MeshShot privacy policy
Last updated: 19 September 2026
The short version. Your 3D models, images and renders never leave your computer. MeshShot does the work in your browser, and there is no server to send files to. The only personal data we handle is what's needed to sell and support a licence.
1. Who we are
MeshShot is operated by ProFigma, a sole proprietorship based in Udupi, Karnataka, India ("we", "us"). ProFigma is the data controller for the limited information described below. If you have any question about this policy or about your data, or if you want to exercise any of the rights in section 8, contact us at sales01@profigma.com and we will reply directly.
2. What MeshShot does with your files
This is the part most people want to know, so it comes first.
- When you open a 3D model, the file is read by your browser directly from your disk. It is not uploaded.
- All rendering, previews, stills, video, GIF, PNG sequences, happens on your own machine using your own graphics hardware.
- Exported files are written straight to your downloads folder. They do not pass through us.
- We have no copy of your models, your renders, or your project. We could not retrieve or inspect them if we wanted to, and we cannot supply them to anyone else.
3. What is stored in your browser
MeshShot keeps a small amount of information in your browser's local storage. This stays on your device and is not sent anywhere.
| What | Why | How long |
|---|---|---|
| Your licence key and its verification result | So you don't re-enter it every visit | Until you remove it or clear site data |
| Whether you've seen the walkthrough | So the tour doesn't reappear every time | Until you clear site data |
| Your name, email and avatar, if you sign in with Google | To show who is signed in | Until you sign out or clear site data |
| Your cookie choice (Accept or Decline) | So the cookie bar isn't shown on every page | Until you clear site data |
| Google Analytics cookies, only if you accepted | To count visits and recognise a returning browser | Up to 2 years, or until you clear site data |
Meta Pixel cookies (_fbp, _fbc), only if you accepted | To measure whether our Facebook and Instagram ads lead to visits and purchases | Up to 90 days, or until you clear site data |
| Whether you've made your first export, only if you accepted | So the "first export" ad measurement is counted once | Until you clear site data |
You can delete all of it at any time by clearing site data for meshshot.com in your browser, or by using Remove licence from this browser and Sign out in the app.
4. Personal data we process
4.1 When you buy a licence
Purchases are handled by Gumroad, who act as the merchant of record. You give your payment details to Gumroad, not to us, we never see or store your card details. Gumroad provides us with your email address, the product bought, and the transaction details, which we use to fulfil the order and to support you.
Gumroad's own handling of your data is governed by their privacy policy at gumroad.com/privacy.
4.2 When you activate a licence
When you enter a licence key, the app sends that key and the product identifier to Gumroad's licence verification service to confirm it is valid. No other information about you or your work is included in that request.
4.3 If you sign in with Google
Signing in is optional and MeshShot works fully without it. If you do sign in, Google provides your name, email address and profile picture. This is used only to display who is signed in, is stored in your browser, and is not transmitted to us or to any third party.
4.4 When you contact us
If you email support, we hold your message and address so we can reply and keep a record of the issue. If you choose to attach a file to help us reproduce a problem, we use it solely for that purpose and delete it once the matter is resolved.
4.5 When you send feedback from inside the app
Both the web app and the Figma plugin have a Send feedback form, reached from the speech bubble in the header. It is never sent automatically: nothing leaves your device unless you write a message and press Send.
What is sent is your message, the email address you optionally give us so we can reply, and a short technical note that makes a bug report actionable: your browser's user agent string, the size of the window, your browser's language setting, and whether you were using the website or the Figma plugin. It is sent to a script on our own server, which emails it to us. No form or feedback service sits in the middle.
Nothing about your work is included. Not your 3D model, not your Figma file, not your scene, not a render, not a file name. We use what you send only to answer you and to fix what you reported.
4.6 If you ask to be kept posted
The website has a box where you can leave an email address to hear about new features. It is optional, and nothing else on the site depends on it.
Your address is stored on our own server and we are told when someone joins. We do not use a mailing list provider, so your address is not handed to a third party simply for asking to be kept informed. We use it only to send occasional news about MeshShot, and every message carries a one-click unsubscribe. Ask us at any time and we will delete your address.
