Information used for your account
Email sign-in uses your email address. Google sign-in supplies your Google account identifier, verified email, name and profile image. We store these account details, linked sign-in credentials, verification status and account creation time. Google sign-in requests basic identity information only.
Why we use it
We use account information to register you, authenticate your sign-in, maintain your session, restrict access to your account and respond to support requests. Sign-in requests use hashed email and network identifiers to limit automated requests and email abuse.
Services that process it
Vercel hosts the website and provides private file storage. Supabase provides our PostgreSQL account database. Resend delivers requested sign-in links, account welcome emails and support enquiries, and records delivery information. Stripe processes payments and supplies payment references and status; we do not store full card details. When you explicitly start a generation, your photo or approved concept is sent to our 3D generation provider, Meshy, for processing. Google provides identity verification when you choose Google sign-in. Our database and private storage are hosted in the United States; these providers may also process operational data in other countries.
Cookies and security
We use essential cookies to keep you signed in and protect the login process. Session cookies are HTTP-only and secure on the live website. Email links expire after an hour and work once. Signing out revokes your active session. We do not sell your account information or use Google account data for advertising.
Keeping and deleting your information
Account records remain while your account exists. Session access expires after up to 30 days; expired email links cannot sign you in. Providers may retain operational and delivery logs under their own retention policies. Contact us to request a copy or correction of your account information, or deletion of your account and its linked sessions. You can also remove Bobble Studio’s Google connection in your Google Account settings.
Portraits, creations and support
We store your cropped photo, concepts, generated models, print files, task identifiers, generation settings, timings and credit usage in your private account namespace. Other customers cannot access these files. We use them to fulfil the generation you request, resume tasks and investigate failures. Public examples are published only when separately authorised. Support messages and delivery records are used to respond to enquiries. Contact us to request removal of your portraits and files. Account records remain until deletion is requested; payment records may be retained where required for tax, accounting or dispute handling. We do not automatically use customer uploads as promotional assets.
Data controller and contact
Richard Moore, trading as Bobble Studio, is the data controller. His address is 6 Farm Lane, Send, Woking, Surrey, GU23 7AT. He is registered with the Information Commissioner’s Office under reference ZC239393 — view the official register. Contact support@bobble.studio about your account or personal data.
Your data rights
You can contact us to request access, correction or deletion of your personal information, or to raise a concern about how it is used. You may also complain to the Information Commissioner’s Office.