Privacy policy
Last updated 26 October 2026. This page explains exactly what we collect, why we collect it, and how to get it deleted.
Who we are
CrystalSora 3D ("we", "us") sells custom laser-engraved photo crystals through 3dcrystalsora.com. Our workshop is in Pujiang, Zhejiang, China. For any question about this policy or your data, write to [email protected].
What we collect
- Your photograph — the image you upload, plus the depth map and point cloud we derive from it.
- Order details — name, email, shipping address, phone (courier requirement), engraving text and the options you chose.
- Messages — anything you send through the contact form or by email.
- Technical data — IP address, browser and device type, pages viewed, and the referring link. Collected in server logs and by Cloudflare for security and load balancing.
We do not collect or store card numbers. Payment is handled entirely by our payment provider, which shares only a confirmation and the last four digits with us.
Why we use it
- To produce and ship your order (contract).
- To email your 3D proof and get your approval before we engrave (contract).
- To answer your questions and handle problems with an order (contract and legitimate interest).
- To keep the site secure and prevent abuse (legitimate interest).
- To meet tax and accounting obligations (legal obligation).
We do not run advertising or profiling. We never sell your data.
How long we keep it
- Photographs — 90 days after delivery, so we can handle reorders and warranty claims, then deleted from our servers. Reply to your order confirmation with the word "delete" and we remove them the same day.
- Order records — seven years, because tax law requires it.
- Contact messages — two years.
- Server logs — 14 days.
Who else sees it
- Our payment provider, to take payment.
- The courier, which receives your name, address and phone to deliver the parcel.
- Cloudflare, which serves and protects the site.
- Our hosting provider, which stores the files.
Each of them is bound to use the data only for that purpose. We do not share your photograph with anyone else, and we never use it in our marketing without your written permission.
Cookies
The site sets one essential cookie for your shopping cart. Cloudflare's analytics beacon sets
no cookies at all. There are no advertising, retargeting or third-party tracking cookies on this
site. If your browser still carries an old __kla_id cookie from our previous
platform, the site deletes it automatically.
Your rights
Wherever you live, you can ask us to show you what we hold, correct it, delete it, or send it to you in a portable format. If you are in the EU or UK you also have the right to object to processing and to lodge a complaint with your local supervisory authority; if you are in California you have the right to know, to delete, and not to be discriminated against for asking. Write to [email protected] and we will respond within 30 days.
Where your data goes
Our servers and processors are in the United States, the European Union and China. Where data leaves the EU or UK we rely on standard contractual clauses.
Children
The shop is not intended for anyone under 16, and we do not knowingly collect their data.
Security
The site runs over TLS. Uploaded photographs are stored outside the public web root and are served only through links signed with a secret and an expiry time. Access to the servers is restricted to two people with key-based authentication.
Changes
If this policy changes in a way that affects you, we will email anyone with an order in the previous twelve months and update the date at the top.
Contact
CrystalSora 3D · Pujiang, Zhejiang, China · [email protected]