Privacy policy

1. Controller

Tim Hägele
c/o Impressumservice Dein-Impressum
Stettiner Str. 41
35410 Hungen
Germany

2. In short

This policy covers www.thavision.com and all its subdomains. The sites set no cookies, use no third-party analytics and load no third-party content (fonts, scripts, videos). Mesh2Solid and bwf-edit process your files only in your browser; they are not uploaded to our servers unless you explicitly send us a file through an upload link (section 8). Mesh2Solid counts its usage in daily totals, see section 7.

3. Hosting and server logs

The sites run on a server of netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. For each request the web server logs technically necessary data: IP address, date and time, requested address, status code, amount of data transferred, referrer and browser identification (user agent). The purpose is secure and stable operation; the legal basis is Art. 6(1)(f) GDPR. Logs are rotated and overwritten continuously; only a few older log files are kept, usually covering a few days.

4. Protection against attacks (CrowdSec)

To protect the sites, the software CrowdSec scans the server logs for attack patterns and temporarily blocks suspicious IP addresses. Detected attacks (IP address, time, type of attack) are reported to CrowdSec SAS (France) and feed a shared blocklist. The legal basis is Art. 6(1)(f) GDPR (security of the service).

5. Storage in your browser

Some tools store settings in your browser's local storage (localStorage), e.g. the chosen language and, for Mesh2Solid and bwf-edit, your licence data. This data stays on your device and is not sent to us; you can delete it in your browser settings.

6. Licences and purchases via Polar

Paid licences are sold by Polar (polar.sh) as merchant. When you buy, Polar processes your order and payment data under its own responsibility; the Polar privacy policy applies. Polar also processes data in the USA.

To check a licence, your browser sends the licence key, the activation ID and a device label (operating system and site address) to Polar's interface (api.polar.sh). For Mesh2Solid our server also checks the key and activation with Polar before it releases the full version; it keeps the result in memory for at most seven days and does not store it permanently. The legal basis is Art. 6(1)(b) GDPR (performance of the licence contract).

7. Usage statistics in Mesh2Solid

So that we know whether and how Mesh2Solid is used, your browser reports the name of an event to our server when you open the page and on certain actions (file loaded, analysed, saved as STEP, repair function used, buy button clicked), together with coarse classes: file format, size class of the mesh, duration of the analysis, chosen language, free or Pro version. File names, file contents, licence keys or identifiers are not transmitted; no cookies are set and nothing is stored in your browser.

To count the visitors of a day, the server forms a hash from your IP address and browser identification (user agent) together with a random value generated anew every day. The random value and the hashes exist only in memory and are discarded at the latest when the day changes; afterwards a visit can no longer be attributed to anyone, not even by us. Only daily totals are stored (e.g. “120 visitors, 45 analyses”). Likewise the server counts how many different Pro licences were used on a day, without storing the licences themselves. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is improving the service and planning its operation.

8. Files sent through an upload link

If a mesh does not convert properly in Mesh2Solid, we send you on request a link that is valid for one day. If you upload a file through it, we store the file, its name, your optional comment and the time on our server in order to find and fix the problem. Your IP address is not stored with the file (for server logs see section 3). The files are not shared and are deleted 30 days after the link was created at the latest. The legal basis is Art. 6(1)(b) GDPR (handling your request).

9. Contact by email

If you write to me, I process your details to handle the request (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed for it.

10. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on Art. 6(1)(f) GDPR. Please contact contact@thavision.com. You may also lodge a complaint with a data protection supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

As of October 2026 · Imprint