/
Cancel
loginSign UpUpload

Privacy Policy

Effective Date: March 16th, 2022
Last Updated: March 16th, 2022

Introduction

At Sketchfab, Inc. ("Sketchfab," "we" or "us"), we take the privacy of our users seriously. We work hard to ensure that our data processing operations comply with all applicable regulations in order to protect your privacy.

This Privacy Policy describes how we process the personal data you provide to us, or we otherwise collect, when you use any Sketchfab website, application, or service, that link to this Privacy Policy (collectively, the "Services"). We are responsible for providing the Services to you and are the controller of personal data processed under this Privacy Policy.

In this Privacy Policy, "user" or "you" means any person using or otherwise benefiting from the Services or otherwise submitting personal data to us via the Services.

For information regarding use of the Services, see the Sketchfab Terms of Use ("Terms of Use"), available at https://sketchfab.com/terms.

Information We Collect

We collect information on and through our Services. The specific types of information we collect vary depending on the nature of our relationship with you and how you choose to interact with us, but may include personal data.

The categories of information that we collect in connection to your use of our Services, as well as the corresponding purposes and legal bases, are described in the table below:

Register as a user
  • username
  • e-mail address
  • IP address
  • logs
  • cookies
 The processing is necessary for the performance of the contract to which the user is party.
Complete user onboarding
  • name
  • avatar
  • occupation
  • IP address
  • logs
 The processing is necessary for the performance of the contract to which the user is party.
Complete user profile
  • personal websites
  • social accounts
  • biography
  • skills
  • IP address
  • logs
  • primary location
 The processing is necessary for the performance of the contract to which the user is party.
Engage with other users' content (search, like, comment on Images, curate, view, follow)
  • IP address
  • logs
  • search queries
  • likes
  • commenting
  • curation
  • viewing
  • following activities
 The processing is necessary for the performance of the contract to which the user is party.
Host Images uploaded to the Services
  • images
 The processing is necessary for the performance of the contract to which the user is party.
Publish content (upload, describe, categorize, tag)
  • IP address
  • logs
 The processing is necessary for the performance of the contract to which the user is party.
Download content for free or for a price
  • first name
  • last name
  • postal address
  • PayPal e-mail address
  • IP address
  • logs
 The processing is necessary for the performance of the contract to which the user is party.
Become a seller on Sketchfab Store
  • first name
  • last name
  • e-mail address
  • VAT number
  • IP address
  • logs
  • country of business
  • other marketplaces profile links
 The processing is necessary for the performance of the contract to which the user is party.
Contact support
  • first name
  • last name
  • e-mail address
  • username
  • PayPal e-mail address
  • IP address
  • logs
  • user agent
  • primary location
 The processing is necessary for the performance of the contract to which the user is party.
Engage on the Forum
  • display name
  • e-mail address
  • username
  • avatar
  • biography
  • IP address
  • logs
  • user agent
  • navigation data (viewed what, for how long)
  • comments
  • likes
  • primary location
 The processing is necessary for the performance of the contract to which the user is party.
Participate in a community contest
  • first name
  • last name
  • username
  • navigation data (used to export a contact list of people potentially interested in participating)
 The processing is necessary for the performance of the contract to which the user is party.
Receive rewards (contests, prints, New Year cards...)
  • first name
  • last name
  • username
  • e-mail address
  • PayPal e-mail address
  • primary address
 The processing is possible as the user has given consent for this purpose.
Receive notifications and community newsletters
  • first name
  • e-mail address
 The processing is possible as the user has given consent for this purpose.
Publish a story on the Blog
  • first name
  • last name
  • username
  • lifestyle habits
  • occupation
  • education
  • skills
  • commenting data (spam prevention via Akismet)
  • primary location
 The processing is necessary for the performance of the contract to which the user is party.
Upgrade user account
  • first name
  • last name
  • postal address
  • PayPal e-mail address
  • IP address
  • logs
 The processing is possible for legitimate interests pursued by Sketchfab in connection with its provision and maintenance of user accounts.
Perform research and analysis about your use, or interest in, our Services or content, or services or content offered by others
  • e-mail address
  • user ID
  • occupation
  • skills
  • store revenue data
  • location
  • account type
  • spend
  • categories of models purchased
 The processing is possible as the user has given consent for this purpose, and for legitimate interests pursued by Sketchfab in connection with its research and analysis activities.
Develop and display content and advertising tailored to your interests on our site and others' sites
  • e-mail address
  • cookie tracking
 The processing is possible as the user has given consent for this purpose.
Prospection for professional users
  • first name
  • last name
  • e-mail address
  • current position
 The processing is possible for legitimate interests pursued by Sketchfab in connection with the marketing of its Services to professional users.

