Privacy policy
Last updated November 12, 2026
This policy explains what CoolBox keeps about you, why, and for how long.
What we keep
- Your email address, to send sign-in links and messages about your account.
- Account details: the roles you are in, with when each was added and when it ends, when the account was made, when you last signed in, and whether you have had a plan or trial before.
- Sign-in requests: the email address and internet (IP) address of each request for a sign-in link, to stop abuse. These are deleted within a day.
- Access codes you redeem, and when.
- Saved files you keep in My Files, and their folders: the designs in them, their names, and when each was last saved.
- Your subscription, if you subscribe: whether it is active or cancelled, when it renews or ends, and Stripe's references for you and your subscription. Stripe handles your payment details, billing address and receipts; we never see or keep your card details.
What we do not keep
Your designs stay in your browser and in the project files you save on your own computer, unless you save them to My Files. CoolBox has no advertising, no analytics and no tracking cookies.
Cookies
CoolBox sets one cookie, which keeps you signed in. It is needed for the site to work and expires after a set time, a day unless we change it.
Who else handles it
We do not sell your information. These services handle it for us, only to run CoolBox:
- Railway, which hosts CoolBox and its database.
- Resend, which sends our emails.
- Cloudflare, which runs our domain name.
- Stripe, through its Link service, which sells the plan to you, takes payments and handles sales tax. It keeps your payment details under its own privacy policy.
How long we keep it
- Your account, until you delete it.
- Your saved files, until you delete them or your account. Like the rest of your account, they stay in backup copies for up to 90 days.
- Server logs, for 30 days. Email and internet addresses in them are shortened, such as l***@example.com and 203.0.113.x. When we are looking into sign-in problems, they also note the kind of browser used, such as Chrome on Windows.
- The logs also count what is used: when you export a piece, the kind of piece, STL or 3MF and how many; when you open a sample, which one. Never your measurements, lettering or files.
- Backup copies of the database, for up to 90 days. A deleted account stays in older copies until they are removed.
- If your account ever had a plan or trial, a one-way scrambled form (a hash) of your email address is kept after you delete the account, so the same address cannot redeem another trial. It cannot be turned back into your address.
Your choices
You can delete your account at any time on the Delete my account page, which the Terms of use also link to. Deleting it cancels your subscription at once. To ask for a copy of what we keep about you, or to correct it, email [email protected].
Children
CoolBox is not meant for children under 13, and they must not make an account.
Changes
When this policy changes, the date at the top changes.
Contact
For any question about your information, email [email protected].