Skip to content
SliceLab Panel cutting optimizer
Log in Sign up

Privacy policy

Version 4, in force since Oct. 9, 2026.

This policy explains what personal data SliceLab processes, why, on what legal basis, how long it keeps it and what rights you have. It applies to the slicelab.app website and its apps.

Data controller

  • Owner: Carlos Morató Casquete
  • Tax ID (NIF): 44882975Q
  • Address: Calle Padre Cesáreo García, Seseña (Toledo), Spain
  • Email: [email protected]

What data we process and why

Your account

To create and maintain your account we process your email address, your name if you give it, and your password, which is stored encrypted so that nobody can read it. We also store the projects you create (panels, parts and cutting plans) for 15 days, so that you can use them from any device. When you create it, we email you so that you can confirm that the address is yours: until you do, you cannot sign in. If you sign in from the app, we also store the name and platform of the device and when it was last used, so that you can sign out of each device separately.
Legal basis: the performance of the contract for the use of the service that you accept when you create the account (Article 6(1)(b) GDPR).

Trying it without an account

If you try SliceLab without signing up, we create a guest account for you, with no email address or password, to store on our server the projects you make while you try it. If you then sign up or log in to your account from the same browser, your projects move to it.
Legal basis: your request to use the service without an account (Article 6(1)(b) GDPR).

The newsletter

If you subscribe, we process your email address and the language in which you subscribed in order to send you SliceLab news from time to time. Before we send you anything, we email you so that you can confirm that the address is yours: without that confirmation you will not receive the newsletter.
Legal basis: your consent (Article 6(1)(a) GDPR and Article 21 of Spanish Law 34/2002 on information society services). You can withdraw it at any time with the unsubscribe link in every email, without affecting earlier mailings.

The contact form

We process your name, your email address, the reason for your message and its text and, if you give them, your company and your website, in order to reply to you. Each message also reaches us by email. To stop spam, we check in the DNS, the internet's public naming system, that the domain of your email address (the part after the @) can receive email: only the domain is looked up, never your full address.
Legal basis: your consent, which you give by sending the form (Article 6(1)(a) GDPR).

We keep the date, the version of the text you accepted, the language in which you read it and the IP address from which you gave each consent and, for the newsletter, from which you confirmed it, so that we can prove it. We also limit and log attempts to sign in and to send forms, to protect accounts and prevent abuse. If something goes wrong on the website, we receive an email alert with the technical details of the request in which it happened (the page, the IP address and, if you were signed in, your account, but never your password), so that we can fix it.
Legal basis: compliance with a legal obligation (Articles 6(1)(c) and 7(1) GDPR) and our legitimate interest in protecting the service and keeping it running (Article 6(1)(f) GDPR).

How long we keep the data

  • Your account, for as long as it exists. You can delete it yourself at any time, from your account menu on the website or from the app, or ask us to do it; its data and your projects are erased at that moment, except for anything that must be kept blocked by law. If you do not confirm your email address, the account is deleted after 7 days.
  • Your projects, for 15 days from when you create them: after that they are deleted automatically, with their panels, parts and cutting plans. Before then you can save each one to your computer as a file (.json) and open it again in the app whenever you like. We only keep them longer if we agree to it with you.
  • If you try it without an account, the guest account and its projects, for 7 days from when you start.
  • Your newsletter subscription, until you unsubscribe; after that, your email address stays marked as unsubscribed, together with the consent log. If you do not confirm your subscription, the request is deleted after 7 days.
  • Contact messages, for as long as needed to deal with them and, at most, one year after we receive them.
  • The consent log, for as long as the relationship lasts and, afterwards, for the limitation periods of any liabilities that may arise.
  • Database backups are kept for at most 30 days: anything that is deleted also disappears from them within that period.

Who receives the data

We do not pass your data on to third parties unless required by law. The website runs on our own server in Spain. To provide the service we use these providers, who process data only on our behalf and under the data processing agreement required by Article 28 GDPR:

  • Cloudflare, Inc. (United States): all website traffic passes through its network, which protects the website against attacks and connects it to our server.
  • Brevo (Sendinblue SAS, France): sending emails (account confirmation, password recovery, the newsletter and contact form notifications).

Cloudflare may process data outside the European Economic Area. That transfer is covered by the EU-U.S. Data Privacy Framework, in which it participates, and by the European Commission's standard contractual clauses included in its agreement. Brevo processes data in the European Union.

Contact form and website error notifications, and the emails you send us, reach our Gmail mailbox, provided by Google. Google may process them outside the European Economic Area, under the same EU-U.S. Data Privacy Framework.

Your rights

You can ask us for access to your data, its rectification or erasure and the restriction of its processing, object to the processing, request data portability and withdraw at any time any consent you have given, by writing to [email protected] and telling us what you want. We will reply within one month. You can also delete your account yourself, and save each project to a file (.json) from the app.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Minors

SliceLab is not intended for children under 14. If you are under 14, please do not create an account or send us any data.

Cookies

SliceLab only uses technical cookies that are necessary for the website to work, plus the language cookie if you choose a language:

  • sessionid: keeps you signed in to your account, or to your trial without an account. It lasts two weeks, or until you sign out.
  • csrftoken: protects the forms against submissions from other websites. It lasts one year.
  • django_language: remembers the language you choose in the language selector. It is only set when you choose one, never just by visiting the website, and it lasts one year.

The app also stores your viewer preferences in your browser, and which project you opened last, to take you back to it. All of them are our own: we do not use analytics, advertising or third-party cookies. That is why your consent is not required (Article 22(2) of Spanish Law 34/2002).

Changes to this policy

If we change this policy, we will publish the new version here with its date. If the change affects a consent you gave us, we will ask you for it again.