When you visit our Services, we may also automatically collect certain information for system administration including, where available, your IP address, your operating system and browser type and navigation data. Please see our cookies policy in the “Cookies” section below of this Privacy Policy for further information about what information will be automatically collected when you visit our Services.

In some cases, we receive personal data from third parties. For instance, while using the Services, individuals may provide information about another individual, or an authorized user (such as an account administrator) creating an account on your behalf may provide information about you. We retain personal data for as long as we reasonably need it to fulfill the purposes for which it was collected. For example, if you create an account with us, we will store the personal data associated with your account for as long as needed to maintain your account, provide the Services you requested, enforce any applicable terms that govern your use of the Services, and maintain appropriate records to reflect our delivery of the Services to you.

Privacy Settings / Opt Out

If we process your personal data based on your consent, you have the right to withdraw your consent at any time.

If you wish to modify any of your user profile information, withdraw your consent for the processing of your personal data, or cancel your account, you may update the settings in your user profile or contact us at privacy@sketchfab.com.

Children Privacy Rules

Our Services are not intended for persons under the age of 16, and we do not knowingly collect personal data directly from children under the age of 16. If you have reason to believe that a person under the age of 16 has provided personal data to us, please contact us at privacy@sketchfab.com, and we will make every effort to answer your queries and immediately delete that information from our databases.

Digital Will

Where the French Data Protection Act is applicable, you have the right to make arrangements for the storage and communication of your personal data after your death. To exercise this right, you can send us your instructions at privacy@sketchfab.com.

Recipients of Your Personal Data

We may share your personal data with the other entities within the Sketchfab group, but only for the purposes specified in this Privacy Policy.

We may otherwise disclose your personal data:

  • to business partners, suppliers, and sub-contractors for the performance of any contract we enter into with them or you, for example for hosting and operating the Services or providing support and maintenance services for the Services;
  • to analytics and search engine providers and other selected third parties that assist us in the improvement and optimization of our website;
  • to our regulators, law enforcement, or fraud prevention agencies, as well as our advisors (including legal advisors and auditors), courts, and any other authorized bodies, for the purposes of investigating any actual or suspected criminal activity or other regulatory or legal matters;
  • in the event of a merger, acquisition, or other similar event, to a prospective buyer or otherwise of our business or assets, in which case we will disclose your personal data to such prospective buyer or otherwise of such business or assets;
  • if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of Sketchfab, our customers, or others. This may include exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction;
  • to legal advisors and otherwise in connection with legal proceedings in order to enforce or apply our rights under any contract; and
  • otherwise where we have notified you of the intended disclosure, and where required, you have expressly given your prior consent to such disclosure.

You may provide information or content to be published or displayed on public areas of the Services, or transmitted to other users of the Services or third parties. Although you may set certain privacy settings for such information by logging into your account profile, anyone may view such information or content that you choose to submit or post in this manner.

Transfers of personal data outside of the European Economic Area

We operate and support the Services from different locations around the world (including the United States), which may have different data protection rules to those where you are located. Regardless of where your personal data is stored or processed, we will take all reasonable steps necessary to ensure that your personal data is treated securely and in accordance with this Privacy Policy.

