CGfieldPrivacy Policy
If the languages differ, the French version of this page prevails.
Last updated: 17 September 2026
This policy explains what data is processed, why, and how to exercise your rights. It applies to the site and to the CGfield launcher.
Data controller
The publisher of the service, whose contact details appear in the legal notice. For any question relating to data: contact@cgfield.com
The principle: your files never leave your machine
Conversions run entirely on your machine. No asset, no texture, no geometry, no file name is transmitted. The trial offered on this site runs in your browser and uploads nothing: it reads the file locally, and nothing goes out.
Data processed
| Data | Why | Legal basis |
|---|---|---|
| Email address | Identify your account, contact you about the service | Performance of the contract |
| Display name (optional) | Personalise the interface | Performance of the contract |
| Profile photo (optional) | Display it in your account area. It is shown only to you and is removed in one click from My account. The page crops and re-encodes it before upload: its metadata, including where it was taken, is not sent | Performance of the contract |
| Password | Authenticate you. It is hashed (scrypt + salt): it is never stored or readable in plain text | Performance of the contract |
| Seat fingerprint | Enforce the number of authorized seats. It is an opaque value, computed on your machine; it can neither identify you nor locate you | Legitimate interest (preventing account sharing) |
| Session tokens | Keep you signed in. Stored hashed on the server side | Performance of the contract |
| Technical logs | Security of the service, rate-limiting of abusive sign-in attempts | Legitimate interest (security) |
| Audience measurement | Know how many people visit the site, which pages, in which language, from which country, where they come from (referring site or a link’s campaign), on which type of device (computer, tablet or mobile) and how long they stay on each page while the tab is visible. Measurement is internal: no third-party tool, no cookie, and the IP address is never retained: all that is derived from it is a fingerprint that changes every day, so as not to count the same visitor twice. An open page also signals its presence for the real-time count; this signal is not recorded anywhere | Legitimate interest (audience measurement) |
| Pricing page and interest in a plan | Know which plans are of interest, and what holds a subscription back. If you are signed in, the following are linked to your account: your visit to the Pricing page, your click on a plan, a payment started but not completed, and reaching the export limit of the free plan. No other page is linked to an account, nor is the device type, the reading time or the arrival campaign | Legitimate interest (customer relationship) |
| Online presence and days of activity | Show you as “online” to your friends in the launcher, and know how many people are using the service, day after day. The launcher and the site report your presence while they are open, and each day your account is used is recorded once (with the time of first use, and whether it was the site or the launcher); no content, no file, no detailed activity is transmitted | Legitimate interest (operation of the service) |
| Conversion statistics (sharing disabled by default) | A summary (time saved, number of conversions) is transmitted only if you yourself enable sharing with your friends. Disabling it erases the summary already stored. The detailed log — including your file names — never leaves your machine | Consent |
| Consent record | Keep that you accepted the terms of use and this policy, when, and in which version. Without the date and the version, a consent cannot be demonstrated | Legal obligation |
| Product-news sign-up (unticked by default) | Send you product news, rarely. It is never required to create an account, and it can be turned off from My account in one click — not only from a link at the bottom of an e-mail | Consent |
| Audience measurement by Google Analytics (only if you accept it) | Supplement our internal measurement with Google Analytics reports: page views, length of visits, where visitors come from, device and browser type, approximate country and city, scrolling, clicks on outbound links and downloads, and two actions specific to the site (clicking on a plan, opening a trial). Nothing is loaded until you have answered the banner. Google sets cookies (_ga); no account identifier and no e-mail address is transmitted to it, page addresses are sent without their parameters, and Google signals such as advertising personalisation are disabled | Consent |
Payment for the Pro and Studio plans is handled by Stripe, a specialised provider: card details are entered on their pages, and the publisher never has access to them — only the subscription identifier and its status. No banking data is stored on this site.
What is not collected
No advertising trackers, no profiling, no resale or sharing of data for commercial purposes. The sole third-party analytics tool the site may use, Google Analytics, is loaded only with your consent.
We do not retain your IP address, nor your browser or screen configuration: only the type of device (computer, tablet or mobile) is recorded. Nothing that would serve to build a “fingerprint” allowing you to be recognized from one site to another.
