Privacy policy
Pilotrun is built so that your designs and plans stay with you. This policy says what leaves your device, why, who receives it, how long it's kept, and the choices you have.
The short version
Your projects, 3D files, rates and settings are stored in your browser. Pilotrun never receives them.
There are no accounts, no advertising and no cookies. Pilotrun doesn't sell personal information or share it for advertising.
Information leaves your device only when you load a page, use "draft from photos", send a "this number looks wrong" report, or email us. Anonymous usage counts stay off if your browser sends a Global Privacy Control or Do Not Track signal, and you can turn them off yourself.
Who we are
Pilotrun ("Pilotrun", "we", "us") runs this website and the Pilotrun tool (together, "the service"). For the limited personal information described here, Pilotrun decides how it's used (the "controller"). Questions about this policy or your information: PilotRun01@gmail.com.
What stays on your device
- Projects: every line, quantity, price, quote and note you enter is saved in your browser's storage (IndexedDB, with a copy in local storage while it fits). A project file you save is written where you choose on your own computer.
- 3D files: STEP, IGES, STL, OBJ and 3MF files are read and measured in your browser, and their geometry is kept in your browser's IndexedDB storage. They're never uploaded.
- Settings: your rates, theme, layout, row density, panel sizes and the name you put on quote requests.
- The installed app: if you install Pilotrun, your browser keeps a copy of the tool's own files so it opens without a connection. That copy holds none of your work.
The tool needs these to work, and they're never sent to us. Clearing this site's data in your browser deletes all of it. We have no copy, so save a project file first if you want to keep your work.
What we process, and why
When you visit
Like any website, the server that delivers pages receives standard request information: your IP address, browser and device type, the page requested, the page you came from and the time. Our host, Vercel, uses it to deliver pages and keep the service secure, and keeps it for a short time under its own policies. We don't keep a separate copy.
Legal basis (where GDPR applies): our legitimate interest in running a secure website.
Anonymous usage counts
We count page views and a few product events to learn which parts of Pilotrun help people, for example that a project reached five lines, that a quote was entered, that a calculator was used, which layout someone switched to, or that Pilotrun was installed as an app. When you open a 3D file, the count records its format and which design app made it, as a name from a fixed list (such as Fusion, Onshape or SolidWorks) read from the file's header on your device; the file and its text are never sent. Each count records the page's address without its query string, the site you came from, the browser and device type, and coarse labels. It never includes names, prices, project contents or files.
- PostHog receives these counts in its cookieless mode. Nothing is stored in your browser. PostHog tells visitors apart with a one-way hash of the IP address, browser and a random value it deletes every day, may derive an approximate location (country and city) from the IP address, and then discards the IP address (how PostHog does it).
- Vercel Web Analytics counts page views without cookies or stored IP addresses, using a short-lived value that's discarded within 24 hours (how Vercel does it).
- So that the same milestone isn't counted twice, the tool keeps small flags per project in your browser's local storage (for example, "this project already reached five lines"). They never leave your device, and they're deleted and no longer written when usage counts are off.
We keep usage counts for up to 24 months. Legal basis: our legitimate interest in understanding and improving the service, with an easy way to say no (below).
When you use "draft from photos"
If you ask Pilotrun to draft a parts list, the description, photos (shrunk to at most 1,568 pixels on the long side), PDFs and planned quantity you add are sent to our server and passed to Anthropic's Claude API, which returns a draft. We don't store them. Anthropic processes them as our service provider under its commercial terms and privacy policy, keeps them only for a limited time, and doesn't use them to train its models by default.
Only add photos and documents you're allowed to share. Leave out people's faces, other people's personal information, and confidential or export-controlled drawings.
Legal basis: providing the feature you asked for.
When you report a number
"This number looks wrong" sends a report only after you tick its consent box. It contains the line's specifications (process, material, size or measured geometry, quantity, region), the estimate you saw, what you expected, and your comment. It never includes your project's or part's name, your notes, supplier names or files. Reports are written to our server's logs, may also be posted to our private feedback channel, and are used only to check and improve the estimates. We keep them for up to 24 months. Please don't put personal details in the comment.
