Skip to content

Privacy Policy

Last updated: 26 May 2026

Your privacy matters to us. Thank you for using Orby. This policy explains how we handle information when you use our studio, website, and related materials—in plain terms: what stays on your device, what might reach us or our infrastructure providers, and what we do not do with your creative work.

Who operates Orby: Orby at orby.studio is operated by Stellan Johansson (Sweden). For privacy questions or requests, email orby-admin@proton.me.

By using Orby, you acknowledge this policy. If you do not agree, please do not use the service.

1. What Orby is

Orby is a browser-based 3D studio that runs in your web browser. You open or load model files from your device (or from sources you choose), and Orby renders, adjusts, and exports them locally for you—materials, lighting, scene settings, stills, video, and similar outputs without uploading your files to us for normal use.

2. Your content and AI

Many creators want clarity on how meshes, textures, scenes, settings, and exports could be reused—especially for machine learning or artificial intelligence (AI).

We do not use your creative content to train, fine-tune, evaluate, or improve AI or machine-learning models for ourselves or for third parties. That includes 3D files you load in the viewer, looks you build with materials and lighting, stills or video you export from Orby, and scene JSON you copy or share on your own. Nothing in normal operation is sent to us so we can retain it, run it through a cloud “ingestion” pipeline, or add it to a training dataset.

If we ever introduced a feature that used your content for AI in a new way, we would describe it here in advance, update the “Last updated” date, and only apply that use after the policy reflects it—so you are not surprised by a quiet change in purpose.

3. Information we collect

3.1 Information you give us directly

If you contact us (for example by email), we may receive your email address, any name you include, and the content of your message. We use this only to respond and provide support.

3.2 Information processed on your device

When you use Orby, model files, textures, scene settings, and similar content you load are processed in your browser on your machine so the viewer can work. Orby is not designed as a cloud storage or upload service for your models; we do not ask you to send us your files in order to use the viewer. This local processing is how you get previews, adjustments, and exports—separate from the AI-training commitment in section 2.

3.3 Technical information

When you visit our website or load the application, standard internet and hosting operations may automatically create technical records. These can include your IP address, browser type and version, device type, date and time of access, and requested URLs. What is logged, and for how long, depends on our hosting and infrastructure providers.

3.4 Issue reports and abuse prevention

The app may include an optional issue report form. If you use it and the feature is enabled on the site you are visiting, your browser sends a submission to an API we configure (hosted on infrastructure such as Vercel). That payload typically includes the category, severity, and message text you enter, plus technical context added server-side (for example browser user-agent and timestamp). Your IP address may be used for rate limiting and, when enabled, to verify an abuse-prevention challenge.

Issue reports do not attach your 3D files automatically. Do not paste confidential model data into the message unless you intend to share it with us for support. When configured, a Cloudflare Turnstile challenge may run before send; Turnstile’s provider may process technical data under its own policy.

We publish a Statistics page with aggregate counters: page visits, assets loaded, and a top file formats scoreboard (for example GLB, OBJ, or SVG). When enabled, your browser sends a minimal signal (for example when a page loads or when you open a model in the studio). We increment anonymous totals only — we do not store your IP address for this purpose, do not use cookies or visitor IDs, and do not receive filenames or file content. Your IP may be used briefly for abuse-prevention rate limiting on the stats API (same pattern as issue reports); we do not keep it in the published totals.

4. Cookies and similar technologies

We do not use cookies or browser storage to track you across other sites or to profile you for advertising. We do not use third-party analytics or ad pixels on Orby. Anonymous usage totals (see section 3.5) do not use cookies.

Orby may use local storage and session storage in your browser for essential or convenience features only—for example UI sound preferences (localStorage), remembering mobile layout or optional access-control state for the current tab (sessionStorage). These values stay on your device and are not sent to us as part of normal studio use.

When the issue-report flow uses Cloudflare Turnstile, Cloudflare may set cookies or use similar technologies as described in Cloudflare’s privacy policy. If we introduce additional cookies or storage for new features, we will update this page and, where required by law, obtain consent.

5. Third parties

Orby loads fonts, scripts, and libraries from third-party hosts so the application can run in your browser. When your browser requests those assets, the provider may receive technical information (such as IP address and request metadata). Examples include:

Their practices are described in their respective privacy policies.

When issue reporting is enabled, we also rely on:

Static site hosting (for example GitHub Pages or Vercel) may also log access to pages and assets. Pages we link to (documentation, standards, credits, or other sites) are governed by their own policies once you leave Orby—we do not control how those sites collect or use data.

If we add analytics, payment processors, or other services, we will list them here and update this policy.

6. How we use information

7. Retention

8. Security

We take reasonable steps to protect information we hold. No method of transmission or storage over the internet is completely secure; we cannot guarantee absolute security.

9. Children’s privacy

Orby is not directed at children under 13 (or the minimum age required in your region). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us at orby-admin@proton.me and we will take appropriate steps.

10. International users

Orby is operated from Sweden. If you access Orby from elsewhere, your information may be processed in Sweden, the European Economic Area, the United States, or other countries where our hosting and service providers operate—those locations may have different data protection laws.

If you are in the European Economic Area, United Kingdom, or another region with privacy laws, you may have additional rights (see section 11). Where required, we will provide further information or safeguards.

11. Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict certain personal information, or to object to some processing. To exercise those rights, email orby-admin@proton.me. We may need to verify your request.

12. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of Orby after changes means you accept the updated policy, except where applicable law requires a different process.

13. Contact

Operator: Stellan Johansson (Sweden)
Email: orby-admin@proton.me
Website: https://orby.studio/