Privacy Policy

FSH Labs is a small fabrication shop, not an advertising business. We collect what we need to quote your job, build it, take payment, and get it to you. We do not sell your data, and there is no advertising or analytics tracker anywhere on this site.

Account details. If you create an account: your name, email address, an optional phone number, and a password. The password is handled by our commerce backend and is never visible to us in readable form.

Order details. What you ordered, the options and materials you chose, quantities, prices, your shipping address, and the state of the order. You can check out as a guest, in which case we hold the same order record without an account attached to it.

Payment details. Card data is entered into a Stripe-hosted field embedded in our checkout and is sent directly to Stripe. Our servers never see it. What comes back to us is whether the payment succeeded, and the last-four and card brand that Stripe shows on the receipt.

Design files and artwork. The models, drawings, and images you send us so we can build your part. How these are handled differs by route, and the next section is specific about it.

Messages. The description you write on a custom-order request, and anything you send us by email afterwards.

Newsletter. If you subscribe in the footer, your email address, and nothing else.

We accept .stl, .3mf, .obj, .svg, .dxf, .pdf, .png, .jpg and .jpeg.

Custom-order requests. When you attach a file to a quote request, the file is read in your browser to draw a preview and to produce an estimate. Only the filename is sent with the request itself and included in the notification email to the shop. We then ask you to reply to our confirmation email with the actual file, so the file reaches us as an email attachment rather than an upload.

Configured products. When you add a configured product to your cart, any artwork you supplied is uploaded and stored by our commerce backend as an order asset, together with the production file we generate from it. It stays attached to that order line so we can build it, re-run it if something goes wrong, and repeat the job if you reorder.

Retention. We keep order assets for as long as the order record exists, so that a reorder or a warranty remake is possible. We do not currently run an automatic deletion schedule for them. If you want your files removed sooner, ask and we will delete them - see below.

We use your files to quote, produce, and support your order and for nothing else. We do not sell them, license them, publish them, or add them to our catalog. If we want to photograph a finished part for our work page, we ask you first.

To price a job quickly we send an image of your design, plus the category, material, quantity, and the description you wrote, to a third-party AI provider (OpenRouter, which routes to a hosted model). It returns an estimate of the part's size and complexity and a rough triage of the request. It does not set the price on its own, and a person reviews every custom quote before we commit to it.

If you would rather your file was not processed this way, do not attach it to the quote form - describe the job in words and send the file by email once we reply, and we will quote it by hand.

We set one first-party cookie, vendure-auth-token. It is the session token that identifies your cart before you sign in and your account after you do. It is HTTP-only, so page scripts cannot read it, it is restricted to this site, and it lasts a year unless you sign out. Without it a cart cannot survive a page load.

Older visits may still carry a cart_token cookie from a previous version of the cart. It is no longer issued and clearing your cookies removes it.

Stripe sets its own cookies on the checkout page for fraud prevention when its payment element loads. Those are governed by Stripe's privacy policy.

There is no analytics, advertising, session-recording, or social-tracking script on this site. Fonts are served from our own domain, not from a font CDN.

Transactional email - order confirmations, quotes, account verification, password resets, and status updates - comes from orders@updates.nsprt.com. You cannot opt out of these while you have an open order, because they are how we run the job.

The newsletter is separate and entirely optional. Ask us and we will remove you from the list.

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete your design files, or ask us to close your account and delete it. We will do it, and we will tell you when it is done.

Two limits are worth stating plainly. We keep the records of completed orders that we are required to keep for tax and accounting purposes, and payment records live with Stripe under their own retention rules. Everything else, including uploaded artwork, we can remove.

To make any of these requests, reply to any email from orders@updates.nsprt.com, or use the contact details on your order confirmation. Tell us what you want removed and we will confirm in writing.