Privacy Policy

Last updated 2 November 2026

1. Who is responsible

This policy explains what personal data 3Dangled handles, which is very little, and why. It covers the 3Dangled plugin for Figma and the website 3dangled.com, including the editor on it.

3Dangled is made and run by Dan Andrei Deaconu, an individual based in Romania (“3Dangled”, “we”, “us”). We decide why and how your data is used, which makes us the controller under the GDPR. For anything about your data, write to [email protected].

2. Your designs and images

When you make a mockup, the plugin exports the frame you selected, or reads the image you chose. It then places it on the device inside the Figma app on your computer. Your frames, screens and images are never sent to us or to anyone else.

The plugin reads only what it needs from your file:

• the frame you have selected, or the mockup you are replacing;
• your file's colour styles, to offer them as Clay tints;
• when you use the pipette on the canvas, the colour of the layer you click.

On 3dangled.com, the editor reads the screenshot you choose, paste or drop, and makes the mockup in your browser, on your computer or phone. The screenshot and the mockup you download are never sent to us or to anyone else.

3. Downloading devices from 3dangled.com

The plugin and the website's editor download the device catalog and device images from 3dangled.com. Like any visit to a website, each download, and each page you open, is a request that tells our server:

• your IP address;
• the date and time;
• the file requested;
• technical details your browser or the Figma app sends with every request, such as its version.

These requests contain nothing about your Figma account or your files, and carry no identifier from us.

3dangled.com is hosted by Namecheap, Inc., on servers in Amsterdam, the Netherlands. Every request first passes through Cloudflare, Inc., which delivers the site quickly and protects it from attacks, and so sees the same details. Cloudflare may set a cookie that is strictly necessary for security, such as __cf_bm, when it checks whether a visitor is a bot; it is not used to track you. Apart from that, the only cookies on 3dangled.com are Google Analytics', and only if you accept them (see section 7).

Namecheap records the requests in server logs. We use the logs only to keep the site working and secure, for example to spot abuse. Our legal basis is our legitimate interest in running a secure service (Article 6(1)(f) GDPR).

Logs are kept for the current month and the month before, then deleted, so none is older than about two months, unless we need one longer to investigate a specific attack. Cloudflare handles its own records of requests under its privacy policy. We don't combine logs with other data, and we don't use them to find out who you are.

4. Preferences on your computer

To remember your choices between sessions, the plugin saves a few preferences in Figma's storage for plugins, on your computer:

• the device you last used;
• your favorite devices and angles;
• your recent mockups, meaning which angle, finish and tint, and when;
• the Clay swatches you saved;
• the size of the plugin window;
• whether you have had Pro before, so the plugin can tell you when a trial has ended.

It also keeps a copy of the device catalog, so it opens quickly. These are never sent to us, and we cannot see them.

On 3dangled.com, the editor keeps the same kind of preferences in your browser's storage: the device you last used, your favorites and recent mockups, your default export size, whether to reopen your last angle, whether to offer sharing after a download, light or dark appearance, a copy of the device catalog, and your cookie choice. They stay in your browser, are never sent to us, and are only there to do what you asked; clearing your browser's site data removes them.

5. Subscriptions and payments

Figma sells Pro on our behalf. Figma and its payment processor, Stripe, handle checkout. That includes the payment card and billing details you enter to start the free trial. We never see your card.

The plugin asks Figma only whether you have Pro. Figma's answer is used inside the plugin to unlock features. It is not stored by us.

Under Figma's Community Terms, Figma may share with us your name and information related to your purchase, such as the plan, date, amount and country. We use it only for these purposes:

• to provide Pro;
• to answer billing questions and refund requests;
• to keep the accounting and tax records the law requires.

Our legal bases are performing our contract with you (Article 6(1)(b) GDPR) and meeting legal obligations (Article 6(1)(c)). We contact you only when the law requires it or when you ask us to. We keep purchase records for as long as accounting and tax law requires, and no longer.

6. Emails to us

If you write to [email protected], we receive your email address, your name if you give it, and what you write. We use them only to reply and help you. Our legal basis is our legitimate interest in answering you, or our contract with you when you are a Pro subscriber.

We delete a conversation 24 months after it ends, unless the law requires us to keep it. Our email is hosted by Namecheap, Inc.

7. This website and analytics

3dangled.com has no ad pixels and no trackers other than Google Analytics, which runs only if you accept it. Its fonts and everything else on the page come from 3dangled.com itself. Visiting a page is logged as described in section 3.

Google Analytics, only with your consent

On your first visit, a banner asks whether we may use Google Analytics to see how 3Dangled is used. Until you accept, and if you decline, the website loads nothing from Google and sets no cookie. To change your choice later, choose Cookies in the editor's settings menu or at the foot of any help page. Declining then stops Google Analytics and removes its cookies from your browser. Withdrawing consent doesn't affect what was measured before.

