Privacy

Last updated 2026-10-03 · Safety · Terms · Back to the configurator

This is the privacy notice for thecagelab.com and thechastitylab.com (which only redirects here), run by The Cage Lab, LLC ("we", "us"), a Washington State, USA company.

1. An account is needed only to download files, and asks for nothing but an email

Designing, saving in your browser, the fit sheet, the sizing kit and ordering from a manufacturer need no account. Downloading the STL or 3MF file does: it asks you to sign in, with nothing but an email address, and an account also lets your saved designs and orders follow you to another browser. Nothing you type in is a name, a postal address or a payment detail, and it does not ask for any. What it designs is intimate, so what it keeps is as little as will run the tool.

2. What is kept, and why

• A random id for this browser. Made by your browser the first time, stored in it, and sent with everything below. It is not derived from you or your device. It is what lets your saved orders find you again. The Order tab shows it and can forget it.
• Design codes. Every design settled on is kept as its code: the sizes and options, nothing else. Codes carry no personal data. They tell us which options are used and which sizes are common, which is how the tool and its presets improve.
• What is done in the tool. Which tab was opened, which preset picked, when a file was exported, which manufacturer link was clicked, and an order number if you kept one. Times, and the design each belongs to.
• A coarse picture of the browser. Platform (e.g. "macOS"), language, time zone, window size, whether it has touch, the site that linked here (its host only), and the country the request came from as our hosting provider's edge reports it. The IP address is not stored.
• A problem you report. "Report a problem" sends the design code on screen, the kind of problem, the title and details you type, whether you had it printed, and the product page it came from, with this browser's random id (and your account, if signed in). Please leave names and contact details out of it. Once we have looked at a report, its title, kind and state (with a note of ours) are shown to everyone who opens that product or design; the details you typed are shown only back to you. A report outlives the browser's id: when the id is removed (section 7) or the account deleted (section 8), the report stays with neither attached.
• Referral links. Asking for your own link (the account page; the editor does too, so the design links you copy carry it) makes a random code for this browser, or for your account once signed in. Arriving through someone else's link keeps their code in this browser and tells us once which code brought it. The person whose link it is sees only counts (how many new browsers came, how many designed a cage, how many orders they reported), never which browser or who.
• If you sign in. The email address you give, and only it. A one-use link is sent to it; using the link starts a session, kept as a cookie in your browser, and no password ever exists. Signing in is also what lets the STL and 3MF files download, so a file you export while signed in is recorded among what is done in the tool (the row above) against your account, like any other event. Signing in ties your designs and orders (the two rows above) to that address instead of only to one browser's random id, so they show up wherever you sign in again.

3. The fingerprint, only if you allow it

A fingerprint is a hash of traits a browser reveals (screen, graphics renderer, how it draws text). It lets the site recognise a browser again after its stored data is cleared. The gate asks before it is taken; leave the box unticked and none is computed. The hash cannot be turned back into the traits. The Order tab's "Forget this browser" removes the id and the answer; write to us with the id shown there to have its rows deleted from the server.

4. Orders

When you buy from a manufacturer you deal with them under their own privacy policy; they receive the file and whatever you give them. We do not see that order. If you keep an order number in the Order tab, we store the number, the manufacturer's name, the design and the status you set, against your browser's id.

Live quotes. Where checkout offers "Get a live quote" and you press it, our server builds your design's print file and sends it to Craftcloud (a service of All3DP), whose print shops price it; Craftcloud handles the file under its own privacy policy. The file is the shape of the parts only: no name, email, browser id or address goes with it, though its measurements are yours. We keep the answer (the prices, the shop, the shipping) for three days so the same design is not sent twice, and do not keep the design with it. Nothing is sent unless you press the button.

