Privacy Policy
Last updated: 23 June 2026
This policy explains what data 3DPTD Deals (3dp.sale) collects, why, the legal basis for it, who we share it with, how long we keep it, and the rights you have. Cookies are covered in more detail in our separate Cookie Policy.
Who we are (data controller)
The site is operated by 3D Konsult Månsson, a Norwegian sole proprietorship (enkeltpersonforetak) run by Anton Månsson, who is the data controller responsible for your data. "3dp.sale" / "3DPTD Deals" is the trading name; the legal entity is 3D Konsult Månsson.
- Operator: 3D Konsult Månsson (Anton Månsson)
- Organisation number (org.nr): 922 641 374
- Postal address: Sjøbakken 5, 6260 Skodje, Norway
- Privacy contact: privacy@3dp.sale
The short version
- We only collect your email address if you choose to subscribe to deal alerts.
- Analytics (Google Analytics) is optional and, in the EEA, off until you accept it.
- We run no advertising, no cross-site tracking, and no profiling.
- We never sell or share your data, and you can unsubscribe or opt out at any time.
What we collect, why, and our legal basis
The table below is the full picture of what we process. "Legal basis" refers to the article of the EU/EEA General Data Protection Regulation (GDPR) we rely on.
| Data | Why | Legal basis | Shared with | Retention |
|---|---|---|---|---|
| Email address & alert preferences | Send the deal alerts you subscribed to | Consent — Art. 6(1)(a) (double opt-in) | Supabase (storage), Resend (delivery) | Until you unsubscribe or ask us to delete it; auto-removed if never confirmed (30 days) or after 24 months with no alert sent |
| Email opens & clicks | See whether the alerts are useful | Consent — the subscription opt-in | Resend | Held by Resend; not stored in our own database |
| Analytics (pages viewed, session, approximate country, device type) | Understand how the site is used so we can improve it | EEA: consent — Art. 6(1)(a). Outside the EEA: legitimate interest — Art. 6(1)(f), with an opt-out | Google (Google Analytics 4) | 14 months in Google Analytics; the _ga cookie lasts up to 2 years |
Functional cookies (region, td_track) | Remember your region; pre-fill your email when subscribing | Legitimate interest — Art. 6(1)(f) | First-party only (not shared) | region 1 year; td_track 30 days |
Consent record (cc_cookie) | Remember and demonstrate your cookie choice | Legal obligation / legitimate interest — Art. 6(1)(c)/(f) | First-party only (not shared) | 1 year |
| Server & security logs (IP address, browser/user-agent, request details) | Serve the site, keep it secure, and prevent abuse | Legitimate interest — Art. 6(1)(f) | Vercel (hosting), Cloudflare (CDN/security) | Short provider-default window (auto-rotated by Vercel / Cloudflare) |
| Outbound affiliate clicks (tracking tags in the link URL) | Attribute referrals so we earn the commission that funds the site | Legitimate interest — Art. 6(1)(f) | geni.us; the retailer after you're redirected | No cookie set on our domain — the tag travels in the URL only |
Cookies
We use a small number of functional cookies and — only with your consent — Google Analytics. The full list, including what each cookie does and how long it lasts, is in our Cookie Policy. You can change your choice any time via the Cookie preferences link in the page footer.
Analytics & Google Consent Mode v2
We use Google Analytics 4 with Google Consent Mode v2. In the EEA, analytics is off until you
accept it; outside the EEA it is on by default with a footer opt-out. When analytics is
declined, no _ga cookies are set and Google receives only anonymous, cookieless
pings that cannot identify you. IP addresses are anonymised, and we keep Google Signals turned
off — so there is no cross-device tracking, advertising personalisation, or profiling. Full
detail is in the Cookie Policy.
Email subscriptions & tracking
If you sign up for deal alerts, we store your email address and preferences and use a
double opt-in (you confirm via a link before we send anything). Our email provider, Resend,
measures opens (via a tracking pixel) and clicks (via link rewriting) so we can tell whether
the alerts are useful — the legal basis is your subscription opt-in. Every email includes a
one-click unsubscribe (a standard List-Unsubscribe header) and a link to your preference page. We do not sell or share your email address.
Who we share data with
We use a small set of trusted service providers ("processors") that handle data on our behalf under contract. We do not sell data or share it for anyone else's marketing.
- Supabase — database for deals and your subscription details (hosted in the EU, Ireland)
- Vercel — website hosting and server logs (hosted in the EU, Stockholm)
- Cloudflare — content delivery and security in front of the site (global edge network)
- Resend — subscription confirmations and deal alerts (hosted in the EU, Ireland)
- Google — Google Analytics 4, only with your consent in the EEA (US-linked)
- geni.us — affiliate link management (US; URL-based, sets no cookie on our domain)
International data transfers
Most of your data stays inside the EEA: our website hosting (Vercel, Stockholm), database (Supabase, Ireland), and email provider (Resend, Ireland) are all in the EEA, and our behind-the-scenes automation runs on a server in Norway. A few providers are US-linked — Google Analytics, Cloudflare (our content-delivery network), and geni.us (affiliate links). Where data reaches a provider outside the EEA, it is protected by appropriate safeguards: Standard Contractual Clauses (SCCs) and, where the provider is certified, the EU-US Data Privacy Framework, with IP addresses anonymised for analytics. [We are confirming the data-processing agreements with each provider before launch.]
How long we keep your data
Retention periods are shown per item in the table above. In short: we keep your subscription while it is active, and automatically delete it if you never confirm it (after 30 days) or if we have not sent you an alert in 24 months. Analytics data is kept for 14 months in Google Analytics, and server logs are rotated automatically by our hosting providers on their own short schedules. You can ask us to delete your data at any time — see "Your rights" below.
Your rights
If you are in the EEA (including Norway), you have the right to:
- Access — get a copy of the data we hold about you
- Rectification — have inaccurate data corrected
- Erasure — have your data deleted ("right to be forgotten")
- Restriction — ask us to pause processing
- Portability — receive your data in a portable format
- Objection — object to processing based on our legitimate interest
- Withdraw consent — at any time (e.g. unsubscribe, or reject analytics)
To exercise any of these, email privacy@3dp.sale. We aim to respond within one month (this can be extended for complex requests, and we'll tell you if so).
If you think we've handled your data improperly, you can complain to the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no), or to the supervisory authority in your own EEA country.
Children
The site is intended for adults shopping for 3D printers and related products. It is not directed at children, and we do not knowingly collect data from anyone under 16.
Changes to this policy
We may update this policy as the site evolves. The "last updated" date above shows when it last changed; if we make a material change, we'll make that clear.
Contact
Data controller: 3D Konsult Månsson (Anton Månsson). For privacy matters, privacy@3dp.sale; for anything else, hello@3dp.sale.
See also our Cookie Policy, Terms of Use, and Affiliate Disclosure.