If you accept, Google Analytics measures:

• the pages you open, how long you stay, and the page or site that sent you;
• your type of device, browser, operating system, screen size and language;
• your approximate location, such as your country and city, which Google works out from your IP address. Google Analytics doesn't store your IP address;
• what you do in the editor: that you added a screenshot (only its kind of file, such as PNG); that you downloaded a mockup (the device, finish, angle, a watch's band, and size); clicks on the links to the Figma plugin and to app-mockup.com, and on our social profiles; how you share 3Dangled from the window after a download (X, Threads, LinkedIn, the copied link or your phone's share sheet); what you searched for when you choose “Request this device”; and changes to your settings.

It never receives your screenshots, your mockups or the names of your files.

Google Analytics recognises a returning browser by two cookies it sets on 3dangled.com: _ga and _ga_<ID>. Each lasts up to two years. We have turned off Google signals and advertising features, so the data isn't linked to your Google account or used for ads, and we have turned off sharing it with Google for its own purposes. Google keeps the measured data for 2 months, then deletes it.

Our legal basis is your consent (Article 6(1)(a) GDPR, and the rules on cookies in the ePrivacy Directive and the laws that implement it). Google Ireland Limited processes the data for us under Google's data processing terms. Google LLC, in the United States, may also process it (see section 10). Google explains how it handles data from sites like ours at policies.google.com/technologies/partner-sites.

“Request this device”, in the plugin and on this site, points you to our profiles on X and Threads. If you message us there, we receive what you send under those sites' own terms. We use it only to decide which devices to add, and to reply to you.

After your first download of a visit, a window offers to share 3Dangled. Its buttons open X, Threads or LinkedIn in a new tab with a post written for you; nothing is posted unless you post it there yourself. Copy link puts the site's address on your clipboard. The same window links to the Figma plugin and to app-mockup.com, which we also make; the link to app-mockup.com tells that site the visit came from 3Dangled.

The plugin and this site link to our Instagram, X and Threads profiles, to Figma's help pages, and to app-mockup.com. Those sites have their own privacy policies.

8. Figma

Figma's own Privacy Policy covers how Figma handles your data, including when you install and run plugins. Figma may show us overall statistics, such as how many people installed 3Dangled. These statistics don't identify you.

9. Who we share data with

We share personal data only with the following:

• Service providers that work on our behalf: Namecheap, which hosts the website and our email; Cloudflare, which delivers and protects the website; and, only if you accept analytics, Google, for Google Analytics. They may use the data only to provide their service to us.
• Figma and Stripe, for subscriptions, as described in section 5.
• Authorities, when the law requires it.
• Whoever takes over 3Dangled, if that ever happens. They would remain bound by this policy.

We don't sell personal data or share it for advertising. We don't use it to profile you, to make automated decisions about you, or to train AI models.

10. International transfers

Our website's server is in the European Union. Figma and Stripe are based in the United States and handle data under their own privacy policies. Namecheap and Cloudflare are United States companies, and Cloudflare serves the site from data centres around the world, so request details may be processed outside the European Economic Area. If you accept analytics, Google Analytics data may be processed by Google LLC in the United States. Where data leaves the European Economic Area, these companies rely on safeguards such as the EU–U.S. Data Privacy Framework or the European Commission's standard contractual clauses.

11. Your rights

Depending on where you live, including under the GDPR in the European Economic Area and the UK GDPR in the United Kingdom, you have the right to:

• access the personal data we hold about you;
• have it corrected;
• have it deleted;
• restrict how we use it;
• receive it in a portable format;
• object to processing based on our legitimate interests;
• withdraw your consent to analytics at any time, through Cookies on the website.

To use any of these rights, email [email protected]. We answer within one month. Server logs don't name anyone, so if your request is about them, include your IP address and roughly when you used 3Dangled.

You can also complain to the data protection authority where you live or work. In Romania, where we are based, that is the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro). We'd appreciate the chance to put things right first, so please write to us.

Under California law, we do not sell or share personal information, and we don't use sensitive personal information.

12. Security

3dangled.com is served only over HTTPS. We keep as little data as we can, and only the people who run 3Dangled can access it.

13. Children

3Dangled is a tool for designers and is not directed at children under 16. We don't knowingly collect their data. If you are a parent and think your child has sent us personal data, write to us and we will delete it.

14. Changes

If we change how 3Dangled handles data, we will update this page and the date at the top. For a significant change, we will also post a notice on 3dangled.com before it takes effect.

15. Contact

[email protected]
3Dangled is run by Dan Andrei Deaconu, Romania.