Privacy Policy

Effective Date: May 20th, 2021
Last Updated: May 20th, 2021

Introduction
Identity of the Controller
The Data Collected by Sketchfab Services
Privacy Settings / Opt Out
Children Privacy Rules
Digital Will
Recipients of Your Personal Data
Where We Store Your Personal Data
Exercising Your Rights in Relation to Your Personal Data
Cookies
Management of the Cookies
Changes to this Privacy Policy
Contacting Sketchfab

Introduction

At Sketchfab, we take the privacy of our users seriously. We work hard to ensure that our data processing operations comply with all applicable regulations in order to protect your privacy.

This Privacy Policy describes how we look after your personal data and how we meet our legal obligations under the applicable data protection laws.

In this Privacy Policy, "user" or "you" means any person using or otherwise benefiting from the Services or otherwise submitting personal data to us via the Services.

This Privacy Policy applies to the processing activity carried out by Sketchfab, Inc. ("Sketchfab," "we" or "us") on your personal data when you use any Sketchfab service, including all associated software and websites (collectively, the "Services").

The purpose of this Privacy Policy is to describe the conditions under which your personal data is collected and processed by us.

BY ACCESSING OR USING THE SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTAND, AND AGREE TO BE BOUND BY THIS PRIVACY POLICY INCLUDING OUR COOKIES POLICY.

IF YOU DO NOT AGREE TO THESE TERMS, DO NOT USE THE SERVICES.

This Privacy Policy is incorporated by reference into the Sketchfab Terms of Use ("Terms of Use"), available at https://sketchfab.com/terms, to which you agree to be bound by using the Services.

Identity of the Controller

In this privacy policy, the terms "we", "our", and "us" are used to refer to:

Sketchfab, Inc
1123 Broadway, Ste 501
New York, NY 10010
UNITED STATES OF AMERICA

We are a controller of your information, which means that we are responsible for looking after it. We will use your personal data fairly, lawfully, in a transparent manner, and in accordance with the all applicable data protection laws.

The Data collected by Sketchfab Services

By using our Services, we may collect your personal data. Please find below a list of the personal data we process.

Purposes	Which type of data	Legal basis for the processing
Register as a user	Username, e-mail address IP address, logs Cookies	The processing is necessary for the performance of the contract to which the user is party.
Complete user onboarding	Name, avatar Occupation IP address, logs	The processing is necessary for the performance of the contract to which the user is party.
Complete user profile	Personal websites, social accounts Biography, skills IP address, logs Primary location	The processing is necessary for the performance of the contract to which the user is party.
Engage with other users' content (search, like, comment, curate, view, follow)	IP address, logs Search queries, likes, commenting, curation, viewing, and following activities	The processing is necessary for the performance of the contract to which the user is party.
Publish content (upload, describe, categorize, tag)	IP address, logs	The processing is necessary for the performance of the contract to which the user is party.
Download content for free or for a price	First name, last name, postal address PayPal e-mail address IP address, logs	The processing is necessary for the performance of the contract to which the user is party.
Become a seller on Sketchfab Store	First name, last name, e-mail address VAT number IP address, logs Country of business Other marketplaces profile links	The processing is necessary for the performance of the contract to which the user is party.
Contact support	First name, last name, e-mail address, username PayPal e-mail address IP address, logs User agent Primary location	The processing is necessary for the performance of the contract to which the user is party.
Engage on the Forum	Display name, e-mail address, username, avatar Biography IP address, logs User agent, navigation data (viewed what, for how long), comments, likes Primary location	The processing is necessary for the performance of the contract to which the user is party.
Participate in a community contest	First name, last name, username Navigation data (used to export a contact list of people potentially interested in participating)	The processing is necessary for the performance of the contract to which the user is party.
Receive rewards (contests, prints, New Year cards...)	First name, last name, username, e-mail address PayPal e-mail address Primary address	The processing is possible as the user has given consent for this purpose.
Receive notifications and community newsletters	First name, e-mail address	The processing is possible as the user has given consent for this purpose.
Publish a story on the Blog	First name, last name, username Lifestyle habits Occupation, education, skills Commenting data (spam prevention via Akismet) Primary location	The processing is necessary for the performance of the contract to which the user is party.
Upgrade user account	First name, last name, postal address PayPal e-mail address IP address, logs	The processing is possible for legitimate interests pursued by Sketchfab.
Perform research and analysis about your use, or interest in, our services or content, or services or content offered by others	E-mail address, user ID Occupation, skills Store revenue data Location Account type, spend, categories of models purchased	The processing is possible as the user has given consent for this purpose, and for legitimate interests pursued by Sketchfab.
Develop and display content and advertising tailored to your interests on our site and others' sites	E-mail address Cookie tracking	The processing is possible as the user has given consent for this purpose.
Prospection	First name, last name, e-mail address Current position	The processing is possible for legitimate interests pursued by Sketchfab.

