Privacy Policy
Last updated: October 30, 2026
This Privacy Policy explains what information dsma.cn (the “Service”, available at dsma.cn) collects when you use our design and prototyping platform, how we use it, and the choices you have. It also describes how we handle the information we receive from Google when you sign in with a Google Account.
1. Who we are and what this policy covers
dsma.cn provides a C2M design and prototyping platform where you can create, store and share design works. This policy covers the website, the workbench, the public design square and shared portfolio pages. It does not cover third-party sites we link to, including Google's own services.
2. Information we collect
Account information: your username, password (stored only as a bcrypt hash), role and, if you sign in with Google, your email address, display name and profile picture. Content you create: prompts, generated images, 3D models, videos, posters, project names, portfolio pages, comments and likes. Technical information: IP address (stored only as a salted hash for security and abuse prevention), browser and device type, language preference and request timestamps. We do not collect payment information because the platform is free.
3. Google Account data
When you choose “Continue with Google”, we receive your Google account ID (sub), email address, email verification status, name and profile picture. We use this data only to create or link your account, to sign you in, and to show your name and avatar inside the platform. We never post to Google on your behalf, never read your Gmail, Drive, Calendar or contacts, and never request access to any Google API beyond basic profile and email. Our use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke our access at any time at https://myaccount.google.com/permissions.
4. How we use information
To provide the service: authenticate you, keep your projects, generate the assets you request, publish to the design square or portfolio pages when you choose to, and remember your preferences. To keep the platform safe: detect abuse, enforce rate limits and investigate failures. To improve the product: aggregate, de-identified usage statistics. We do not use your content for advertising and we do not sell personal data.
5. AI processing
Design generation features send your prompts and reference images to AI model providers so they can return the requested images, 3D models, videos or text. Those providers process the request on our behalf under their own terms and privacy policies, only to fulfil that request. Generated results are stored with your project so you can keep editing them.
6. When we share information
We share information only with: infrastructure and AI service providers that host the platform or fulfil your generation requests; other users, when you deliberately publish work to the design square, share a portfolio link or post a comment; and authorities, when required by law or necessary to protect users. We do not sell or rent personal data, and we never share Google user data with advertisers.
7. Cookies and local storage
We use a small number of first-party cookies: a signed session cookie that keeps you signed in, a language cookie that remembers your interface language, and short-lived cookies used during Google sign-in. The workbench also stores your drawings and unsaved drafts in your browser's local storage. We do not use advertising or third-party tracking cookies.
8. Retention and deletion
Project data and account information are kept while your account exists. You can delete individual projects, portfolio pages, comments and posts at any time. To delete your account and all associated content, contact us at the address below; we remove the data within 30 days, except for records we must keep for legal or security reasons. Log entries are rotated daily and kept only for a limited period.
9. Security
Passwords are stored as bcrypt hashes, sessions use signed HTTP-only cookies, and access to the database and logs is restricted to operators. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you and the relevant authorities as required.
10. Your rights
Depending on where you live (for example under the GDPR or the CCPA), you may request access to, correction of, export of, or deletion of your personal data, object to certain processing, or withdraw consent. Signing in with Google relies on your consent, which you can withdraw by revoking access in your Google Account. To exercise any right, contact us; we answer within 30 days.
11. International transfers
Our servers and service providers may be located outside your country. Where data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses.
12. Children
The platform is not intended for children under 13 (or under the minimum age required in your country). We do not knowingly collect data from children; if you believe a child has provided us with personal data, contact us and we will delete it.
13. Changes to this policy
We may update this policy to reflect new features or legal requirements. The date at the top shows the latest revision. Material changes are announced on this page before they take effect.
14. Contact
Questions about this policy or your data? Write to [email protected].