Privacy Policy

Last updated: October 17, 2026

MakeSplat is run by Nelson José Salvador, a sole trader in Portugal ("we"). Contact: nelsonsalvadorzx@gmail.com. This policy explains what personal data we process, why, and your rights under the GDPR.

What we collect

• Account data: email address and authentication data, managed by our sign-in provider Clerk.
• Payment data: handled entirely by Stripe; we never see or store card numbers. We store your credit balance and transaction history.
• Content: videos you upload (deleted automatically within 7 days) and the 3D files we make from them: Gaussian splats (.ply) and, if you ask, textured meshes (.glb), kept so you can download them again.
• Usage data: API request logs, scan parameters, processing times, and IP addresses in server logs (retained ~30 days for security and debugging).
• Analytics: pages viewed, features used and an approximate location derived from your IP address (PostHog), and how AI assistants you connect use MakeSplat (see below).
• Ad measurement: pages viewed, whether you came from one of our ads in ChatGPT, and whether you then signed up, started a checkout or bought credits, shared with OpenAI. In Europe, only if you agree (see Advertising measurement).

Why we process it (legal bases)

• To provide the Service you signed up for: performance of contract (Art. 6(1)(b) GDPR).
• To secure the Service, prevent abuse, and debug failures: legitimate interest (Art. 6(1)(f)).
• To understand how MakeSplat is used and improve it (product analytics): legitimate interest (Art. 6(1)(f)).
• To measure our ads in ChatGPT, for visitors we ask first (in the EU, the EEA, the UK and Switzerland): your consent (Art. 6(1)(a)).
• To measure our ads in ChatGPT, for other visitors: legitimate interest in knowing which ads work (Art. 6(1)(f)). You can opt out.
• To comply with tax and accounting obligations: legal obligation (Art. 6(1)(c)).

We do not sell your data or use your content to train AI models. We do advertise MakeSplat in ChatGPT and measure those ads, as described under Advertising measurement.

Processors we rely on

• Clerk (US): authentication
• Stripe (US/IE): payments
• Fly.io (US, servers in Paris, FR): application hosting and database
• Cloudflare (US, EU jurisdictions): file storage (R2)
• RunPod (US/EU data centers): GPU processing of your videos
• PostHog (US): product analytics, session replay and AI assistant usage

We also work with OpenAI (OpenAI OpCo, LLC, US) as an advertising partner. OpenAI is not our processor: it receives ad measurement data as an independent controller (see Advertising measurement).

Transfers outside the EEA are covered by EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework where applicable.

Retention

• Uploaded videos: deleted within 7 days, automatically.
• Generated 3D files (splats and meshes): kept until you delete them or close your account. Download links expire after 24 hours.
• Account and billing records: as long as your account exists, plus statutory retention for invoices.
• Server logs: ~30 days.
• Product analytics, including AI assistant usage: up to 1 year. Session replays: 30 days.
• Ad measurement cookies in your browser: __oppref 30 days, __obref 365 days, __oaiq_consent 30 days, makesplat_ads_consent 180 days.
• Ad measurement details saved with a checkout at Stripe (ad click reference, browser reference, IP address and browser type): kept with that checkout, like the other billing records.
• What OpenAI receives for ad measurement: as long as OpenAI's privacy policy says.

Your rights

You can access, correct, export, or delete your personal data, object to processing, withdraw your consent at any time, and lodge a complaint with a supervisory authority (in Portugal: CNPD). Withdrawing consent does not affect what we did before. To turn ad measurement off, use Cookie settings at the bottom of any page. To exercise any other right, email nelsonsalvadorzx@gmail.com. We respond within 30 days. Deleting your account removes your content and personal data, except records we must keep by law.

AI assistants (MCP)

If you connect MakeSplat to an AI assistant such as Claude or ChatGPT through our MCP server, you sign in with your MakeSplat account and the assistant gets access to MakeSplat only. It can read your credit balance and your scans (status, settings, and links to view and download your 3D files), create and cancel scans, and start a scan at a price you agreed to. Credits are never bought through the assistant.

We receive only these requests, never your conversation, the assistant's memory or files you share with it. For each request we record which assistant and app version connected (its name, user agent and sign-in client), the tool used, how long it took, whether it worked and any error message, and the scan details involved (scan id, status, quality, mesh, credits and your credit balance). This is linked to your account, kept in server logs for about 30 days and as product analytics in PostHog, and used to run and improve MakeSplat. It never includes your video, file links or chats.

The assistant's provider handles what it receives under its own privacy policy. To disconnect, remove MakeSplat in the assistant's settings, or revoke the API key you gave it in your dashboard. To have us revoke an assistant's access on our side as well, email us.

