To contact ThingBloom, use the contact page.
Advertising measurement with Meta
If you accept advertising preferences, the Meta Pixel sends Meta Platforms Ireland Limited browsing information (including IP address, browser and permitted pages), advertising identifiers and confirmed registrations or first plan purchases, with their amount and currency. We do not send your projects, passwords, banking details or email address to the Pixel. Renewals and physical-object payments are not counted as a first plan purchase.
You can decline without losing access to the service and change your choice through “Advertising preferences”. Your choice is stored for six months. Declining or withdrawing stops new transmissions; it does not delete data already received by Meta. We also respect Do Not Track and Global Privacy Control. Meta applies its own retention and processing rules, which may include international transfers.
Advertising measurement with Google
With your explicit permission for Google, the Google tag sends Google Ireland Limited browsing information, ad click identifiers and confirmed registrations or first plan purchases, with a transaction identifier, amount and currency. Previous consent for Meta alone does not authorize Google. We do not configure automatic email collection or ad personalization. You can decline or withdraw permission in advertising preferences. Your choice is stored for six months. Google’s rules, including retention and international transfers, apply to data it receives.
Data used by the service
To maintain your account, we use registration and authentication data, such as name and email. When signing in with Google, we receive authorized data to identify your account; We did not receive your password from Google.
The studio stores the sent texts, conversation history, images, models, revisions and parameters necessary to execute and recover your projects. Information about credits, subscriptions, quotes and payments allows you to maintain your balance and provide the service.
Studio activity
We record relevant actions, such as opening a page, starting a generation, editing, downloading, checking the price and finding a fault. These logs help you track work, resolve issues, measure conversion, and understand where the experience needs to improve.
Authorized administrators can query accounts, actions, complete conversations, and results for support, security, and service improvement. This includes the content you submit to the studio. It is not a recording of each keystroke, nor access to other pages or applications on your device.
We use Umami on our own infrastructure to measure visits, campaigns and conversions. Analytics does not receive emails, project text, card details or original IP addresses. We respect browser Do Not Track and Global Privacy Control signals.
Attribution context is kept for up to 30 days and metrics for up to 400 days. Order and payment records needed to provide the service have separate retention rules. We do not send conversions to advertising networks without a specific integration.
Providers participating in the flow
Stripe processes card details when verifying a card for the first generation. We store the verification result and a protected technical identifier to prevent repeated claims. We do not receive the full card number or security code.
We share the necessary data with providers for infrastructure, digital creation, authentication, payments and, when you order a physical part, manufacturing and delivery. Each provider receives the data necessary to perform their service. When signing in with Google, this service participates in account authentication.
One step may involve processing outside your country. Suppliers and applicable conditions must be included in the configuration and contracts of the person responsible for the service. Card data is processed by the payment provider and should not be sent via chat.
Private projects and gallery
Your projects are linked to your account. The public gallery contains examples selected for dissemination; Creating an object does not automatically make its images, conversations, or templates public.
Cookies and storage
We use cookies and storage necessary for authentication, security and session continuity. Records of usage of the service itself are kept for operation and experience analysis. The deployment of optional cross-site advertising or tracking tools requires information and consent where applicable.
Conservation and your rights
Data is retained as long as necessary for your account, projects, support and applicable legal obligations. You can request access, correction, deletion and, where applicable, portability or limitation of processing through the contact channel above. Deletion may preserve records that are required to be retained.
You can also appeal to the competent data protection authority. See information from European Commission on data protection rights.
Updates
Relevant changes in the purpose or processing of data will be reflected on this page. The conditions of use and purchase are in terms of service.
Version: September 9, 2026.