Security

Designed so your data stays yours

Security at 3DViewerConvert starts with a simple architecture: almost everything happens in your browser, so there is less to protect on our side.

Your files stay local

Viewing, measuring and converting run in your browser. Unless you publish a share link or save a model to your workspace, your file never leaves your device.

Encryption in transit & at rest

All traffic is served over TLS. Shared models are stored encrypted at rest on Cloudflare R2 and are only accessible through unguessable share IDs.

Secure authentication

Accounts are handled by Supabase Auth with Google OAuth or email/password. We never store your password and sessions rotate with every request.

Short processor list

We keep third-party data processors to a minimum: Cloudflare (edge + R2 storage) and Supabase (database & authentication). No trackers, no ad networks.

Reporting a vulnerability

Found a security issue? We appreciate responsible disclosure. Email security details to support@3dviewerconvert.com and we will respond promptly.