To connect an assistant, you sign in to MakeSplat through Clerk, our sign-in provider, and allow access, or you give it one of your API keys. Either way, the assistant never gets your password. In chat apps that show our 3D viewer, the viewer loads your scan's splat and mesh from makesplat.com, through links that each open one file of that scan and expire after 24 hours.

Advertising measurement

We advertise MakeSplat in ChatGPT. To learn which ads work, we use two tools from OpenAI. The measurement pixel is a small script on our website. It reports the pages you view and when you sign up. The Conversions API lets our server report sign-ups, checkouts and purchases to OpenAI directly.

What is measured:

• the pages you view on makesplat.com, and the page that linked you to us;
• when you create an account;
• when you start a checkout, with the pack, the amount and the currency;
• when you buy credits, with the pack, the amount and the currency. Only our server reports a purchase, and only once the payment is confirmed.

What is sent with it:

• the ad click reference from the ChatGPT ad link you followed, if you came from one;
• a random reference for your browser;
• your IP address and browser type;
• when you are signed in, SHA-256 hashes of your email address and of your MakeSplat account ID. A hash lets OpenAI match a sign-up or purchase to an ad. We never send your email address itself.

OpenAI's script can also pick up an email address, phone number, name or location from our pages, for example what you type into the sign-up form. OpenAI says the script turns these into hashes in your browser before sending them.

When you start a checkout with ad measurement on, we save the ad references, IP address and browser type with that checkout at Stripe, so our server can report the purchase once it is paid.

Who receives it.OpenAI (OpenAI OpCo, LLC, US) receives this data as an independent controller, under OpenAI's Conversion Terms. OpenAI and we are each responsible for our own use of it. OpenAI handles it under its own privacy policy. OpenAI may also use it for its own ads and services: to measure, optimise and deliver ads, and to improve its services.

In Europe, only if you agree.We ask first, with a banner, when your device's time zone is in Europe (including EU regions overseas, such as the Azores, the Canary Islands and Réunion) or when your browser hides its time zone. Until you click Accept, nothing is loaded from OpenAI and none of its cookies are set. If you came from one of our ads, the page holds the ad click reference in memory and saves it only if you accept. If your browser sends a Global Privacy Control signal, or you declined before, we don't show the banner and measurement stays off. You can turn it on under Cookie settings. This covers the EU, the EEA, the UK and Switzerland. There, the legal basis is your consent (Art. 6(1)(a) GDPR, and for the cookies the ePrivacy rules, in Portugal Lei 41/2004).

Elsewhere, on unless you opt out. Everywhere else, ad measurement is on by default, based on our legitimate interest in knowing which ads work (Art. 6(1)(f) GDPR). You can turn it off at any time under Cookie settings. If your browser sends a Global Privacy Control signal, we treat it as an opt-out, unless you turn measurement on yourself under Cookie settings.

Not through AI assistants.We never use the requests your AI assistant sends us over MCP for ad measurement. OpenAI's script runs only on the makesplat.com pages you open in your browser.

Changing your mind.Use Cookie settings at the bottom of any page. If you choose Decline, we stop measuring, tell OpenAI's script to stop, and delete the ad click and browser references from your browser. This does not undo what was sent before. A purchase from a checkout you started before you declined is still reported once it is paid.

Cookies and analytics

Essential cookies keep you signed in (Clerk). For aggregate site statistics we use Cloudflare Web Analytics, which sets no cookies. We also use PostHog, with first-party cookies, to understand how the product is used: page views, feature usage, and session replays in which typed input is masked by default. PostHog data is used only to improve MakeSplat and is never sold or shared for advertising. PostHog never sees the ad click reference from a ChatGPT ad link: the page takes it out of the address bar first.

Ad measurement cookies (see Advertising measurement):

• __oppref: the ad click reference from a ChatGPT ad link. Set while ad measurement is on, by OpenAI's script or by us. 30 days.
• __obref: a random reference for your browser. Set by OpenAI's script while ad measurement is on. 365 days.
• __oaiq_consent: tells OpenAI's script whether it may measure. We read it too, so a Decline stored there still counts. 30 days.
• __oaiq_domain_probe and makesplat_domain_probe: test cookies that OpenAI's script and our page set and delete straight away, to find the domain for the cookies above.
• makesplat_ads_consent: remembers your choice. Set by us, only when you click Accept or Decline. 180 days.

Your browser's storage also keeps your choice for OpenAI's script, and a note that your sign-up was already measured, so it is not counted twice. Clearing your browser data removes all of these. To change your choice, use Cookie settings at the bottom of any page.