If we transfer your personal data collected in the European Union to locations outside of the European Economic Area (for example, the United States), we do so pursuant to transfer mechanisms, such as the EU Standard Contractual Clauses (“SCCs”), adopted by the European Commission to help establish adequate safeguards for your personal data. The current version of the SCCs can be found at https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32021D0914&from=EN.

Please contact us using the information in the Contact Us section below if you would like more information regarding the transfer mechanisms we use for such transfers, or if you would like us to provide you with a copy of them.

Privacy Shield Framework

In accordance with the Court of Justice of the European Union’s (CJEU) invalidation of the Privacy Shield Framework as a valid transfer mechanism, Sketchfab no longer relies on the EU–US Privacy Shield Framework as a legal mechanism for transfers of personal data of its EU based users to the US. However, to demonstrate our commitment to privacy, we maintain our adherence to the Privacy Shield principles of notice, choice, accountability for onward transfer, security, data integrity and purpose limitation, access, recourse, enforcement and liability. Sketchfab remains subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC). If there is any conflict between the terms in this Privacy Policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern, but this does not limit any more protective rights you may have under applicable laws. In the context of an onward transfer, Sketchfab has responsibility for the processing of personal data we receive under the Privacy Shield and subsequently transfer to a third party acting as an agent on our behalf. Sketchfab shall remain liable under the Privacy Shield Principles if this agent processes such personal information in a manner inconsistent with the Privacy Shield Principles, unless we prove that we are not responsible for the event giving rise to the alleged damage. In certain circumstances, the Privacy Shield Framework provides the right to invoke binding arbitration to resolve complaints not resolved by other means, as described in Annex I to the Privacy Shield Principles in each of the Privacy Shield Frameworks. To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/.

Exercising Your Rights in Relation to Your Personal Data

Under the GDPR and, to the extent applicable under other privacy laws, you may have the rights listed below:

The right to request access to your personal data You may request confirmation that your personal data is being processed, access to your personal data (through us providing a copy) and other information about how we process your personal data.
Rectify your personal data You may request that we rectify your personal data if it is not accurate or not complete.
Erase your personal data You may ask us to erase or delete your personal data where there is no reason for us to continue to process it. This right would apply if we no longer need to use your personal data to provide the Service to you and/or we no longer have an on-going lawful basis for processing it.
Restrict or block the processing of your personal data You may ask us to restrict or block the processing of your personal data.
Obtain a copy of your personal data in portable form You may ask us for a copy of your personal data in a structured, commonly used, and machine readable format
Object to our processing of your personal data You may the right to object to our processing of your personal data on the basis of our legitimate business interests, unless we are able to demonstrate that, on balance, our legitimate interests override your rights or we need to continue processing your personal data for the establishment, exercise, or defense of legal claims. However, you also have the absolute right to object to our processing of your personal data for direct marketing purposes.
Not to be subject to automated decisions You may have the right to object to any automated decision making, including profiling, where the decision has a legal or significant impact on you.
Withdraw your consent You may have the right to withdraw your consent to our processing of your Personal Data.

You can request to exercise these rights, with a proof of your identity, by emailing privacy@sketchfab.com.

We will respond to any request received from you within one month from the date of the request. If your request is not sufficiently precise or does not include all elements enabling us to answer your request, Sketchfab may ask you to provide additional elements.

You may also have the right to lodge a complaint with the applicable data protection authorities. Please click https://edpb.europa.eu/about-edpb/about-edpb/members_en for information about EU data protection authorities, and https://ico.org.uk/ for information about the UK data protection authority.

California Privacy Rights

Pursuant to California’s Shine the Light statute (Cal. Civ. Code Sec. 1798.83), you can control if we share personal information with third parties for their marketing purposes. To opt-out of us sharing personal information with third parties for such purposes, email us at privacy@sketchfab.com or write to us in the “Contacting Sketchfab” section of this Privacy Policy and include “Marketing Opt-Out” in your request.

