Privacy policy
This is a translation for information. The German version is legally binding.
Last updated: 24.10.2026
1. Controller
WANSU UG (haftungsbeschränkt)
Graf-Rhena-Straße 24c
76137 Karlsruhe
Deutschland
E-mail: hello@cad-compare.com
2. In short
- Your CAD files stay on your computer. The comparison runs in your browser or in the MCP plug-in on your computer. Neither we nor third parties receive files or their contents; comparison results only if you share a link yourself (section 9), files only if you attach them yourself when reporting a wrong result (section 10).
- No tracking, no analytics, no advertising, no cookies other than the sign-in cookie.
- Our server stores only what is needed for your account, subscription, licence keys, your feedback and (if you want) shared links.
3. Providing the website
We run the website and server at Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) as our processor. When you open a page, Cloudflare processes technically necessary data such as IP address, time, requested address and browser identification to deliver the pages and to fend off attacks. Data may be processed in the USA. Our database is located in the EU. We do not keep access logs ourselves. Legal basis: Art. 6(1)(f) GDPR (secure and reliable operation).
4. Comparing in the browser
Files you choose are processed only in your browser's memory and are not transmitted. Your language setting is stored in your browser's local storage and is not sent to us.
5. Account and sign-in
Pro requires an account. We store your e-mail address, your name if provided, and when you registered. You sign in with a code we send to your e-mail address (valid for 10 minutes) or with your Microsoft or Google account; the provider then sends us your name, e-mail address and an identifier; we never receive your password.
After sign-in we set a technically necessary sign-in cookie. With each session we store IP address and browser identification to detect misuse. A session ends 60 days after its last use or when you sign out; expired sessions and sign-in codes are deleted daily. To prevent misuse we count sign-in attempts per IP address; these records are deleted one day after the last attempt.
Legal basis: Art. 6(1)(b) GDPR (contract) and (f) (preventing misuse). The sign-in cookie is permitted without consent under § 25(2) no. 2 TDDDG.
6. E-mails
We send sign-in codes and team invitations through Cloudflare, Inc. (Cloudflare Email Service) as our processor, which processes the recipient's address and the content of the e-mail.
7. Buying Pro
Purchases are handled by Stripe (Stripe Managed Payments; payment runs through Stripe's Link service). You enter your payment details directly at Stripe; we do not receive them. From Stripe we receive a customer number, the status of your subscription or pass (term, number of seats) and the fact that payment was made. Stripe/Link sends you receipts and invoices. Stripe's privacy policy applies to its processing (stripe.com/privacy). Legal basis: Art. 6(1)(b) GDPR; statutory retention obligations remain unaffected.
8. Teams
Team managers see the e-mail addresses of members and invited people. For an invitation we store the invited person's e-mail address and send them an e-mail.
9. Shared links
When you share a comparison as a link, we upload (after you agree) the result shown (file names, verdict, deviations, key figures; with Pro also the list of differences) and the 3D view (a triangle mesh of both parts that shows their shape), never the STEP files. It is stored at Cloudflare in the EU. Anyone with the link can see it without an account; we only count how often it was opened. Links of the free version are deleted after 7 days, Pro links after the period you chose and at the latest 30 days after Pro ends, unless you delete them earlier; deleting your account deletes your links too. Legal basis: Art. 6(1)(b) GDPR.
9a. Licence keys for AI assistants (MCP)
We store licence keys only as a checksum. When the plug-in checks a key, we store the time and the plug-in version (no IP address, no files) and delete these records after 90 days. Legal basis: Art. 6(1)(b) and (f) GDPR (contract, detecting misuse).
10. Feedback
When you use the feedback form we store your message, the e-mail address you chose to give, technical details of the last comparison if you ticked the box (browser, timings, file names, no files), the language and, if you are signed in, your account. We delete feedback after one year. Legal basis: Art. 6(1)(f) GDPR (improving the service, answering you).
When you report a wrong result (“Result looks wrong?”), the technical details of that comparison are always sent along. Only if you tick the box for it do we also upload the two STEP files you compared. They are stored at Cloudflare in the EU (not publicly accessible), used only to reproduce the problem and improve the comparison, and deleted after 90 days. The legal basis for the files is your consent (Art. 6(1)(a) GDPR); you can withdraw it at any time, and we then delete the files right away.
11. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). You can delete your account yourself on the account page or ask us by e-mail to hello@cad-compare.com. You can lodge a complaint with a data protection supervisory authority, for example LfDI Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg).
12. Changes
When the service changes we update this policy. The version published here applies.