Privacy Policy

1. Who we are

Shower Caddy ("we", "us", "our") operates the website at showercaddy.io and the parametric 3D configurator available at showercaddy.io/app/. We are the data controller for the personal data described in this policy.

2. What data we collect

Information you give us

• Email address — collected at checkout when you choose to receive a magic-link so you can re-access your downloads. Providing your email is optional; you can download without it.
• Caddy configuration parameters — the pipe diameter, basket dimensions, and print settings you enter into the configurator. These are stored temporarily for the duration of your checkout session.

Information collected automatically

• Session data — an anonymous session identifier stored in an HttpOnly cookie to maintain your entitlement state. It does not contain your name, email, or any personally identifiable information.
• Server logs — standard web-server access logs (IP address, user agent, timestamp, HTTP status). Logs are retained for 30 days for security purposes and then deleted.

Data from payment processors

Payments are handled entirely by Stripe, Inc. We never see or store your card number, CVV, or billing address. Stripe may share with us a confirmation token, the last 4 digits of your card, and the payment status. Stripe's privacy practices are governed by Stripe's Privacy Policy.

3. How we use your data

• To process your order and deliver your STL files.
• To send you a magic-link email so you can re-download your purchased files (only if you provided an email address).
• To maintain your session entitlement for the duration of your personal or commercial license period.
• To investigate abuse or security incidents using server logs.

We do not sell, rent, or trade your personal data with third parties for marketing purposes.

4. Legal basis for processing (GDPR)

If you are in the European Economic Area, we process your data under the following legal bases:

• Contract performance — to fulfil your order and provide access to purchased STL files.
• Legitimate interests — to maintain security logs and prevent abuse.
• Consent — where you voluntarily provide your email for magic-link access.

5. Data retention

• Session cookie — expires when your license period ends (3 days for Personal Pass; 30 days for Business Monthly).
• Email address — retained for the duration of your license period, then deleted unless you make a new purchase.
• Server logs — deleted after 30 days.
• Rendered STL cache — cached render files are retained for up to 7 days to speed up re-downloads, then purged automatically.

6. Your rights

Subject to applicable law, you may have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Object to or restrict certain processing.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at privacy@showercaddy.io. We will respond within 30 days.

7. Cookies

We use a single HttpOnly session cookie (sid) that is strictly necessary for the service to function. No advertising cookies, tracking pixels, or third-party analytics are used.

8. Third-party services

• Stripe — payment processing. Privacy Policy
• Resend — transactional email delivery. Privacy Policy

9. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top. Continued use of the service after a change constitutes acceptance of the updated policy.

10. Contact

If you have questions about this policy, please contact us at privacy@showercaddy.io.