In addition, pursuant to the California Consumer Privacy Act (“CCPA”), California residents may have certain other rights concerning their personal information. This section applies solely to consumers who reside in the State of California and to the personal information of a particular California consumer or household (“California personal information”). It describes (i) how we collect, use, and share California personal information to the extent we act as a “business” under the CCPA, (ii) the rights that consumers have under the CCPA, and (iii) how to exercise those rights.

When we use the term “California personal information” in this section, we mean information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household of a particular California consumer or household.

California personal information does not include, and this section of the Privacy Policy does not apply to (i) personal information that is exempt from the CCPA; (ii) personal information we collect in connection with communications or transactions with consumers who are acting as representatives of companies and other organizations that occur solely within the context of conducing due diligence regarding, or providing or receiving a product or service to or from such companies or organizations, or (iii) personal information we collect, use, and share on behalf of our customers as a “service provider” under the CCPA.

California Personal Information We Collect

During the past twelve (12) months, we and our service providers may have collected the categories of California personal information set forth below, directly from you, automatically and indirectly from you, and from third parties, as described in the “Information We Collect” section above.

  • Identifiers (for example, name, postal address, date of birth, email address, IP address, and online identifiers);
  • Categories of personal information as defined by Cal. Civ. Code § 1798.80 (for example, name, telephone number, passport number, driver’s license number, and account numbers);
  • Protected classifications under California or federal law (for example, age, citizenship status, national origin or ancestry);
  • Commercial information (for example, transaction history);
  • Internet or other electronic network activity information, including information on your usage of the Services;
  • Geolocation data;
  • Sensory data (for example, audio from call recordings);
  • Professional or employment related information; and
  • Inferences drawn from any information identified above to create a profile.

Use of California Personal Information

We may use each of these categories of California personal information that we collect as indicated above as described in the “Information We Collect” section above.

Sharing California Personal Information

We may disclose each of these categories of California personal information that we collect as indicated above to the categories of third parties described in the “Recipients of Your Personal Data” section above.

We do not sell California personal information, and we do not have actual knowledge that we sell California personal information of California consumers under the age of 16 years old.

Your Privacy Rights

The CCPA and other California laws provide California residents with specific rights with respect to their California personal information. This section describes the rights you may have and explains how to exercise those rights.

Privacy Right Description
Notice You may have the right to be notified, at or before the point of collection, of the categories of personal information we collect and the purposes for which they will be used and shared.
Access You may have the right to request the categories of personal information that we collected in the previous twelve (12) months, the categories of sources from which the personal information was collected, the specific pieces of personal information we have collected about you, and the business purposes for which such personal information is collected and shared. You may also have the right to request the categories of personal information which were disclosed for business purposes, and the categories of third parties in the twelve (12) months preceding your request for your personal information.
Data Portability You may have the right to receive the personal information you have previously provided to us.
Erasure You may have the right to ask us to delete (and have us direct our service providers to delete) your personal information. However, please be aware that we may not fulfill your request for deletion if we (or our service provider(s)) are required or permitted to retain your personal information for one or more of the following categories of purposes: (1) to complete a transaction for which the personal information was collected, provide a good or service requested by you, or complete a contract between us and you; (2) to ensure our website integrity, security, and functionality; (3) to comply with applicable law or a legal obligation, or exercise rights under the law (including free speech rights); or (4) to otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.

Exercising Your Rights

If you would like to exercise your rights listed above, please send (or have your authorized agent send) an email to privacy@sketchfab.com, or call us toll free at +1 855 600 7532. You can also contact us using the other methods listed in the “Contacting Sketchfab” section below.

We cannot respond to your request or provide you with California personal information if we cannot verify your identity or authority to make the request and confirm that the California personal information relates to you. If you have an online account with us, we may deliver our written response to that online account. If you do not have an online account with us, we will deliver our written response by email or electronically.

