How ShapeAny uses cookies and similar browser technologies
2026/10/04
Effective date: October 4, 2026
This Policy explains how ShapeAny (we, us, or our) uses cookies and similar browser technologies on the ShapeAny website and product (the Service).
Questions may be sent to support@shapeany.com.
Cookies are small text files stored by a website in your browser. Similar technologies include local storage and IndexedDB, which allow a browser to keep limited information on a device.
Our authentication system uses cookies to keep you signed in, protect account sessions, support email or Google sign-in, and help prevent unauthorised requests. These cookies are necessary for account and product features. The current account session expires after up to 7 days, subject to renewal, sign-out, account deletion, and security controls.
The Service may store a language preference cookie named NEXT_LOCALE so that
the selected locale can be remembered. The current public product does not
present a language switcher, but the routing infrastructure may still read this
cookie.
When a signed-in user selects an image on the home page, ShapeAny temporarily stores the selected file and handoff metadata in browser IndexedDB so the image can be opened reliably in the Shape editor. The handoff expires after approximately 30 minutes and is deleted after successful use or expiry cleanup. It is associated with the signed-in user ID to prevent another account in the same browser from opening it.
The Service uses browser storage for limited interface state, including the last My Assets page visited, a short-lived cache of the currently displayed asset list, and the preferred colour used in the Bin 3D preview. This information supports navigation and interface continuity and is not used for advertising.
The authenticated dashboard may store a strictly functional cookie recording whether its sidebar is open or closed. This cookie does not track activity across websites.
We use Cloudflare Turnstile during sign-up to distinguish legitimate users from automated abuse. Cloudflare may use cookies or similar technical signals and may process device, browser, network, and interaction information for that purpose under its own privacy documentation.
ShapeAny currently performs limited first-party visitor and product-flow measurement without placing an analytics cookie. For daily visitor counting, the server creates a one-way, rotating daily hash from the request IP address and normalised browser user-agent. The analytics table stores the daily hash and date rather than the raw IP address or raw user-agent. Signed-in feature events may be recorded against an account to understand whether core product steps succeed.
We do not currently use advertising cookies or cookies to build advertising profiles, and we do not sell personal data.
Pro checkout is provided through a separate third-party service. It may use its own essential, fraud-prevention, analytics, or other cookies under the terms and privacy information shown during checkout. Those technologies are controlled by the checkout provider rather than by ShapeAny.
You can block or delete cookies and site data using browser settings. Blocking strictly necessary cookies or clearing IndexedDB may sign you out, prevent account features from working, or remove a selected image before it reaches the Shape editor.
Because the current ShapeAny site does not use optional advertising cookies, it does not currently provide a separate advertising-cookie preference panel. If we introduce non-essential analytics or advertising technologies, we will update this Policy and implement consent controls where required before using them.
We may update this Policy when our browser-storage practices, providers, or legal obligations change. We will update the date above and provide additional notice where required.
ShapeAny
Email: support@shapeany.com