Privacy Policy
Effective date: 30 September 2026
Tesla Wrap Studio (s3xy-wrap.com, "the site") is run by an individual developer. This policy explains what personal information the site collects, why, how long it is kept, who processes it on our behalf and how you can exercise your rights. It applies to every user.
1. Information we collect
We collect only what the site needs to work:
Account: your email address, your password (stored only as a one-way hash, never in readable form), nickname, profile image, the site language you signed up in and when you last signed in.
Sign-in with Google or Kakao: if you choose one of them, we receive your account ID with that service, your email address and whether that service has verified it, your name or nickname and your profile image. We also keep the access token the service issues for the sign-in. We do not request your contacts, friends list, phone number, birthday or gender.
Naver: Naver can only be linked to an existing account, from your profile page, and then used to sign in to it. We keep only your Naver account ID and the tokens Naver issues for the sign-in. Your Naver email address is neither used nor stored.
What you create: designs saved in the editor, images you upload or submit, licence plates you save, likes, the prompts you enter for AI pattern generation and the consent you give when you submit a design to the public catalogue.
Feedback: your message, an optional reply email address, the page you sent it from, your browser's user agent and your IP address.
Usage statistics, without cookies: pages viewed and actions such as downloads or searches, the page language, a random visitor ID kept in your browser's local storage, a session ID, your user ID if you are signed in, a coarse device type and browser family (such as Chrome or Safari; the full browser string is not stored), the country Cloudflare derives from your IP address (the address itself is not stored in these statistics) and the domain of the site that linked you here. Search terms are recorded after removing anything that looks like a licence plate or phone number. If your browser sends a Do Not Track signal, no statistics are sent.
Technical data: like any web service, our server and Cloudflare process your IP address, browser user agent and request details to deliver pages, prevent abuse (rate limits, and the Cloudflare Turnstile bot check on email sign-in) and fix errors. Server logs contain this information.
The licence plate maker draws the plate in your browser. The plate text leaves your device only if you save the plate to your account.
2. Why we use it
To create and run your account and sign you in; to save, show and, when you choose, publish your designs and uploads; to send service emails (address verification, password reset and notices about content you submitted); to answer feedback; to keep the site secure and prevent abuse; and to understand, in aggregate, which features are used so we can improve them.
We do not sell personal information, show advertising or send marketing email. If that ever changes, we will ask for your separate consent first.
3. How long we keep it
Account information, social sign-in links and your content are kept while your account exists. You can delete your account on your profile page, and it stops working immediately. To have the remaining records (such as designs, uploads and social sign-in links) permanently erased, email info@s3xy-wrap.com and we will erase them without undue delay, unless a law requires us to keep something.
Email verification and password reset links expire after a limited time.
Usage statistics are kept by Cloudflare for about three months and then deleted automatically.
Feedback messages are kept until they have been dealt with and are no longer needed. Server logs are kept only as long as needed for security and troubleshooting.
4. Service providers and transfers abroad
We use the providers below to run the site. They process information on our behalf and only for these tasks. Your information may therefore be processed in countries other than the one you are in; while you use the site, it is sent to them over the network as each request is made.
Cloudflare, Inc. (United States; global network): delivers the website, runs the Turnstile bot check, stores usage statistics, runs AI image generation for your prompts and delivers notification emails to the site operator. Information: IP address, request details, usage statistics and AI prompts.
Resend, Inc. (United States): sends account emails. Information: your email address and the content of the email.
Server hosting provider: the site's API, database and uploaded files run on a rented virtual server, which may be in a country other than the one you are in. Information: the account and content information described in section 1.
Google, Kakao and Naver are not our processors. When you choose to sign in with one of them, that company handles the sign-in under its own privacy policy and sends us the information listed in section 1.
These transfers are necessary to provide accounts. If you do not want them, do not create an account; you can still use the site without one.
5. Your rights
You can ask to see, correct or delete your personal information, ask us to stop processing it, and withdraw consent at any time. You can change your nickname and password and delete your account on your profile page; for anything else, email info@s3xy-wrap.com. We will respond without undue delay. A legal representative may make a request on your behalf.
You can also complain to the data protection authority where you live.
6. Cookies and browser storage
We do not use advertising or tracking cookies. The site keeps your sign-in tokens, settings and the random visitor ID in your browser's local storage, which you can clear at any time. During sign-in with Google, Kakao or Naver, a cookie that expires after 10 minutes protects against forged requests. Cloudflare may set cookies it needs for security and the bot check.
7. How we protect it
Connections use HTTPS. Passwords are stored as one-way hashes, and sign-in tokens are stored as hashes too. Only the operator can access the server and database.
8. Children
The site is not directed at children. If we learn that we hold a child's personal information without a parent's or guardian's consent, we will delete it. Parents and guardians can contact us at info@s3xy-wrap.com.
9. Contact
Questions about privacy: info@s3xy-wrap.com.
10. Changes to this policy
When this policy changes, we will update this page and the effective date above. Significant changes will be announced on the site before they take effect.
