Privacy Policy

Last updated: 1 November 2026

This Privacy Policy explains how 3DMindNet ("3DMindNet", "we", "us") collects and uses personal data when you use the website and web application available at https://3dmindnet.com (the "Service"), published by FIBATEC. We act as data controller under the EU General Data Protection Regulation (GDPR) and French data protection law.

1. Who we are

2. Data we collect

Account data (Sign in with Google)

You create an account and sign in with your Google account. We only request the basic openid, email and profile scopes. From the identity token Google sends us, we store:

We do not access your Gmail, Google Drive, Calendar, contacts or any other Google data.

Content you create

Spaces, projects, groups, notes, note content (text, Markdown, links), links between notes, colors and 3D layout settings, and the members you invite to your spaces with their role.

Files you upload

Images and documents you attach to notes (max 20 MB per file). We store the file, its original name, type, size and who uploaded it.

Notion integration (optional)

If you connect Notion, Notion gives us an access token for the workspace and the pages/databases you choose to share with the 3DMindNet integration. We store:

When you export or sync in that direction, we create or update pages in your Notion workspace on your instruction. We only access content shared with the integration. Disconnecting Notion marks the connection as revoked and pauses syncing; you can also remove access at any time from Notion's settings.

Public embed links

If you enable sharing on a project, anyone with the link can view a read-only version of that project's graph without signing in. Disable or rotate the link to stop access.

Technical data

Our servers record technical logs (such as IP address, request URL, date and time, browser information) for security and troubleshooting. Your browser's local storage keeps your session tokens, your theme, your cookie choice and a few display preferences.

Audience measurement (only with your consent)

With your consent, we use Google Analytics 4 to measure audience: pages viewed and a few product events (sign-up, login, project creation, embed creation), with IP anonymization enabled. Google Analytics is not loaded until you click "Accept" in our cookie banner, and it never runs on public embed pages. See section 7.

3. Why we use your data and legal bases

Purpose Legal basis (GDPR art. 6)
Creating and managing your account, signing you in Performance of the contract (Terms of Service)
Storing and displaying your content, files and collaboration Performance of the contract
Notion import, export, sync and embeds Performance of the contract, at your request
Security, abuse prevention, troubleshooting (logs) Our legitimate interest in keeping the Service secure
Audience measurement (Google Analytics) Your consent, which you can withdraw at any time
Answering your messages Our legitimate interest / your request

We do not sell your data, we do not use it for advertising, and we do not make automated decisions with legal effects about you.

4. Google user data — Limited Use disclosure

3DMindNet's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, the Google data we receive (account identifier, email, name, profile picture) is used only to create your account, sign you in and display your profile within the Service. We do not transfer it to third parties except as needed to provide the Service, to comply with law, or as part of a merger or acquisition with notice to you; we do not use it for advertising; we do not use it to train AI or machine-learning models; and no human reads it except with your consent, for security purposes, or to comply with law.

5. Recipients and processors

Your data is accessible only to our team, as needed. We use the following providers:

Some of these providers are located in the United States. Transfers rely on the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

6. How long we keep data

7. Cookies and local storage

Name Purpose Duration Consent needed?
accessToken, refreshToken (local storage) Keep you signed in Until logout (session up to 30 days) No — strictly necessary
3dm_consent (local storage) Remember your cookie choice 13 months No
3dmindnet-theme and display preferences (local storage) Remember light/dark theme and graph tips Until cleared No
Google Sign-In cookies (set by Google) Make Sign in with Google work Set by Google No — needed for the sign-in you request
_ga, _ga_* (Google Analytics) Audience measurement Up to 13 months Yes

You can change your choice at any time with the "Cookies" link at the bottom of the home page.

8. Your rights

Under the GDPR you have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, to withdraw consent at any time, and to give instructions about your data after your death (French law). You can edit your display name in the app. To exercise any other right — including deleting your account or receiving a copy of your data — email contact@3dmindnet.com from the address of your account. We answer within one month.

You may also lodge a complaint with the French data protection authority, CNIL (www.cnil.fr), or your local authority.

9. Security

Connections are encrypted with HTTPS. Integration tokens are encrypted at rest. Session tokens are stored as hashes on the server. Access to content is limited by space roles (owner, editor, viewer). No system is perfectly secure; we will notify you and the authorities of any data breach as required by law.

10. Children

The Service is not intended for children under 15.

11. Changes

We may update this policy. We will post the new version here with a new date, and notify you of significant changes by email or in the app.

12. Contact

contact@3dmindnet.com — FIBATEC, 109 avenue du Général de Gaulle, 78140 Vélizy-Villacoublay, France