the region we show you prices in (your own choice; until you make one, a guess from your approximate location) | Send the deal alerts you subscribed to, and now and then a short update about the site itself | Consent under Art. 6(1)(a) (double opt-in) | Supabase (storage), Resend (delivery) | Unsubscribing stops the emails at once. The record itself is deleted when we have sent nothing to it for 24 months, or straight away when you press "Forget me" on your preference page or ask us. A signup that is never confirmed is deleted after 30 days |
| A copy of each alert we sent you (your address and the email as it went out) | Answer questions about what you were told, and avoid sending the same thing twice | Legitimate interest under Art. 6(1)(f) | Supabase (storage) | Deleted together with your subscription record |
| Delivery failures and spam reports | Stop mailing an address that bounced or reported us as spam | Legitimate interest under Art. 6(1)(f) | Reported to us by Resend; stored by us | Kept with your subscription record so the address is not mailed again; removed with it |
| Incidental copies during development and support | Fixing a bug, or answering a request you sent us, can mean looking at a subscription record, sometimes with the AI coding assistant we build the site with | Legitimate interest under Art. 6(1)(f) | Anthropic (Claude), only if a record is opened in a development session. By rule we work with counts and masked labels instead of addresses, so this is rare | Held by Anthropic for a limited period under its own terms; not used to train AI models (switched off on our account) |
| Email opens & clicks | See whether the alerts are useful | Consent: the subscription opt-in | Resend; Google sees an open if your email app loads our fonts from Google | Held by Resend; not stored in our own database |
| Analytics (pages viewed, session, approximate country, device type, what you type into the home-page search) | Understand how the site is used so we can improve it | Consent under Art. 6(1)(a), wherever you are | Google (Google Analytics 4) | 14 months in Google Analytics; the _ga cookie lasts up to 2 years |
Functional cookies & browser storage (region, td_track, td_tracked, td_eu_strip, cc_reported) | Remember your region; pre-fill your email when subscribing; remember which deals you track and site messages you've closed, so we don't ask twice; note that the cookie banner was answered so it is counted once per visit | Legitimate interest under Art. 6(1)(f) | First-party only (not shared) | region 1 year; td_track and td_tracked 30 days; td_eu_strip until you clear browser data; cc_reported until you close the browser tab |
Consent record (cc_cookie) | Remember and demonstrate your cookie choice | Legal obligation / legitimate interest under Art. 6(1)(c)/(f) | First-party only (not shared) | 1 year |
| Server & security logs (IP address, browser/user-agent, request details) | Serve the site, keep it secure, and prevent abuse | Legitimate interest under Art. 6(1)(f) | Vercel (hosting), Cloudflare (CDN/security) | Short provider-default window (auto-rotated by Vercel / Cloudflare) |
| Outbound affiliate clicks (tracking tags in the link URL) | Attribute referrals so we earn the commission that funds the site | Legitimate interest under Art. 6(1)(f) | geni.us, Awin, impact.com or Amazon; the retailer after you're redirected | No cookie set on our domain. The tag travels in the URL only |
Cookies
We use a small number of functional cookies and, only with your consent, Google Analytics. The full list, including what each cookie does and how long it lasts, is in our Cookie Policy. You can change your choice any time via the Cookie preferences link in the page footer.
Analytics & Google Consent Mode v2
We use Google Analytics 4 with Google Consent Mode v2. Analytics is off until you accept it,
wherever you are. Until then, and if you decline, no _ga cookies are set and
Google receives only anonymous, cookieless pings that cannot identify you (the page, whether
the banner was answered, and what was typed into the home-page search, with anything that
looks like an email address or a number sequence dropped before sending; no cookie and no
identifier). IP addresses are anonymised, and we keep Google Signals turned
off, so there is no cross-device tracking, advertising personalisation, or profiling. Full
detail is in the Cookie Policy.
Email subscriptions & tracking
If you sign up for deal alerts, we store your email address and preferences and use a
double opt-in (you confirm via a link before we send anything). Our email provider, Resend,
measures opens (via a tracking pixel) and clicks (via link rewriting) so we can tell whether
the alerts are useful. The legal basis is your subscription opt-in. Every email includes a
one-click unsubscribe (a standard List-Unsubscribe header) and a link to your preference page. We do not sell or share your email address.
Our emails use two fonts loaded from Google. If your email app loads remote fonts (Apple Mail does, Gmail and Outlook do not), Google sees that an email was opened, with your IP address and the time, but not who you are or which email it was.
