4D Shapes Privacy

4D Shapes collects the minimum data needed for the build and service you choose.

Meta Horizon Store Build

The app requests the Meta account age-group category and platform user identifier through the Meta Platform SDK. The age group applies age-appropriate feature availability; the platform identifier supports Meta initialization and entitlement. These values are not sent to 4dshapes.com.
Voice dictation starts only after you select the microphone control. Meta/Wit processes the spoken input to return text to the app. 4D Shapes does not record continuously.
A support report is generated only when requested and remains local until you explicitly export or share it. The Meta Store build does not automatically upload reports to a private receiver or 4dshapes.com.
The Meta Store build does not include the direct-license QR scanner or optional connected shape builder.

Stripe handles direct-sale checkout details, including email and payment status.
Direct license records include the license-key hash, licensee label or email, allowed storefront, activation count, and device activation identifiers.
Where a direct Quest build offers QR activation, camera access begins only after you choose Scan QR. Frames are decoded locally, are not saved or uploaded, and are discarded after decoding. Only the decoded activation credential is sent to 4dshapes.com over an encrypted connection.
Where a direct build offers encrypted provider setup, 4dshapes.com temporarily processes the provider name, endpoint, ephemeral device public key, nonce, and an opaque encrypted credential envelope. The plaintext key is encrypted in the browser for the requesting device and is not available to 4dshapes.com.
Older direct builds may offer OpenRouter OAuth. OpenRouter supplies a provider credential encrypted at rest on 4dshapes.com and used only for explicit requests from that feature.
Manually submitted support payloads may include app version, platform, device notes, a user-entered summary, and diagnostic text.

First-party events may include page views, checkout starts, purchases, downloads, and support actions. These use anonymous browser or session identifiers and remove URL query strings before storage or dispatch to configured analytics.
Cloudflare processes standard request metadata for security, routing, and operational logs.
We do not store raw credit card numbers on this site.
We do not log, persist, or receive plaintext API keys entered into the end-to-end encrypted AI relay page.
We do not sell personal information.

Email support@4dshapes.com for privacy, support, license reset, or data deletion requests.

Last updated September 1, 2026.