What Gear Generator 3 and its desktop app do with personal data: no ads, and Google Analytics only if you allow it.

Last updated: 6 October 2026

Who is responsible

Gear Generator 3 is made and run by Abel Vincze, who is the controller of the personal data described here. For anything about your data, write to support@geargenerator.com.

Using the website

No advertising. The website sets no cookies of its own and loads no script from any other site, except Google Analytics when you allow it (below). Your gear designs are not sent anywhere unless you send them yourself.

Your browser's own storage (local storage, on your device only) keeps:

  • the design you are working on, so it is still there next time, and your view settings (theme, units, panels);
  • your export pass, if you have one: a token signed by the server, which shows your e-mail address masked;
  • your privacy choice, whether you have seen this notice and the “what's new” sheet, and whether you have hidden the “Also available as Desktop App” note.

These are needed for the site to work as you use it, so they are kept without asking; clearing your browser's site data removes them. If you used Gear Generator 2 on this site, the page also reads GG2's own ggaccess cookie, once, to bring a pass you bought there over.

Share links carry the design in the part of the address after #, which browsers do not send to the server: only the people you give the link to see the design.

Google Analytics — only with your consent

If you choose Accept in the privacy panel, the website loads Google Analytics (GA4) from Google. It sets cookies (_ga and _ga_5WV0Q1YF7W, kept for up to two years) and sends Google the pages you open, how you arrived, your device and browser, and an approximate location worked out from your IP address, which Google Analytics does not store. We see totals only: how many people visit, from where, and what they use. Google keeps the data for up to 14 months.

The provider is Google Ireland Limited (Ireland) with Google LLC (USA); transfers to the USA rely on the EU–US Data Privacy Framework. Google's privacy policy.

Legal basis: your consent (GDPR art. 6(1)(a)). Without it nothing is loaded and nothing goes to Google, and you can withdraw it at any time; withdrawing deletes Google's cookies from this site.

Your choice: —

Usage counts

To see what is used and improve it, the website counts, as daily totals, how often the app is opened and which exports are made. Opening the app is counted anonymously. An export made with an export pass is counted against that pass, through a one-way hash of its e-mail address, and so is each use of “Already paid?” — which also shows if a pass is being shared further than it should be. No cookies are involved, and no IP address is kept with the counts.

Legal basis: our legitimate interest in improving the product and preventing misuse (GDPR art. 6(1)(f)). You can object at any time by writing to support@geargenerator.com; your counts are then deleted.

Buying an export pass or the app

Payments are handled by Paddle (Paddle.com Market Limited, United Kingdom), who sells Gear Generator for us as merchant of record: Paddle collects the payment details, issues the receipt and invoice, and processes them under its own privacy policy. Its checkout loads only when you choose to buy.

From Paddle we receive your name, e-mail address, country, the order number, the product and the amount. We keep:

  • for an export pass: your e-mail address (and a one-way hash of it), the order number, the product and when the pass runs out;
  • for the app: your e-mail address, the order number and your license key.

We use them to deliver what you bought, to let you use it on another browser or computer, to answer your questions and to handle refunds. Legal basis: the contract with you (GDPR art. 6(1)(b)). We keep them while your pass or license is in use, and afterwards as long as needed to answer questions and refunds about it; on request we delete them earlier, unless a legal obligation prevents it.

The server's technical logs of purchase processing, kept for troubleshooting, hold the same details. The e-mail with your pass or license key is sent through the mail service of our hosting provider (below). Each sale is also reported to the developer by e-mail and through Telegram (Telegram Messenger Inc.), with the buyer's name, e-mail address, country and order.

The desktop app

When you register the app, it sends your e-mail address, your license key and a one-way hash of your computer's id to geargenerator.com. We keep, for each license, the computers it is active on (as those hashes) and when computers were added or removed, so that a key works on three computers; the app checks its registration again each time it starts. Legal basis: the contract with you (GDPR art. 6(1)(b)); kept as long as the license exists.

Gear Generator Pro also asks geargenerator.com for site keys, for the websites you show its illustrations on: it sends the same three details and the websites' domain names. We keep, for each key, the domains, the computer (as its hash), the IP address it was asked from and when, so that a license's keys stay within their limits and questions about them can be answered. A key carries its domains and a reference to the license that only we can trace back. Legal basis: the contract with you (GDPR art. 6(1)(b)); kept as long as the license exists.

The ggview.js script a Pro customer's website loads to show the illustrations makes no connections of its own: it sends nothing about the website's visitors to geargenerator.com or anywhere else.

Apart from that the app sends nothing: it counts no usage, and your designs and settings stay on your computer.

The newsletter

Now and then we e-mail our customers news about Gear Generator: a new version, a new app, an offer. It goes to the address you bought an export pass or the app with (on Gear Generator 2 too, within the last five years), and every newsletter has a link to unsubscribe — one click, and no more come. E-mails about what you bought, such as a license key, are not affected.

For each address we keep where it came from, which newsletter it was last sent, whether a delivery failed and why (as the receiving mail server reported it), and whether and when you unsubscribed. The links in a newsletter pass through geargenerator.com, which counts, for that newsletter, which links you opened and how often, before taking you on to the page; we use the counts to see what readers find useful. An address that unsubscribed is kept with that mark, so that it is never added again.

Legal basis: our legitimate interest in telling customers about our own products (GDPR art. 6(1)(f)), with the right to object at any time, by the link in each newsletter or by writing to support@geargenerator.com. The newsletter is sent through the mail service of our hosting provider (below).

Who else handles the data

  • DreamHost (New Dream Network, LLC, USA): hosts the website, its database and the e-mail it sends (the newsletter too); its web servers keep the usual technical logs (IP address, time, page) for security. Privacy policy.
  • Paddle (United Kingdom): payments, as above.
  • Telegram: the developer's sale notices, as above.
  • Google: Google Analytics, only with your consent, as above.

Some of these providers are outside the European Union; the transfers rely on the safeguards in their terms (the EU's standard contractual clauses or adequacy decisions). Nobody else receives your data, and it is never sold.

Your rights

You can ask for a copy of your data, its correction or deletion, a restriction of its use, or a copy to take elsewhere, and you can object to the usage counts and the newsletter — write to support@geargenerator.com. You can also complain to a data protection authority: in Hungary the NAIH (Nemzeti Adatvédelmi és Információszabadság Hatóság), or the one where you live.