Cookies and audience measurement
The site sets no advertising cookie, and no analytics cookie without your consent: only Google Analytics may set such cookies, if you accept it. Without that consent, the only cookies it may set are strictly necessary ones: access to the site when it is by invitation, and signing in with a third-party account. Your browser’s local storage keeps your session token, strictly necessary to keep you signed in, and a visit identifier drawn at random by your browser, which serves only the traffic statistics: not counting you twice, and grouping the pages of a single visit. This identifier is not linked to any account, does not leave this site, and disappears if you clear your browser data. Everything else it keeps only serves to run the pages: the language and theme you chose, the settings of the applications you try in the browser and, for the length of a tab, technical markers (for example during a sign-in with a third-party account). If you respond to the Google Analytics banner, your answer is also kept there for six months, so that you are not asked again on every page.
Our internal audience measurement is carried out by us, for us alone, is limited to aggregated statistics and does not track anyone from one site to another. It is on that basis that it does not require prior consent. Google Analytics, when the site uses it, is loaded only after you have given your consent: a banner asks you for it, with “Accept” and “Decline” presented in the same way, and nothing is loaded until you have answered.
Objecting to measurement: enable your browser’s privacy signal (Global Privacy Control, or the “Send a Do Not Track request” option / Do Not Track). We honour it: no measurement is then recorded for you, and the site continues to work normally. Nothing else to do, no account required. For Google Analytics: when the site uses it, decline in the banner, or withdraw your consent at any time with the “Cookies” link at the bottom of the page; its cookies are then erased. The Global Privacy Control or Do Not Track signal also counts as a refusal, and the banner is not shown.
Recipients
Your data is disclosed only to processors, each for a specific task: hosting of the service, entrusted to Render Services, Inc. (San Francisco, United States), whose servers in use are located in Frankfurt, Germany; payment, when you take out a subscription, entrusted to Stripe — no bank details pass through our servers, only your e-mail address is transmitted so that the payment can be matched to your account; the sending of service e-mails (address confirmation, forgotten password), entrusted to a delivery provider; and, if you choose to use it, the third-party sign-in provider; the delivery of installation files and network routing, entrusted to Cloudflare, Inc. (San Francisco, United States): application packages are stored in the European Union and contain no personal data, but Cloudflare sits on the service’s network path and therefore sees your IP address when you connect. If you accept it, audience measurement by Google Analytics is entrusted to Google Ireland Limited (Dublin, Ireland). No advertising provider, no data broker, no resale, no other recipient.
Transfers outside the European Union
The data is stored in the European Union (Frankfurt, Germany). As the host is a US company, access from the United States cannot be ruled out for technical operation purposes; this case is governed by the European Commission’s standard contractual clauses, incorporated into the host’s terms of service. For Google Analytics, if you accept it, data may be transferred to the United States: Google LLC is certified under the EU-US data protection framework (Data Privacy Framework), which the European Commission recognised as adequate on 10 July 2023.
Retention periods
- Account: as long as it is active, then twelve months after the last sign-in.
- Profile photo: until you remove it or delete your account; a replaced photo is erased immediately.
- Session tokens: thirty days, extended on each use.
- Security logs: twelve months at most.
- Audience measurement: thirteen months at most, after which the records are deleted automatically.
- Online presence and days of activity: the date of last activity is kept for sixty days and overwritten on each use; the account’s days of activity for thirteen months at most, then deleted automatically. The presence of an open page is never recorded.
- Accounting records and invoices: ten years, where a subscription has been paid — a period imposed by article L123-22 of the French Commercial Code. These records therefore outlive the deletion of the account, and they alone do.
- Proof of consents (terms accepted, declaration of professional status): five years after the end of the relationship, so that it can be produced in the event of a dispute.
- Google Analytics, if you accept it: its cookies, thirteen months at most, not extended on each visit; the data held by Google, fourteen months at most; your answer to the banner, six months in your browser, after which you are asked again.
Your rights
You have a right of access, rectification, erasure, restriction, portability and objection. Write to contact@cgfield.com: you will receive a reply within one month. From My account, you can also export your data and delete your account yourself, without waiting.
Deleting your account erases your data, with the sole exception of the accounting records which the law requires to be kept for ten years where a subscription has been paid.
Complaints
If you consider that your rights are not being respected, you may refer the matter to the Commission nationale de l’informatique et des libertés (the French data protection authority): cnil.fr/fr/plaintes.
Artificial intelligence
The applications contain no artificial intelligence. Conversion is deterministic: the file is read, then geometry, materials and textures are built according to written rules. The same file converted twice gives the same result twice. The time saved shown on this site is a formula calibrated on a corpus of 54 assets that were actually converted, not a trained model.
Generative AI tools were, however, used to write part of the code and text of the site and the applications, with human review. We mention it because it is true, not because a rule requires it: Article 50 of the European regulation on artificial intelligence, applicable since 2 August 2026, covers systems that interact with people, synthetic content, deepfakes and emotion recognition. None of these cases applies here.