Privacy Policy

This Privacy Policy describes how Adversaria LLC (“Adversaria,” “we,” “us”), a Wyoming limited liability company, handles information in connection with the Solidly application for macOS, the websites at solidly.dev and app.solidly.dev, and your Solidly account.

Your 3D models remain on your Mac. Solidly opens, edits and exports files locally. It does not upload them, index them, or send anything contained in them anywhere. The two reports it can send about itself are sent only with your permission, and neither is linked to your account.

What we handle

Solidly consists of an application, two websites and an account service, and each collects different information for different reasons. They are described separately below rather than merged into a single list, because the consent, the contents and the retention differ between them.

1. Usage data from the app

With your permission, Solidly reports which file formats you open, which panels and tools you use, how long a model takes to load, and the Mac model and macOS version you are running.

The limits on what the app can report are enforced by its design rather than by policy alone. It can send only events from a fixed list, with values that are a yes/no, a size band, or a short label from a fixed vocabulary, so it has no way to send free text. Measurements are recorded as bands rather than exact figures, because an exact file size next to an exact triangle count would identify a specific file. Nothing from inside a file is sent, including file names, folder paths, model, material and object names, and image data.

Your IP address is replaced with 0.0.0.0 before each event is sent, location lookup is switched off, and your time zone is stripped. No profile is created for you, so this data cannot be connected to your Solidly account. The only identifier is a random value generated on your Mac at install. Withdrawing your permission deletes that identifier and any events not yet sent; giving it again later starts a new one, unconnected to the old.

Our analytics provider is PostHog. This feature is present in the main application only; the Quick Look extension and the solidly command line tool do not include it.

2. Crash reports from the app

With your permission, if Solidly quits unexpectedly or fails to open a model, it sends a report describing where in the app the failure happened, the Solidly version and build, and the Mac model and macOS version, together with diagnostic information macOS provides about the failure.

File names, folder paths and material names are replaced with hashes before a report is sent. Your models are never included. We have switched off the parts of our crash reporting that would otherwise capture screenshots, view hierarchies, network requests, user identity or arbitrary additional data.

Our crash reporting provider is Sentry.

Solidly also keeps a small local record, which is always enabled, that lets it notice it did not shut down cleanly and offer to recover. That record stays on your Mac and is never uploaded. It is shared only if you save a support file and send it to us yourself.

3. Your Solidly account

You need an account at app.solidly.dev to buy Solidly on our website, and to unlock editing with that purchase. A purchase made in the Mac App Store works without one. For an account we hold your email address, the display name you choose, and your preference settings.

We never see or store your password. Credentials, including passwords, reset tokens, email verification codes and any multi-factor settings, are held by our authentication provider, WorkOS, and are never stored by us. If you sign in with Google or Apple instead, we receive only the confirmation that it was you.

When you are signed in we store a session record. It contains a hashed session identifier, the times it was created and last used, your browser user-agent string and your IP address. We keep this so you can see and end your sessions and so we can investigate suspicious sign-ins. Session records are deleted when the session expires or you sign out.

4. Purchases

On our website, Stripe sells Solidly as merchant of record, and we never see your card details. Stripe takes the payment, calculates and remits tax, and issues your receipt.

What we record is the outcome: that your account owns Solidly, the date, and the receipt details Stripe returns to us, which are the amount, tax, currency, card brand, last four digits, and billing email address. That is enough to answer a billing question and no more. See Purchases and Refunds.

In the Mac App Store, Apple sells Solidly, and Apple’s privacy policy applies to the transaction. A purchase there works without a Solidly account. If you sign in to one in the App Store version, the app sends us the purchase’s transaction number. We confirm it with Apple, then record against your account that you own Solidly, when you bought it, and Apple’s identifiers for the purchase. That is what lets the purchase unlock the direct download too, and lets a refund from Apple reach your account. For the same reason we give Apple a random identifier for your account, which says nothing about you. Apple sends us no name, email address or payment details.

5. Confirming your purchase on your Mac

When you sign in inside Solidly, the app asks our service whether your account owns Solidly and stores the signed answer locally so that editing keeps working when you are offline. That stored answer includes a random identifier that Solidly creates on your Mac and keeps in its Keychain, so a copied answer cannot unlock a different computer.