Please note that we will not charge you for making a request, provided that you make no more than two (2) requests per year. If you make three (3) or more requests in any given twelve (12) month period, we may refuse to respond to such requests, if determined by us to be unfounded or excessive (e.g. repetitive in nature), or we may charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested. If we refuse to act on the request, we will provide you notice and the reason for our refusal to act.

Non-Discrimination

Subject to certain exceptions, you have the right to not receive discriminatory treatment for exercising your access, data portability, and deletion rights described above.

Cookies

We use various cookies on our Services for analysis and improvement. When you visit our Services, cookies may be placed on your device, as per the list below.

What is a cookie? A "cookie" is a small text file placed in your browsing software to facilitate your browsing through our Services.

Internal cookies required to run the Website in the best possible manner

Name Purpose
sb_sessionid Uniquely identifies the session of the visitors. Allows keeping the session of the user active when logged-in.
oauth_step Stores the current step of the OAuth login process the user is in.
oauth_connected_service Indicates if the user logged in with a social services (Google, Facebook, Twitter) during the OAuth process.
sf_show_viewer_hint Indicates whether to show the overlaid help when the viewer starts.
sb_theatre_mode Indicates whether the user has chosen the "Theatre" layout for model pages.
sf_show_vr_hint Indicates whether to show the help when entering the VR mode.
sb_banner_closed Indicates whether the promotional banner should be displayed.
sf_volume Holds the value that the viewer should play the volume at, for models with sound.
sf_org_models_display The models in an organization can either be displayed in a grid or a table. This cookie stores the user preference on how to display the models in an organization.
sb_allows_age_restricted Indicates the user's preference for displaying restricted models.
sf_last_news_notification Indicates which is the latest blog post update a user saw in their newsfeed.
sb_csrftoken Protects against Cross-Site Request Forgery security attacks.
sf_email_confirmed Indicates whether the user still needs to confirm their email address.
sb_buy_plan_on_onboarding Indicates whether the user chose to subscribe to a paid plan as part of their onboarding.
sf_getting_started_closed Indicates if the "getting started" block should be closed
sf_upsell_coupon Indicates if the user is eligible for a store discount coupon
sf_gdpr_consend_provided_at Indicates whether and when the user gave their consent for GDPR
sf_first_purchase Indicates if the user is eligible for the "first purchase" Store discount

Audience measurement cookies

Name Purpose
sb_t_us Stores the ID of a logged-in user.
sb_t_camp Stores the referral source of a visitor.
Mixpanel To track event-based analytics in order to optimize conversions and user journey.
has_mixpanel_last_touch Indicates whether the visitor has been correctly attributed to its traffic source.
sb_shareasaleSSCID Share-a-sale affiliate sscid cookie.
Sendinblue Segment audiences so they receive relevant communications via email.

Third party cookies improving the interactivity of the Website

Name Purpose
Facebook Makes it possible to share updates to Facebook.
Twitter Makes it possible to share updates to Twitter.
Discourse Service provider helping us to run our Forum.
WordPress Service provider helping us to run our Blog.
Zendesk Service provider helping us to run our Help Center.

Security of your personal data

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website and apps, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to the Services. Any transmission is at your own risk. Once we have received your personal data, we will use strict procedures and security features to prevent unauthorized access, including keeping security patches up to date, and by constantly investigating new ways to keep data secure.

Changes to this Privacy Policy

We may revise this Privacy Policy from time to time. The most current version of the Privacy Policy will govern our use of your personal data and will always be located at https://sketchfab.com/privacy. If we make a material change to this Privacy Policy (for example, if the modifications concern the categories of data we process or the purposes of the processing), we will notify you via the Services or via email (to the email address associated with your account) within thirty (30) days before publication.

Contacting Sketchfab

If you have any questions about this Privacy Policy, or the privacy practices of Sketchfab please email us at privacy@sketchfab.com or write to us at:

Sketchfab, Inc
440 9th Ave, Suite 1700
New York, NY 10001

If you are in the European Union, you may write to us at:

Sketchfab
3 Rue d'Uzès
75002,
Paris
France