Besides the alerts for what you track, we now and then send every subscriber a short update about the site itself (a new feature, a change to how alerts work). It comes from the same sender, carries the same unsubscribe links, and stops with everything else when you unsubscribe.
If an email to you bounces, or you report one as spam, Resend tells us and we stop mailing that address. We keep that note with your subscription record so the address is not mailed again, and it is removed together with the record.
Who we share data with
We use a small set of trusted service providers ("processors") that handle data on our behalf under contract. We do not sell data or share it for anyone else's marketing.
- Supabase (US company): the database that holds deals and your subscription details. Our project runs on their servers in Ireland
- Vercel (US company): website hosting and server logs. Our server code runs in Stockholm; cached pages are delivered from their worldwide network
- Cloudflare (US company): DNS, content delivery and security in front of the site, on a worldwide network
- Resend (US company): sends the confirmation and alert emails, reports bounces and spam complaints, and measures opens and clicks. We send from their European region; their own operations are in the United States
- Google (US company): Google Analytics 4, only with your consent; and the fonts our emails load when opened
- Anthropic (US company): the AI coding assistant (Claude) we build and maintain the site with. By rule it works with counts and masked labels, never your address, but a bug or a support request can put a subscription record in front of it. Training on our sessions is switched off
- geni.us (US): affiliate link routing; URL-based, sets no cookie on our domain
- Affiliate networks: Amazon Associates (US), Awin (Germany) and impact.com (US) handle the referral once you click through to a store (URL-based, no cookie on our domain)
International data transfers
Your subscription data is stored on servers in the EEA (Supabase in Ireland; our server code runs on Vercel in Stockholm) and we send email from Resend's European region. Most of these providers are US companies, though, and some data reaches the United States: analytics after you consent, the content-delivery network in front of the site, Resend's own operations, and the affiliate networks behind our outbound links (geni.us, Amazon Associates and impact.com; Awin is German), and, rarely, the AI coding assistant we develop the site with (Anthropic). Where personal data leaves the EEA, we rely on the providers' Standard Contractual Clauses (SCCs) and, where the provider is certified, the EU-US Data Privacy Framework, with IP addresses anonymised for analytics; for the AI assistant, on keeping addresses out of it in the first place (counts and masked labels by rule) and on Anthropic's own terms. You can ask us for a copy of the safeguards that apply to a given provider. Our own behind-the-scenes automation runs on a server in Norway and never handles subscriber data.
How long we keep your data
Retention periods are shown per item in the table above. In short: unsubscribing stops the emails at once but keeps the record, so we know not to mail you again. The record, and the copies of the alerts we sent you, are deleted when we have sent nothing to it for 24 months, or straight away when you press "Forget me" on your preference page or ask us. A signup that is never confirmed is deleted after 30 days. Analytics data is kept for 14 months in Google Analytics, and server logs are rotated automatically by our hosting providers on their own short schedules. You can ask us to delete your data at any time. See "Your rights" below.
Your rights
If you are in the EEA (including Norway), you have the right to:
- Access: get a copy of the data we hold about you
- Rectification: have inaccurate data corrected
- Erasure: have your data deleted ("right to be forgotten")
- Restriction: ask us to pause processing
- Portability: receive your data in a portable format
- Objection: object to processing based on our legitimate interest
- Withdraw consent: at any time (e.g. unsubscribe, or reject analytics)
We make no automated decisions about you and build no profiles: which alerts you get follows only from what you chose to track. Withdrawing consent does not affect what was lawfully done before you withdrew it.
To exercise any of these, email privacy@3dp.sale. We aim to respond within one month (this can be extended for complex requests, and we'll tell you if so).
If you think we've handled your data improperly, you can complain to the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no), or to the supervisory authority in your own EEA country.
Children
The site is intended for adults shopping for 3D printers and related products. It is not directed at children, and we do not knowingly collect data from anyone under 16. We have no way of checking ages, so if you believe a child has subscribed, email privacy@3dp.sale and we will delete the record.
Changes to this policy
We may update this policy as the site evolves. The "last updated" date above shows when it last changed; if we make a material change, we'll make that clear.
Contact
Data controller: 3D Konsult Månsson (Anton Månsson). For privacy matters, privacy@3dp.sale; for anything else, hello@3dp.sale.
See also our Cookie Policy, Terms of Use, and Affiliate Disclosure.