Apart from the limited personal data described above, we do not collect and do not wish to receive any other personally identifying data.

Each time you visit our website, we may also automatically collect information and personal data about your computer for system administration including, where available, your IP address, your operating system and browser type and navigation data, as described in the next section below.

Please see our cookies policy in the “Cookies” section below of this Privacy Policy for further information about what information may be automatically collected when you visit our website.

Privacy Settings / Opt Out

If we process your personal data based solely on your consent, you have the right to withdraw your consent at any time.

If you wish to modify any of your user profile information, withdraw your consent for the processing of your personal data, or cancel your account, you may update the settings in your user profile or contact us at privacy@sketchfab.com.

Children Privacy Rules

Our website is not intended for persons under the age of 16, and we do not knowingly collect personal data directly from children under the age of 16. If you have reason to believe that a person under the age of 16 has provided personal data to us, please contact us at privacy@sketchfab.com, and we will make every effort to answer your queries or to delete that information from our databases.

Digital Will

Under the French Digital Republic bill, you have the right to make arrangements for the storage and communication of your personal data after your death. To exercise this right, you can send us your instructions at privacy@sketchfab.com.

Recipients of Your Personal Data

We may share your information with the other members within Sketchfab but only for the purposes specified in this Privacy Policy.

We may disclose your personal data:

to business partners, suppliers, and sub-contractors for the performance of any contract we enter into with them or you, for example for hosting and operating the Services or providing support and maintenance services for the Services;
to analytics and search engine providers and other selected third parties that assist us in the improvement and optimization of our website;
to our regulators, law enforcement, or fraud prevention agencies, as well as our advisors (including legal advisors and auditors), courts, and any other authorized bodies, for the purposes of investigating any actual or suspected criminal activity or other regulatory or legal matters;
in the event of a merger, acquisition, or other similar event, to a prospective buyer or otherwise of our business or assets, in which case we will disclose your personal data to such prospective buyer or otherwise of such business or assets;
if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of Sketchfab, our customers, or others. This may include exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction; and
to legal advisors and otherwise in connection with legal proceedings in order to enforce or apply our rights under any contract;

We do not share your information with third parties for their marketing purposes, unless we obtain your consent.

Where We Store Your Personal Data

Transfers inside of the European Economic Area

All information you provide to us is stored on our secure servers, within the European Economic Area ("EEA").

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website and apps, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website. Any transmission is at your own risk. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorised access, including keeping security patches up to date wherever possible, and by constantly investigating new ways to keep data secure.

Transfers outside of the European Economic Area

The data that we collect from you will be transferred to our US entity in order to be processed by our Marketing, our Community, and our Operations teams. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. In particular, we comply with the EU-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union to the United States. On 16 July 2020, the Court of Justice of the European Union (CJEU) invalidated the Privacy Shield Framework while confirming the validity of the EU Standard Contractual Clauses for the transfer of personal data to processors outside the EU/EEA ("SCCs"). Pending the outcome of the U.S. Government and the European Commission negotiations on an enhanced EU-U.S. Privacy Shield framework to comply with the July 16, 2020 judgment of the CJEU, Sketchfab no longer relies on the EU–US Privacy Shield Framework as a legal basis for transfers of personal data of its EU customers to the US, but instead uses SCCs to ensure that the transfer is based on a valid method. However, we maintain our adherence to the Privacy Shield principles of notice, choice, accountability for onward transfer, security, data integrity and purpose limitation, access, recourse, enforcement and liability. Sketchfab remains subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC). If there is any conflict between the terms in this Privacy Policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. In the context of an onward transfer, Sketchfab has responsibility for the processing of personal data we receive under the Privacy Shield and subsequently transfer to a third party acting as an agent on our behalf. Sketchfab shall remain liable under the Privacy Shield Principles if this agent processes such personal information in a manner inconsistent with the Privacy Shield Principles, unless we prove that we are not responsible for the event giving rise to the alleged damage. In certain circumstances, the Privacy Shield Framework provides the right to invoke binding arbitration to resolve complaints not resolved by other means, as described in Annex I to the Privacy Shield Principles in each of the Privacy Shield Frameworks. To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/.

