Privacy Policy
Effective date: October 14, 2026 · Applies to boxesmodel.com
This policy explains how boxesmodel handles information when you use the website, Google sign-in, model customization and purchases. boxesmodel is operated by an individual business operator based in China. For privacy questions, contact support@boxesmodel.com. Model use and purchase rules are in the Terms of Service.
Information we collect and how we use it
To provide accounts, model generation and digital delivery, we process sign-in details, necessary session information, submitted model parameters, generation jobs and file records; when you purchase, we process the order number, product, amount, payment and subscription status, and delivery records. When you contact support, we process the email, description and attachments you provide to resolve the request.
The website and hosting services also process network, device and technical information in requests to deliver pages, troubleshoot errors and prevent fraud and unauthorized access. Do not submit sensitive information unrelated to your issue in model parameters or support attachments.
Google sign-in and accounts
When you sign in with Google, we verify the identity credential Google provides and store an account identifier, display name and email in this product to identify your account and maintain sign-in and access control. This website never collects Google passwords. Signing in does not grant admin rights or paid download entitlements.
Browser data
The website uses necessary session cookies to keep you signed in and protect account requests. Optional analytics choices are saved in the current browser; clearing site data may require signing in again or resetting cookies. Files already downloaded to your device are not affected.
Necessary sign-in sessions last up to 7 days and sign-in security cookies up to 5 minutes; signing out clears the related session cookies. Analytics choices stay in local storage until you change or clear them.
Unexported parameters in the studio belong to the current page and may be lost if you refresh or close it. Note down the sizes and layout you want to keep.
Site analytics
To understand how the site is used, we aggregate daily counts of public page visits, referral categories and model file download responses by default. Basic statistics use no analytics cookies, create no visitor identifiers, and do not store IP addresses, accounts, full referrer URLs, search terms or per-visitor records; the data stays on this site, is not sent to Google and is not used for advertising or cross-site tracking. Known crawlers and prefetch requests are excluded where possible. Basic statistics are not affected by the Google Analytics cookie choice below; a download response does not mean the file was saved successfully.
After you allow site analytics, we use Google Analytics to understand traffic, visitor sources, model views, download starts and studio usage. Declining or withdrawing does not affect sign-in, modeling or free downloads, and activity while declined is never sent later.
Analytics include cleaned public page addresses, referring site domains, campaign identifiers, model identifiers and versions, categories and action types; names, email addresses, Google account identifiers, sign-in credentials and full model parameters are not sent. Accounts, orders, checkout, the admin console and embedded previews are excluded from analytics.
Google Analytics also processes analytics cookie identifiers and technical information such as browser and device, and receives IP addresses through the network connection; its processing is governed by the Google Privacy Policy. We do not link analytics identifiers to account data on this site.
Cookie settings
Necessary cookies keep you signed in and protect account requests. Analytics cookies are enabled only after you allow them. You can allow, decline or withdraw analytics cookies here at any time; your choice is saved in the current browser.
Service providers and data sharing
We use Google for authentication and infrastructure providers such as Railway for website hosting and data storage; when site analytics are enabled and you allow them, Google Analytics processes the related statistics. Payments are handled by Creem as Merchant of Record; billing and payment details needed at checkout are collected by Creem and its payment providers. boxesmodel keeps the order and status records needed for fulfilment and does not store full card numbers or security codes. To speed up sign-in, when you are signed out and hover, focus or press a button that requires sign-in (such as sign in, download or adjust size), the browser loads Google's sign-in component in advance; when the sign-in window opens, Google may show a "Continue as" prompt; you are not signed in to this site until you confirm.
These providers process information only as needed for their services and follow their own privacy rules, including the Google Privacy Policy and Creem Privacy Policy. We do not sell your personal information; necessary information may be provided to fulfil orders, protect account security, respond to valid legal requests or handle rights disputes.
Providers' servers may be outside your country or region, so using the service may involve cross-border processing. We manage providers and necessary data protection measures as required; contact us to learn how your information is handled.
Retention, security and legal basis
We process account, model and order information to perform the service contract; process necessary technical records for security, fraud prevention and operations; keep necessary transaction records for legal obligations; optional analytics require your permission. The specific legal basis depends on the applicable data protection rules.
Information is kept only as long as needed to provide the service, preserve purchased entitlements and delivered files, handle after-sales disputes, protect security and meet legal obligations. Retention periods for each category are set according to these purposes; information that is no longer needed is deleted or de-identified. When an account is deleted, transaction and dispute records that must be kept by law may be retained with restricted use.
We protect information with measures such as access control and protected sign-in sessions, but no network or storage can be absolutely secure. Protect your Google account, sign out on shared devices, and do not disclose sign-in credentials to others.
Your choices and rights
You can manage analytics cookies on this page. Declining or withdrawing does not affect sign-in, modeling or downloads, nor processing lawfully carried out before withdrawal. Your choice applies only to the current browser; you may need to set it again after changing devices or clearing site data. Necessary cookies serve the account and security features you request; disabling them may make those features unavailable.
Under applicable rules, you may request access, correction, a copy or deletion of personal information, ask to restrict or object to processing, and complain to a competent authority. Contact us from your account email at support@boxesmodel.com; we may verify your identity, will reply within 3 business days and will handle the request within the applicable legal period. Deleting your account may affect access to online files and entitlements; we will explain the impact first; cancel a subscription from "Subscription & billing".
Minors and policy updates
The service is not directed at children who cannot lawfully use such services on their own. Guardians who find inappropriate collection of a minor's information can contact us. Material privacy changes will be announced on the website or by account email; optional processing that requires new permission will be asked for first.