What stays local and what you can choose to share

1. Controller and scope

The controller for the processing described in this notice is Tomáš Sikora. Privacy and data-rights requests may be sent to support@splatfiction.com. The Research Notice identifies the current beta provider.

This notice covers the public Splatfiction beta at splatfiction.com. It does not govern an external website or service linked from Splatfiction.

2. Local-first operation

Chosen source files, local scene state, recovery points, and exports are processed in the browser by default to provide the features that you request. Ordinary local use is not intended to send scene content, original filenames, local paths, project names, geometry, or Outputs to Splatfiction collection services.

Local browser storage remains on your device until you discard a scene, clear site data, or the browser or operating system removes it. Splatfiction is not a backup or archival service.

3. Processing activities

3.1 Site delivery and security

The hosting and network providers receive technical request information needed to deliver and protect the site, such as the requested resource, time, IP address, and browser or device headers. Scene names and project content must not be intentionally placed in URLs or request logs.

Purpose and legal basis: delivery, availability, integrity, abuse prevention, and security; GDPR Article 6(1)(f), legitimate interests. Retention: provider-side logs follow the verified production configuration and provider terms. Splatfiction does not intentionally create a separate analytics copy of ordinary access logs.

3.2 Terms acceptance receipt

When you accept the Beta Use Conditions, Splatfiction records a minimal receipt containing the Terms version, SHA-256 document digest, server receipt time, application release, language, acceptance result, and a random installation reference. The receipt does not include your name, email address, project name, source files, scene content, geometry, or Output. Network infrastructure may process an IP address when the receipt is transmitted, but the application receipt must not deliberately store that address as a receipt field.

Purpose and legal basis: administering and evidencing the agreement, presenting material changes, preventing abuse, protecting first-party rights, and establishing, exercising, or defending legal claims; GDPR Article 6(1)(b) and Article 6(1)(f). Retention: up to four years after the accepted version is replaced or the relevant use ends, unless a longer period is reasonably necessary for an active dispute, legal obligation, or legal claim.

A local copy of the receipt may also remain in browser storage until replaced, cleared, or removed by the browser.

3.3 Optional performance analytics

Performance analytics is separate from the Terms and is off until you enable it. If enabled, Splatfiction may receive a pseudonymous analytics identifier, broad device and software characteristics, application release, run settings, timing, outcome and quality measurements, and limited diagnostic or error categories. Analytics must not intentionally contain photos, video, scene geometry, splats, filenames, local paths, project names, free-text project content, or raw error messages containing such information.

Purpose and legal basis: evaluating beta quality, compatibility, performance, reliability, and failures; GDPR Article 6(1)(a), consent. Refusal does not limit ordinary local use. Retention: detailed pseudonymous records for up to 90 days and daily aggregate records for up to 13 months.

Turning analytics off stops future analytics collection through this choice and removes local analytics identifiers and queued diagnostics where technically available. Withdrawal does not affect processing completed lawfully before withdrawal.

3.4 Optional data contribution

Project-data contribution is separate from the Terms and analytics, off by default, and activated only through a specific contribution flow. Before upload, the interface must identify the selected categories, which may include reduced copies of selected photos or frames, camera calibration or pose information, sparse or dense reconstruction data, point clouds, meshes, Gaussian splats, package metadata, quality measurements, and limited diagnostics. Original filenames and local paths must not be included.

Purpose and legal basis: reconstruction, alignment, pose-estimation, rendering, evaluation, training, validation, security, and improvement described in the Optional Data Contribution Terms; GDPR Article 6(1)(a), consent, together with the separate contribution licence. Refusal does not change the local result. Retention: raw contribution packages and related pseudonymous records for up to 730 days, unless deleted sooner following a valid request or retained where applicable law permits or requires. Failed and incomplete uploads must be removed sooner. Derived technical results are governed by the Optional Data Contribution Terms and are not automatically treated as anonymous.

Turning contribution off stops future packages. It does not by itself delete a package already uploaded. A deletion or withdrawal request may be submitted using the contribution reference or other information sufficient to locate the package without exposing another person's data.

3.5 Correspondence

Messages sent to the published address are processed to answer privacy, security, legal, and beta correspondence and to document the response.

Purpose and legal basis: handling the request, protecting the Service, and establishing or defending legal rights; GDPR Article 6(1)(f), and another legal basis where required by the nature of the request. Retention: only as long as reasonably necessary to handle and document the matter and comply with legal obligations.

4. Browser storage and optional choices

Browser storage may contain saved local scenes, recovery data, workspace preferences, the local Terms receipt, and optional-choice settings. The in-app Storage panel should allow you to review or change optional choices and remove local workspace data. Browser site-data controls can remove remaining local data.

Essential browser storage used to provide a feature you request is separate from optional analytics and contribution. Neither optional choice may be preselected, bundled with Terms acceptance, or required for local use.

5. Recipients and processors

Depending on the feature and the choices you enable, personal data may be processed by:

• Vercel Inc., for site hosting, delivery, and provider-side security;
• Google Cloud / Firebase, for server-side acceptance receipts and opted-in analytics or contribution records;
• Wasabi Technologies, for storage of reconstruction packages that a user chooses to contribute; and
• HostCreators, for hosting the published email channel.

Each recipient processes only the categories relevant to the feature for which it is engaged and under applicable data-protection terms. Personal data is not sold, used for third-party advertising, or used to build an advertising profile.

6. International processing

Some recipients may be established or process data outside the European Economic Area. For such processing, Splatfiction identifies the relevant processing location and uses the transfer mechanism required by Chapter V GDPR for the active provider and account configuration, such as an adequacy decision or the European Commission's Standard Contractual Clauses, together with supplementary measures where required.

Information about the safeguard applicable to an active transfer, and a copy or description where legally available, may be requested at support@splatfiction.com.

7. Your rights and choices

Subject to the conditions and exceptions in applicable law, you may request access, correction, deletion, restriction, portability, or information about processing, and may object where processing is based on legitimate interests. You may withdraw analytics or contribution consent at any time without affecting processing that was lawful before withdrawal.

Because the beta has no user account, Splatfiction may need the random installation reference, contribution reference, message details, or other limited information sufficient to locate a record without disclosing another person's data. Splatfiction will not require information that is disproportionate to the request.

You may complain to the competent data-protection supervisory authority, including the authority in the EEA country of your habitual residence, place of work, or alleged infringement.

8. Acceptance, automated decisions, and security

Where applicable law requires a parent or legal guardian to provide acceptance or consent, that person must do so. Splatfiction does not use the processing described here to make decisions producing legal or similarly significant effects about a person.

Splatfiction uses technical and organisational measures appropriate to the beta and the data processed. No method guarantees absolute security. Security concerns should be reported through the Security page.

9. Changes and contact

A material change to a data category, purpose, legal basis, recipient, retention rule, transfer arrangement, or contribution programme receives a new notice or consent version and is presented again where required.

Version 2026-08-18.3. Effective and last updated 18 August 2026.

Privacy requests: support@splatfiction.com

Copyright © 2026 Tomáš Sikora. Splatfiction research beta. All rights reserved.