Arbor

Privacy · CCPA / GDPR · Rev A

Privacy Policy

Arbor is built so your geometry never needs a cloud. This policy explains the small amount of GitHub Pages log data that may exist, your California and European rights, and how to reach the project.

1. The local-first advantage

This policy is therefore mostly about the website (this marketing site and GitHub-hosted downloads), not about the contents of your part studios.

2. Who we are

Controller: Arbor Contributors, operators of the Arbor project and this website. Contact: GitHub issues. We do not appoint a Data Protection Officer; privacy requests go to that repository.

3. What we collect

We do not collect accounts, billing data, or CAD files through the desktop application. On the website and related infrastructure we may process:

  • Host access logs from GitHub Pages and GitHub Releases — IP address, user agent, requested path, and time. GitHub operates that infrastructure; we do not run a separate analytics product on this site.
  • Communications you send us (issues, pull requests, emails), which are also subject to GitHub’s or your email provider’s policies.

We do not intentionally collect special-category data under GDPR, and we do not use the desktop app to profile how you model.

4. Why we collect it

Purposes and, for GDPR, typical legal bases:

  • Operate the website — GitHub Pages delivers HTML, CSS, and fonts (legitimate interests).
  • Distribute binaries — GitHub Releases logs who fetched an asset (legitimate interests).
  • Comply with law — respond to rights requests sent through GitHub issues (legal obligation).

We do not use this data for advertising profiles, and we do not sell personal information.

5. Cookies and consent

This marketing site is a static GitHub Pages export. It does not set a first-party analytics cookie, does not load a consent banner, and does not run Google Analytics, Vercel Analytics, or Termly.

GitHub may set cookies on github.com when you follow a Source or Download link. Those cookies are GitHub’s, not Arbor’s. The desktop application stores local project files and optional UI preferences on disk; that is not website tracking.

6. How long we keep it

GitHub Pages and GitHub Releases retain access logs on GitHub’s schedule. We do not operate a separate analytics warehouse. We do not retain CAD designs because we never receive them from the app.

7. Sharing and processors

We share personal data only with processors who help run the project, under their terms:

  • GitHub — Pages hosting, source, issues, and release downloads

We may disclose information if required by law, to prevent harm or abuse, or in a merger or transfer of the project, with notice where required. We do not sell personal information for money.

8. GDPR rights (EEA / UK / Switzerland)

If GDPR or the UK GDPR applies, you have the right to access, rectify, erase (“right to be forgotten”), restrict, or object to processing, and to data portability, subject to legal limits. Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing. This site does not run a consent banner.

You may lodge a complaint with your local supervisory authority (for example a EU data-protection authority or the UK ICO). We would rather fix the issue directly first.

Because the desktop app holds your designs locally, a deletion request cannot reach files on your disk — you already control those. Deletion applies to data we actually hold (GitHub issue content we can edit).

9. CCPA / CPRA rights (California)

If you are a California resident, you have the right to:

  • Know the categories and specific pieces of personal information we collected, sources, purposes, and categories of third parties (this policy is that disclosure; you may also request a copy).
  • Delete personal information we hold, with statutory exceptions.
  • Correct inaccurate personal information.
  • Opt out of sale or sharing of personal information, including sharing for cross-context behavioral advertising. We do not sell PI for money and we do not run advertising or analytics cookies on this site.
  • Limit use of sensitive personal information — we do not collect sensitive PI to use for inferring characteristics.
  • Non-discrimination for exercising these rights.

Categories we may collect: identifiers (IP address in GitHub logs) and requested URLs. We do not collect CAD files or government IDs.

To submit a request, open a GitHub issue titled “Privacy Request.” We will verify you using the contact channel and information reasonably necessary (we have no account system). An authorized agent may submit a request with proof of authority.

We will respond within 45 days, or as otherwise required, and explain any delay.

10. International transfers

Our host (GitHub) is in the United States. Access logs for this site are processed under GitHub’s terms. U.S. law may allow public-authority access in ways that differ from EU law.

11. Children

The Services are not directed to children under 16, and we do not knowingly collect their personal information. If you believe we have, contact us and we will delete it.

12. Security

We use HTTPS on this site and keep the CAD workload on-device by design. No method of transmission or storage is perfectly secure. Protect your own machine, backups, and .cad_db files; we cannot recover local projects we never received.

13. Changes

We may update this policy by posting a new version with a new effective date. Check this page for the current text.

14. Contact and requests

Privacy requests (access, deletion, opt-out, do not sell/share): GitHub issues. Source and issues: https://github.com/Eerielettuce3717/arbor-cae.