1. Our Guiding Principle: Local-First Privacy

At Guac (provided by Blue Lutra, "we", "us", or "our"), we respect your privacy and intellectual property. Whether you are inspecting proprietary aerospace components, open-source prototypes, or personal maker projects, your files remain strictly on your device.

2. Information We Collect

We collect only the minimum data necessary to provide and improve the service:

A. Account Information (Optional)

You can use Guac's core editor, visualizer, and script runner completely anonymously without creating an account. If you choose to register an account (for example, to publish scripts to the Community Script Gallery or sync preferences across devices), we collect:

• Your unique public handle/username.
• Your email address (for authentication and account recovery).
• Authentication identifiers provided by Google or GitHub OAuth if you choose single sign-on.

B. Community Gallery Submissions

When you explicitly publish a script bundle to the Guac Script Gallery, that script, its manifest metadata (name, description, parameters, license), and the generated 3D thumbnail become public to other Guac users.

C. Usage & Diagnostic Analytics

We use Google Analytics (GA4) to gather aggregated, anonymized usage telemetry (such as page views, browser type, and feature interactions) to understand user needs and performance bottlenecks. We do not track personal identifiers, file contents, or 3D geometry.

3. AI Provider Credentials & API Keys

Guac provides an AI assistant module capable of using your own API keys (e.g., Google Gemini, Anthropic Claude, OpenAI GPT, or custom endpoints).

• Your API keys are stored locally on your device (encrypted using AES-GCM-256 in browser local storage).
• Keys are never uploaded or shared with anyone, except your own AI provider.
• Guac servers never receive, inspect, or store your API keys; requests authenticate directly from your browser to your chosen AI provider.

4. Cookies & Local Storage

Guac relies on browser localStorage to deliver an instantaneous, personalized experience without requiring a server login. We store:

• Visualizer preferences (render mode, color spectrum, projection mode, theme mode).
• Workspace panel toggle states and splitter dimensions.
• Locally drafted scripts and editor cache.

You can clear this data at any time via your browser settings or Developer Tools.

5. Third-Party Infrastructure Providers

We utilize trusted cloud providers to host our web application and authentication backend:

• Firebase / Google Cloud: Static asset hosting, user authentication, and Cloud Firestore database for the Community Gallery.
• GitHub / Google: Optional federated Single Sign-On (SSO) authentication.

6. Your Rights & Contact Information

You retain full ownership of your G-code and scripts. You may request account deletion or removal of your published gallery scripts at any time by contacting us.

For questions or requests regarding this Privacy Policy, please email us at privacy@bluelutra.com.