Please note that, for the purposes listed in this Privacy Policy, we may also transfer your personal data to our service providers based outside of the European Union in countries other than the USA which are not considered as providing an adequate level of protection by the EU Commission (see https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en for further detail).

We guarantee that we will take all necessary measures to secure these data transfers in accordance with the GDPR through the use of SCCs. A copy of the European Commission approved model SCCs is available here: https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32010D0087&from=en

Exercising Your Rights in Relation to Your Personal Data

Before processing your personal data and, at the latest, at the time of collection of your personal data, we inform you of the purpose of the processing of your personal data, the recipients of this data, the retention period applied to your personal data, as well as your rights in this context.

Under French law n°78-17 dated 6 January 1978 on information technology, data files and civil liberties as amended and, after 25 May 2018, under the GDPR, you have the right to access, to rectify, to restrict and, where applicable, to delete your personal data. You also hold the right to data portability.

You have the right to request access to your Personal Data	You have the right to request confirmation that your Personal Data is being processed, access to your Personal Data (through us providing a copy) and other information about how we process your Personal Data.
You have the right to ask us to rectify your Personal Data	You have the right to request that we rectify your Personal Data if it is not accurate or not complete.
You have the right to ask us to erase your Personal Data	You have the right to ask us to erase or delete your Personal Data where there is no reason for us to continue to process your Personal Data. This right would apply if we no longer need to use your Personal Data to provide the Service to you, where you withdraw your consent for us to process special categories of your Personal Data, or where you object to the way we process your Personal Data (see the section "You have the right to object..." within this table below).
You have the right to ask us to restrict or block the processing of your Personal Data	You have the right to ask us to restrict or block the processing of your Personal Data that we hold about you. This right applies where you believe the Personal Data is not accurate, you would rather we block the processing of your Personal Data rather than erase your Personal Data, and where we don't need to use your Personal Data for the purpose we collected it for but you may require it to establish, exercise or defend legal claims.
You have the right to port your Personal Data	You have the right to obtain and reuse your Personal Data from us to reuse (in a structured, commonly used, and machine readable format) for your own purposes across different services. This allows you to move Personal Data easily to another organization, or to request us to do this for you.
You have the right to object to our processing of your Personal Data	You have the right to object to our processing of your Personal Data on the basis of our legitimate business interests, unless we are able to demonstrate that, on balance, our legitimate interests override your rights or we need to continue processing your Personal Data for the establishment, exercise, or defence of legal claims. However, you also have the absolute right to object to our processing of your Personal Data for direct marketing purposes.
You have the right not to be subject to automated decisions	You have the right to object to any automated decision making, including profiling, where the decision has a legal or significant impact on you.
You have the right to withdraw your consent	You have the right to withdraw your consent to our processing of your Personal Data.

You can exercise these rights, with a proof of your identity, by simple written request sent by email to privacy@sketchfab.com.

We will respond to any request received from you within one month from the date of the request. If your request is not sufficiently precise or does not include all elements enabling us to answer your request, Sketchfab may ask you to provide additional elements.

You also have the right to lodge a complaint with the data protection national. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL): https://www.cnil.fr/.

California Privacy Rights

Pursuant to California’s Shine the Light statute (Cal. Civ. Code Sec. 1798.83), you can control if we share personal information with third parties for their marketing purposes. To opt-out of us sharing personal information with third parties for such purposes, email us at privacy@sketchfab.com or write to us in the “Contacting Sketchfab” section of this Privacy Policy and include “Marketing Opt-Out” in your request.

In addition, pursuant to the California Consumer Privacy Act of 2018 (“CCPA”), California residents may have certain other rights concerning their personal information. This section describes (i) the categories of personal information collected and disclosed by Sketchfab, subject to CCPA, (ii) your privacy rights under CCPA, and (iii) how to exercise those rights.

When we use the term “personal information” in this section, we mean information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

Personal Information We Collect.

