Privacy

What we collect

When you browse dfma.tools: we don't track you. No analytics, no advertising or tracking cookies, no tracking pixels. The site is static HTML served by Cloudflare Pages. Like any web host, Cloudflare sees your IP address and browser details in order to deliver the page and filter abusive traffic, and it may run an automated bot check to do that. We keep no visitor logs of our own and we don't use any of that to identify you.

When you purchase a product: Stripe collects your payment information under Stripe's privacy policy (see stripe.com/privacy). We never receive or store your card number. Stripe tells us your email address, which product you bought, and its own reference IDs for the checkout, the customer, and the payment. We record those in our license database alongside the license we issue you, and we email you the license file.

When you use the support form: the product and inquiry type you picked, your name if you give one, your email address, your subject and message, and any file you attach. We also record the IP address and browser user-agent the form was submitted from, to deal with spam and abuse. The form is protected by Cloudflare Turnstile, which runs a check in your browser under Cloudflare's privacy policy. A copy of your request is emailed to our support inbox.

When you email support: your email address and the contents of your message, kept as a normal email thread for as long as the conversation continues plus a reasonable archive period.

When you sign in to the license portal: the portal at api.dfma.tools/portal lets you download the licenses you own again. You sign in with a one-time link we email to you. Signing in sets one cookie, named pls, that keeps you signed in for up to 30 days. It is used for nothing else. We store the session (your email address and when it expires), and we count sign-in attempts per email address and per IP address to slow down abuse.

When a license is checked online: licenses are verified offline, on your own machine, with no network call. The exception is Elephant Cloud, which is a hosted service and asks our license server whether the license presented to it has been revoked. We keep a count of those checks and the time of the latest one for each license.

When you use Elephant Cloud (optional): the free Elephant plugin keeps everything on your machine. If you turn on Elephant Cloud, the plugin uploads the change-log file it writes on each save, exactly as written. That file contains:

• About the document: its name and its full file path on your computer, the user name and computer name of the machine that saved it, the time of the save, document notes and document user text, the file's size and checksum, units, tolerances, and the Rhino and Elephant versions.
• About each object: its ID, type, layer, name, bounding box, geometry hash, user text, groups, display attributes such as color, and measurements such as length, area, volume, and centroid.
• Layers (names and display attributes) and block definitions, including the file paths of linked blocks.
• A summary of what changed since the previous save.

It does not upload the model geometry. Your license file accompanies each upload so the data lands in your workspace and no one else's. Share links you create can be read by anyone who has the link until they expire (7 days by default, 30 at most) or you delete them.

What we don't collect

• No analytics. No Google Analytics, no Plausible, no Fathom, no anything.
• No cookies on dfma.tools itself. The one cookie we set is the license portal sign-in cookie described above. Stripe sets its own during checkout, which is Stripe's responsibility.
• No advertising trackers. dfma.tools does not advertise.
• No usage telemetry from products. Installed plugins do not phone home to a usage logger, and nothing leaves your machine unless you turn on a cloud feature.
• No location lookups, no profiles, no behavioral data. IP addresses are used only for the spam and abuse controls described above.

What we do with what we collect

• Email addresses are used to send your license file at purchase, to send portal sign-in links you ask for, to answer support requests, and to reach you if there's a problem with your purchase or product.
• License records (ID, product, email, type, dates, and Stripe's reference IDs) are stored in our database to support re-issuance, refunds, and revocation. A full refund revokes the license automatically.
• Support requests are kept so there is a history of your issue. Files you attach are used only to reproduce the issue. We don't redistribute them, and we delete them when you ask.
• We do not sell, rent, or share your data with third parties for marketing purposes. Ever.

Subprocessors

We use the following services that touch your data:

• Stripe -- payment processing
• Cloudflare -- site hosting (Pages), the license, support, and Elephant Cloud services (Workers), databases (D1), file storage for support attachments and Elephant Cloud data (R2), and bot protection on the support form (Turnstile)
• Resend -- email delivery: license files, portal sign-in links, and support-form notifications

Each operates under its own privacy policy. We choose them deliberately for their privacy posture but we don't and can't audit them on your behalf.

Data deletion

Email help@dfma.tools asking for your data to be deleted. We delete your license records, support requests and their attachments, portal sessions, any Elephant Cloud data, and any associated email correspondence. Note: once a license record is gone we can no longer look up or re-issue that license. Stripe keeps its own record of the transaction under its policy.

Data export

Email and ask. We send you what we have on you. Usually just a license ID, product name, purchase date, and email address. Small.

Changes

If we ever change this policy in a way that materially affects what we collect or how we use it, the change will be noted on this page with a date. Material changes affecting existing customers will also be emailed.

• 2026-10-01: corrected the email provider (Resend, not MailChannels) and added the support form, license portal, online license check, and Elephant Cloud sections. These describe how the services already work; nothing about what we collect changed on this date.

Contact

help@dfma.tools.

Last updated: 2026-10-01