1. Who we are
3D Printing Bandung is a 3D printing studio based in Bandung, Indonesia. We operate the website https://3dprintingbandung.my.id. This policy explains what personal data we collect, why we collect it, and how we use it.
2. Data we collect
2a. Strava activity data
When you use our Strava Map 3D Print service and choose to connect your Strava account,
we request read-only access to your Strava activities via the official Strava API (scope: activity:read_all).
We collect:
- Activity name, type, distance, and date
- GPS route coordinates (latitude / longitude stream)
- Your Strava athlete ID (used only to fetch your activities)
We do not collect your Strava password, heart-rate, power, or any health metrics.
Alternatively, you can upload a .gpx file exported from any app — in this case
no Strava account connection is required.
2b. Order information
When you place an order, we collect your name and WhatsApp number to fulfill and deliver your order.
2c. Technical data
Standard server logs (IP address, browser type, pages visited) are retained for up to 30 days for security and debugging purposes only.
3. How we use your data
- To generate a 3D-printable map model from your GPS route
- To process and deliver your physical 3D print order
- To contact you via WhatsApp about your order status
- To improve our service (aggregated, non-identifiable usage patterns only)
We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Strava data usage compliance
We use the Strava API in accordance with the Strava API Agreement. Specifically:
- We only request the minimum permissions needed (read-only activity access)
- GPS data is used solely to render your chosen route into a 3D map product
- We do not display or resell your Strava data to any third party
- You may revoke our access at any time via Strava Settings → My Apps
5. Data retention
Activity GPS data associated with your order is stored in our internal order management system (Sanity CMS) for order fulfillment and quality assurance. We retain this data for a maximum of 1 year after order completion, after which it is deleted.
Strava OAuth tokens stored in your browser session cookie expire automatically and are not persisted server-side beyond the active session.
6. Your rights
You can request at any time:
- Access: a copy of the personal data we hold about you
- Deletion: removal of your personal data from our systems
- Correction: update of any inaccurate data
To exercise these rights, contact us at contact@3dprintingbandung.my.id. We will respond within 30 days.
7. Cookies
We use a single httpOnly session cookie to store your Strava access token during the order flow. This cookie expires when your browser session ends or when you disconnect Strava. We do not use advertising or tracking cookies.
8. Third-party services
- Strava API — for fetching your activities when you choose to connect
- OpenStreetMap — tile maps displayed during route preview (no personal data shared)
- Sanity CMS — stores order details; data hosted in the EU/US per their privacy policy
9. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the service after changes constitutes acceptance.
10. Contact
For any privacy-related questions, contact us at:
contact@3dprintingbandung.my.id