The identifier is not derived from your hardware or from anything else about your Mac, so it cannot be used to recognize your computer anywhere else. A Mac that does not match receives a fresh answer the next time it checks.

The License Agreement limits the number of Macs a Solidly account can be signed in to at the same time, and our service uses this identifier to apply that limit. We keep no more than the identifiers of the Macs where your account is currently signed in, and no list of the Macs where it was signed in before.

A purchase made in the Mac App Store is confirmed by macOS itself, on your Mac, and needs none of this.

6. The websites

solidly.dev uses no cookies, no analytics, no advertising pixels and no fingerprinting, and it has no forms that collect personal information.

app.solidly.dev sets one cookie: a strictly necessary session cookie that keeps you signed in. It is not used for analytics or advertising, and there is nothing to consent to because the site does not work without it.

As on nearly every website, our hosting provider records basic technical data, such as IP address, browser type and pages requested, for security and reliability. These logs are short-lived and are not used to profile you.

Email you send us. If you email a bug report or a feature suggestion, we keep the message and anything attached to it for as long as we need it to act on it. Please do not send us files you are not free to share; see the Terms of Service.

How long we keep things

• Account and purchase records are kept while your account exists, and afterwards only as long as tax and accounting law requires us to keep a record of the sale.
• Sessions are deleted when the session expires or you sign out.
• Crash reports and usage data are kept by our providers on their standard retention schedules, and are not linked to your account at any point.
• Server logs are retained briefly for security and reliability.

Deleting your account

You can ask to delete your account from your account settings. We stage it rather than acting immediately: your sessions end at once, and seven days later the deletion is carried out and cannot be undone. During those seven days you can sign in and cancel it. This exists because deleting the account that owns your copy of Solidly would otherwise mean buying it again.

Deletion removes your credentials at WorkOS, and your account, ownership and receipt records here. Records we must keep for tax or accounting purposes are retained for that purpose only. A purchase made in the Mac App Store is not affected: it stays with your Apple Account and keeps unlocking the App Store version.

What we never do

• We do not sell or share your personal information, and we never have.
• We do not run advertising, and we do not allow ad tracking.
• We do not profile you or make automated decisions about you.
• We do not upload, scan or index your 3D files.
• We do not buy or append data about you from anyone else.

Service providers

We use a small number of providers to run Solidly. Each processes information only on our instructions and only to provide its service. They are listed, with what each one handles, on our Subprocessors page.

We are based in the United States and our providers may process information there and elsewhere. Where required, transfers out of the UK, EEA or Switzerland rely on the European Commission’s Standard Contractual Clauses or another approved mechanism.

Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict how we use it, and to withdraw consent. Most of these you can exercise yourself: you can withdraw consent to crash reports and usage data in the app at any time, and you can change or delete your account yourself.

For anything else, write to support@getadversaria.com and we will answer within the time the applicable law allows. We will not charge you or treat you differently for exercising a right.

If you are in the EEA or UK: our lawful bases are performance of a contract (your account and purchase), consent (crash reports and usage data, which you can withdraw at any time), and legitimate interests (security, preventing abuse, and keeping the service working). You may complain to your local supervisory authority.

If you are in California: we do not sell or share personal information as those terms are defined by the CCPA, and we do not process it for cross-context behavioral advertising. You have the rights to know, delete, correct and opt out, and we will not discriminate against you for exercising them.

Children

Solidly is not directed to children. You must be at least 13 to use it, and at least 16 in countries where that is the minimum age for consent to data processing. We do not knowingly collect information from anyone below those ages; if we learn we have, we will delete it.

Security

Passwords are held by our authentication provider and never by us. Session identifiers are stored as hashes, so a copy of our database cannot be replayed to sign in as you. IP addresses used for abuse prevention on solidly.dev are salted and hashed. No system is perfectly secure, so we aim to hold as little information as possible in the first place.

Changes

We may update this policy. Changes take effect when posted here and the effective date above is updated. If a change is significant, we will say so by email where we have your address, or in the app.

Contact

Adversaria LLC · support@getadversaria.com