5. Analytics, advertising measurement and cookies
5.0 Counting page views
Every page records that it was viewed. This is done on our own server and records three things: which page, which site you arrived from, and the date.
It sets no cookie, stores nothing on your device, and records no IP address, no browser details and no identifier of any kind. It counts views rather than people and cannot tell a returning visitor from a new one, or link one page view to another. Because nothing about you is involved, there is nothing to consent to and it is not covered by the choice below. Everything in the rest of this section is different, and does wait for your consent.
On the website pages (this page, the home page, features, pricing, support and the legal pages) we use Google Analytics 4 to count visits and see which pages people find useful, and the Meta Pixel to measure our Facebook and Instagram ads. Both run only if you press Accept on the cookie bar. Until then, and permanently if you press Decline, or if your browser sends a "Do Not Track" or Global Privacy Control signal, neither script is loaded and no analytics or advertising cookie is set.
If you accept, Google Analytics sets cookies to recognise a returning browser and receives your page address, referring page, approximate location derived from a truncated IP address, and browser and device type. Advertising features and personalisation signals are switched off, so this data is not used to build an advertising profile of you. Google acts as our processor; see Google's privacy policy. Our lawful basis is your consent, and you may withdraw it at any time by clearing this site's cookies and site data in your browser, after which the bar appears again.
If you accept, the Meta Pixel sets cookies and tells Meta Platforms which of our pages you visited and when you do one of these things: open the editor, make your first export, or click through to buy Pro. Purchases made on Gumroad are also reported to Meta by Gumroad. With each event Meta receives the page address, your IP address, browser details, and the Meta cookie identifiers, which Meta can link to a Facebook or Instagram account you are logged in to. We use this to see which ads work and to show our ads to people who visited but did not buy. The Pixel never receives your 3D files, renders, project contents or licence key. Meta acts as a joint controller for this data; see Meta's privacy policy. Our lawful basis is your consent, which you can withdraw in the same way as above.
The editor at /app/ never shows a cookie bar and never loads Google Analytics. It loads the
Meta Pixel only if you already pressed Accept on the website, and then sends only the events above. If you declined, or
never saw the bar, nothing you do in the editor is measured or transmitted.
Apart from that, the app stores only the items listed in section 3, which are strictly necessary for it to function and to remember your licence, plus your cookie choice itself.
Pages on this website may be served through a hosting provider or content delivery network, which routinely records technical information such as IP address, browser type and time of request in its server logs for security and reliability. We do not use these logs to build a profile of you.
6. Third parties we rely on
| Service | Purpose | What it receives |
|---|---|---|
| Gumroad | Payments and licence verification | Your payment and contact details; your licence key at activation |
| Google Analytics (only if you accept) | Counting visits to the website pages | See section 5 |
| Meta Platforms (only if you accept) | Measuring and retargeting our Facebook and Instagram ads | See section 5 |
| Google Sign-In (optional) | Signing in, if you choose to | Handled by Google under their own policy |
| jsDelivr (code export only) | Serves the 3D library used by the demo page you download | Nothing from MeshShot; applies only when that page is opened |
| Website hosting / CDN | Serving this site and the app | Standard server log data |
7. How long we keep things
- Purchase records: for as long as required for accounting and tax purposes.
- Support emails: typically up to 24 months after the conversation ends.
- Anything in your browser: entirely under your control; delete it whenever you like.
8. Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or erased, to object to or restrict how we use it, and to receive a copy in a portable format. To exercise any of these, email sales01@profigma.com and we will respond within the period required by applicable law.
If you are in the EU, UK or a comparable jurisdiction and are unhappy with our response, you may complain to your local data protection authority.
9. Children
MeshShot is a professional tool and is not directed at children. We do not knowingly collect personal data from anyone under 16.
10. Security
The strongest protection here is structural rather than procedural: because your files are never transmitted, there is no store of customer work to be breached. For the limited personal data we do hold, we use reputable providers and restrict access to those who need it.
11. Changes to this policy
If we change this policy we will update the date at the top. Material changes will be announced on this page before they take effect.
12. Related
See also our terms & conditions, our refund policy, and support. To see what the app actually does with a model, read the feature overview.