Legal basis: your consent, which you can withdraw by emailing us.
Stopping abuse
To apply rate limits, our server holds the IP addresses of recent drafting and feedback requests in memory for up to an hour. They aren't written to storage. Legal basis: our legitimate interest in keeping the service available and its costs under control.
When you email us
If you write to PilotRun01@gmail.com, we receive your email address and whatever you send, through Google's email service. We use it only to reply and to deal with your request, and delete it within 24 months unless we need it longer to meet a legal obligation. Legal basis: our legitimate interest in answering you, or steps you ask us to take.
International transfers
Pilotrun and its providers operate in the United States. If you use Pilotrun from elsewhere, including the European Economic Area, the United Kingdom or Switzerland, the information described here is transferred to the United States. Our providers protect these transfers with the safeguards the law provides for, such as the European Commission's standard contractual clauses or the EU–U.S. Data Privacy Framework.
How long we keep it
- Your projects, files and settings: only in your browser, until you delete them.
- Request information: by Vercel, for a short time under its policies.
- Usage counts and feedback reports: up to 24 months.
- Drafting requests: not kept by us; by Anthropic for a limited time under its policies.
- Rate-limit IP addresses: in memory, up to an hour.
- Emails: up to 24 months, or longer only where the law requires.
Security
We collect as little as we can, so there's little to protect. Every connection uses HTTPS, pages run under a strict content security policy, API keys stay on the server and never reach your browser, and requests are rate-limited. There are no user accounts or passwords to steal. Access to the accounts that run the service is limited to Pilotrun's operator. No system is perfectly secure, so please don't send us anything you'd regret losing. If you find a security problem, tell us at PilotRun01@gmail.com and we'll look at it promptly.
Your choices and rights
Turning off usage counts
Pilotrun follows Global Privacy Control and Do Not Track: if your browser sends either signal, usage counts are off and no counting flags are kept. You can also turn them off in the tool's ⋮ menu, or here, for this browser:
Turn on JavaScript to change this setting.
Your projects
Because your projects live in your browser, you can see, export or delete them at any time without asking us.
Requests about information we hold
Depending on where you live, you may have the right to know what personal information we hold about you and to get a copy of it, to have it corrected or deleted, to restrict or object to how we use it (including use based on legitimate interests), to withdraw consent, and to receive it in a portable form. Residents of California and other U.S. states with privacy laws have the right to know, delete and correct, the right to opt out of the sale or sharing of personal information and of targeted advertising (we do neither), and the right not to be treated differently for using these rights.
To make a request, email PilotRun01@gmail.com. You can also ask someone to act for you; we may ask them to show they're authorized. We'll answer within 30 days, or sooner where the law requires. Because we have no accounts and keep so little, we may need details to find anything that's yours (for example, roughly when you sent a report and what it said), and often we'll hold nothing linked to you at all, in which case we'll say so. If we turn down a request, you can appeal by replying to our answer. You can also complain to your data protection authority or state attorney general.
More detail for California residents
In the last 12 months, Pilotrun has collected these categories of personal information, from you and your device, for the purposes described above: identifiers (IP address, and your email address if you write to us), internet activity (pages viewed and product events), approximate location derived from an IP address, and content you choose to send (drafting requests and feedback comments). We disclosed them for business purposes only to the service providers listed above. We haven't sold or shared personal information, we don't knowingly do so for people under 16, and we don't use sensitive personal information to infer anything about you.
Children
Pilotrun isn't directed at children under 13, or under 16 in the European Economic Area and the United Kingdom, and we don't knowingly collect their personal information. If you think a child has sent us information, email us and we'll delete it.
Changes to this policy
When this policy changes, the effective date at the top changes too. A significant change, such as adding accounts, will be announced on the site before it takes effect.
Contact
Pilotrun: PilotRun01@gmail.com. The terms of use cover the rest of how the service works.