During the past twelve (12) months, we and our service providers have collected the categories of personal information set forth below. We may disclose each of these categories of personal information to our service providers for our business purposes (to enable the service providers to provide their services) and as otherwise described in the “Recipients of Your Personal Data” section above. We will not collect additional categories of personal information or use personal information collected for additional purposes without providing you notice.

Identifiers (for example, name, postal address, date of birth, email address, IP address, and online identifiers);
Categories of personal information as defined by Cal. Civ. Code § 1798.80 (for example, name, telephone number, passport number, driver’s license number, and account numbers);
Protected classifications under California or federal law (for example, age, citizenship status, national origin or ancestry);
Commercial information (for example, transaction history);
Internet or other electronic network activity information, including information on your usage of the Services;
Geolocation data;
Sensory data (for example, audio from call recordings);
Professional or employment related information; and
Inferences drawn from any information identified above to create a profile.

In the last 12 months, we do not have knowledge that we sold any personal information of California consumers, nor actual knowledge that we sold the personal information of California consumers under the age of 16 years old. The CCPA defines “sale” as: selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information to another business or third party for monetary or valuable consideration. If we do sell your personal information, we will notify you, and if you submit to us a verifiable consumer request we will disclose to you a list containing the categories of personal information that we sold in accordance with the CCPA’s requirements.

Your Privacy Rights.

In accordance with the CCPA, California residents may exercise, under certain conditions, the following privacy rights with respect to their personal information. Please note: you will not be discriminated against in any way if you exercise the rights listed below, which means we will not deny goods or services to you, provide different prices or rates for goods or services to you, or provide a different level or quality of goods or services to you.

Privacy Right	Description
Notice	You may have the right to be notified, at or before the point of collection, of the categories of personal information we collect and the purposes for which they will be used and shared.
Access	You may have the right to request the categories of personal information that we collected in the previous twelve (12) months, the categories of sources from which the personal information was collected, the specific pieces of personal information we have collected about you, and the business purposes for which such personal information is collected and shared. You may also have the right to request the categories of personal information which were disclosed for business purposes, and the categories of third parties in the twelve (12) months preceding your request for your personal information.
Data Portability	You may have the right to receive the personal information you have previously provided to us.
Erasure	You may have the right to ask us to delete (and have us direct our service providers to delete) your personal information. However, please be aware that we may not fulfill your request for deletion if we (or our service provider(s)) are required or permitted to retain your personal information for one or more of the following categories of purposes: (1) to complete a transaction for which the personal information was collected, provide a good or service requested by you, or complete a contract between us and you; (2) to ensure our website integrity, security, and functionality; (3) to comply with applicable law or a legal obligation, or exercise rights under the law (including free speech rights); or (4) to otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.
To Opt Out	To the extent we sell your Personal Information you may have the right to request to opt out of such sale.

How to Exercise Your Rights.

If you would like to exercise your rights listed above, please send (or have your authorized agent send) an email to privacy@sketchfab.com, or call us toll free at +1 855 600 7532. You can also contact us using the other methods listed in the “Contacting Sketchfab” section below.

How We Respond to Your Requests.

In all cases, we will respond to your request within 45 days. However, where reasonably necessary, we may extend our response time by an additional 45 days, provided we send you notice of such extension first. We will provide the information to you via your preferred delivery mechanism. If the information is provided to you electronically, we will provide you the information in a portable format and, to the extent technically feasible, in a machine readable, readily useable format that allows you to freely transmit this information without hindrance.

Please note that we will not charge you for making a request, provided that you make no more than two (2) requests per year. If you make three (3) or more requests in any given twelve (12) month period, we may refuse to respond to such requests, if determined by us to be unfounded or excessive (e.g. repetitive in nature), or we may charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested. If we refuse to act on the request, we will provide you notice and the reason for our refusal to act.

Cookies

We use various cookies on our website for website analysis and improvement. When you visit our website, cookies may be placed on your computer or smartphone.

What is a cookie? A "cookie" is a small text file placed in your browsing software to facilitate your browsing through our websites.

Different types of cookies are placed on our website, as per the list below. Please note that except in the case of a specific exemption (such as for essential cookies), the recording of a cookie on your device is subject to your express consent.