5. Where it is stored, and who else sees it

The site and its database run on Cloudflare (Cloudflare, Inc., United States), which hosts them for us as a processor under its own privacy policy and our agreement with it: it delivers the pages, holds the database, and sees each connection as any host does, including the connecting address, which it uses to protect the site (it counts requests per address to turn away floods) and keeps for as long as its own policy says. We never store an address; the only thing we keep from the connection is the country Cloudflare names (section 2). If you sign in, the sign-in email goes out through Resend (Resend, Inc., United States), which sees the address it is sent to and nothing else. Nobody else sees any of it, except a design you send for a live quote (section 4) and the advertising network of section 5a if you allow ads: no analytics vendor, no sale or sharing of data. Aggregate statistics (how many designs used a given option) may be published; they contain no design codes and no ids. Manufacturer links may be affiliate links, which tell the manufacturer that the visit came from this site and nothing more.

5a. Ads, only if you allow them

The site may show a labelled "Sponsored" band to returning visitors, in the designer and under the shop's grid. It is served by ExoClick (ExoClick, S.L., Spain), an advertising network, which pays us for it. The gate asks before any of this happens, with its own box, unticked: until you tick it, nothing is requested from ExoClick, no script of theirs is loaded and no ad is shown. If you tick it, the ad is fetched from ExoClick's servers by your browser, so ExoClick sees your connection's address, your browser's traits and the page it is shown on, and its script may set cookies and storage of its own to choose and count ads, which it may combine with what it knows of your browser from other sites. That is ExoClick's processing under its own privacy policy, as an independent controller; none of it passes through our server. We send it nothing from this site: not your id, not a design code, not what you did in the tool. We count, in our own data, that an ad was shown and when one was clicked (section 2's "what is done in the tool"); we are told by the network how much it paid us, in total. Ads are chosen by the network; we ask it for suggestive or mainstream adult ads only and cannot see them in advance. Change your mind in the Order tab's Privacy row ("Stop the ads"): no ad and no network script load from the next page on. Cookies the network has already set are removed in your browser's settings. Closing the band with its × hides it for the visit only.

6. Cookies and storage

Of our own, one cookie, and only once you sign in: a session id, chosen at random, meaningless without the matching record on the server, sent only to this site (HttpOnly, SameSite=Lax), gone ninety days after you last used it or the moment you sign out or delete your account. Signed out, with the ads box unticked, there are no cookies. With it ticked, the ad network sets its own (section 5a). The browser's own storage (not a cookie) holds the anonymous id, the gate's answer, your saved designs, preferences and thumbnails, the orders you kept and, for the hour a sign-in link is good for, the design you were downloading and which file you asked for, so the link can bring you back to it; all of it stays on your device except the id and what section 2 lists.

7. How long

An anonymous browser's id, its coarse picture, the designs it settled on, what was done in the tool and any order kept against it (section 2) are removed automatically, for good, after 24 months without a visit from that browser — an automated job, not a manual promise, and nothing you need to ask for. Signing in resets that clock in the sense that matters: once your designs and orders belong to an account rather than only to one browser's id, they are kept for as long as the account exists, because that is what makes signing in useful across browsers and devices in the first place; deleting the account (section 8) removes them immediately, and so does asking us to. This is our own choice of window, not one the law hands us; we may shorten it, never lengthen it without saying so here first.

8. Your rights

Signed in, "Delete my account and data" on the Order tab's Account section removes your account, its saved designs and its sign-in immediately and for good; a device it was signed into keeps only its own anonymous rows (section 2's first two bullets), unclaimed. Signed out, "Forget this browser" (section 3) drops the anonymous id here; write to us with the id shown there to have its rows deleted from the server too. Where the GDPR, the UK GDPR or the CCPA/CPRA apply you may also ask what we hold against your id or account, have it corrected, and object to its use; the lawful basis for the fingerprint, for the ads (and the network's cookies) and for an account is your consent, and for the rest our legitimate interest in running and improving the tool. Contact: privacy@thecagelab.com. You may also complain to your data-protection authority.

9. Age

The site is for adults. We do not knowingly keep data from anyone under 18; write to us to have any removed.