DATA SECURITY & PROTECTION

Privacy Policy

Effective Date: January 1, 2026 • Last Updated: 2026

At D3 Motion Engine, we believe software should respect user sovereignty. This Privacy Policy details our strict commitment to zero data collection, air-gapped local processing, and absolute privacy across the D3 HTML to Video desktop application and official website.

Summary of Our Privacy Guarantee: D3 operates 100% locally on your computer. Your HTML code, JavaScript files, images, client assets, and rendered video outputs are never transmitted to our servers or any third-party cloud service. We collect zero telemetry and zero personal data.

1. Data We Do NOT Collect

No File Uploads: When you drag and drop an HTML or ZIP file into D3, it is served entirely via an internal loopback address (localhost) isolated to your computer. Nothing is ever uploaded over the internet.
No User Source Code or Media: We have no mechanism or desire to access, inspect, copy, or train models on your proprietary web animations or rendered MP4 videos.
No Usage Telemetry or Analytics: The desktop application does not include tracking scripts, Google Analytics, Sentry crash trackers, Mixpanel, or behavioral beacons.
No Keystrokes or Input Monitoring: Custom dimensions, delay buffers, frame rates, and render settings remain strictly in local memory.
No Accounts or Passwords: The application does not require you to create an account, register an email, or sign in to use its full features.

2. Local Loopback Architecture

To render HTML animations that rely on relative assets, stylesheets, web fonts, and scripts, the Software creates an ephemeral HTTP server bound strictly to the local loopback interface (127.0.0.1). This local server:

Rejects all inbound network connections originating outside your machine.
Shuts down immediately upon window closure or application exit.
Transmits zero packets across external networks.

3. Website & Purchase Data

When you purchase a license through our website:

Payment Processing: Transactions are processed by PCI-DSS certified payment providers (such as Stripe or Lemon Squeezy). Your credit card numbers, billing addresses, and payment details are processed directly by the payment processor and are never stored on our servers.
License Fulfillment: We receive only your email address and transaction ID strictly to issue and verify your lifetime license key. We do not sell, rent, or trade your contact information.

4. GDPR, CCPA, and Global Compliance

Because our Software collects zero personal data, telemetry, or user analytics, our compliance posture is inherently strict by architectural design:

Data Minimization: We adhere to the strictest interpretation of Article 5(1)(c) of the EU GDPR by collecting zero unnecessary data.
Right to Erasure: If you ever wish your purchase record removed from our billing gateway, contact us and we will purge it within 48 hours.
No "Sale" of Data: We do not sell user data under the California Consumer Privacy Act (CCPA) or any other data privacy statute.

5. Security of Local Environment

The Chromium renderer operates within an isolated sandbox with context isolation enabled. The Software prevents untrusted remote code execution by restricting the rendering viewport exclusively to the imported project's local directory.

6. Contact Regarding Privacy

If you have questions, inquiries, or require a formal data processing verification for enterprise deployment, please contact our privacy compliance officer at:

privacy@d3motion.app