Internal cookies required to run the Website in the best possible manner

Name	Purpose	Duration
sb_sessionid	Uniquely identifies the session of the visitors. Allows keeping the session of the user active when logged-in.	1 year
oauth_step	Stores the current step of the OAuth login process the user is in.	3 minutes
oauth_connected_service	Indicates if the user logged in with a social services (Google, Facebook, Twitter) during the OAuth process.	3 minutes
skfb_referrer_override	Holds the actual value of the request's referrer, because it can be set incorrectly when using Google, Facebook, or Twitter login.	4 minutes
sf_show_viewer_hint	Indicates whether to show the overlaid help when the viewer starts.	6 months
sb_theatre_mode	Indicates whether the user has chosen the "Theatre" layout for model pages.	1 year
sf_show_vr_hint	Indicates whether to show the help when entering the VR mode.	1 hour
sb_banner_closed	Indicates whether the promotional banner should be displayed.	End date of campaign (never more than 3 months)
sf_volume	Holds the value that the viewer should play the volume at, for models with sound.	1 year
sb_allows_age_restricted	Indicates the user's preference for displaying restricted models.	1 year
sf_last_news_notification	Indicates which is the latest blog post update a user saw in their newsfeed.	1 year
sb_csrftoken	Protects against Cross-Site Request Forgery security attacks.	1 year
sb_model_pwd	Indicates whether a user has had access to a password-protected model.	30 seconds
sf_email_confirmed	Indicates whether the user still needs to confirm their email address.	60 seconds
sb_buy_plan_on_onboarding	Indicates whether the user chose to subscribe to a paid plan as part of their onboarding.	1 year
sf_getting_started_closed	Indicates if the "getting started" block should be closed	1 year
sb_upsell_coupon	Indicates if the user is eligible for a store discount coupon	7 days
sf_gdpr_consend_provided_at	Indicates whether and when the user gave their consent for GDPR	1 year

Audience measurement cookies

Name	Purpose	Duration
sb_t_us	Stores the ID of a logged-in user.	Session length, 1 year maximum
sb_t_camp	Stores the referral source of a visitor.	1 day
Google Analytics (_gat, _ga, _gid)	To track traffic sources and measure aggregated KPI trends across our website.	2 years by default https://policies.google.com/privacy
Mixpanel	To track event-based analytics in order to optimize conversions and user journey.	1 year https://mixpanel.com/legal/privacy-policy/
has_mixpanel_last_touch	Indicates whether the visitor has been correctly attributed to its traffic source.	24 hours
sb_shareasaleSSCID	Share-a-sale affiliate sscid cookie.	1 year https://www.shareasale.com/PrivacyPolicy.pdf
AdRoll (__adroll_fpc)	Helps us recommend users products they would be interested in.	https://www.adrollgroup.com/privacy
Facebook	To track our conversions.	https://www.facebook.com/policies/cookies/
LinkedIn	To track our conversions.	https://www.linkedin.com/legal/privacy-policy
Twitter	To track our conversions.	https://twitter.com/en/privacy
Sendinblue	Segment audiences so they receive relevant communications via email.	https://www.sendinblue.com/legal/privacypolicy/
HubSpot	Customer relationship management tools and analytics.	https://legal.hubspot.com/privacy-policy

Third party cookies improving the interactivity of the Website

Name	Purpose	Duration
Facebook	Makes it possible to share updates to Facebook.	https://www.facebook.com/policies/cookies/
Twitter	Makes it possible to share updates to Twitter.	https://twitter.com/en/privacy
Discourse	Service provider helping us to run our Forum.	https://www.discourse.org/privacy
WordPress	Service provider helping us to run our Blog.	https://wordpress.org/about/privacy/
Zendesk	Service provider helping us to run our Help Center.	https://www.zendesk.com/company/customers-partners/cookie-policy/

Changes to this Privacy Policy

We may revise this Privacy Policy from time to time. The most current version of the Privacy Policy will govern our use of your information and will always be located at https://sketchfab.com/privacy. If we make a material change to this Privacy Policy, we will notify you via the Services or via email (to the email address associated with your account).

Contacting Sketchfab

If you have any questions about this Privacy Policy, or the privacy practices of Sketchfab please email us at privacy@sketchfab.com or write to us at:

Sketchfab, Inc
1123 Broadway
Suite 501
New York, NY 10010

If you are in the European Union, you may write to us at:

Sketchfab
99 Rue de La Verrerie
75004,
Paris
France