Privacy Policy
Last Updated: July 28, 2026
Introduction
This Privacy Policy explains how the DSTV Web Viewer & Editor at nc1-viewer.com
("we", "our", "the Service") handles your information. We offer both a free tier and
a premium subscription. The data we collect depends heavily on how you interact with
the Service.
TL;DR (Summary)
- Free Tier Users: Your DSTV file parsing remains 100% local in your
browser. We use Vercel Analytics for traffic monitoring and Google AdSense for
advertisements. We do not require accounts or collect personal info for free use.
- Premium Users: We collect your email, account details, and payment
information to manage your subscription.
- Signed-in Users: While you are signed in, we record which features
you use (e.g. "file uploaded", "DXF exported") against your account, so we can see
which parts of the Service are worth investing in. We never record your file names or
file contents. Signed-out visitors are not tracked this way.
- File Data: Unless you explicitly utilize a cloud-save feature (if
offered in your premium plan), all file parsing and rendering happen locally on your
device. We do not secretly upload or harvest your proprietary structural files.
1. Information We Collect
1.1 Information You Provide to Us (Premium Users)
If you register for a Premium account, we collect information necessary to provide and
manage your subscription:
- Account Information: Your email address, a secure password (hashed),
and your chosen username/name.
- Google Sign-In (optional): If you choose “Continue with
Google” instead of a password, Google shares your email address, name, and
profile picture URL with us so we can create or identify your account. We never
receive your Google password, and we request no access to any other Google data.
If the Google account uses the same email address as an existing NC1 Viewer account,
the two are linked into that one account rather than a second one being created.
You can revoke this access at any time from your
Google account permissions.
- Payment Information: We use Stripe to handle billing securely. We do
not store your full credit card number on our servers. We only retain billing history,
subscription status, and a billing address if required by the payment processor.
- Support Communications: Any information you provide when you contact
us for technical support or customer service.
1.2 Information Collected Automatically (All Users)
To keep the Service operational and free for basic users, we integrate with third-party
services that collect data automatically:
- Analytics (Vercel): We collect anonymous data such as page views,
visitor counts, geographic region (based on IP address), browser type, and operating
system to monitor performance.
- Account Usage Data (Signed-in Users Only): While you are signed in to
an account, we record the feature actions you take in the Service — for example
uploading a file, exporting to DXF or NC1, opening the 3D view, or using the measurement
tool — together with your account identifier and a timestamp. Unlike the Vercel data
described above, this information is linked to your account and is therefore
personal data. We use it solely to understand which features are used and to prioritise
development. We do not record your file names, file contents, or any
structural data from your DSTV files, and we do not use this data for advertising or share
it with third parties. It is stored in our own database (Supabase), retained for 180 days,
and deleted immediately when you delete your account (see Section 6). If you are not
signed in, no usage data is linked to you.
- Advertising (Google AdSense): For non-premium users, Google and its
partners use cookies and similar technologies to collect data about your device and
browsing behavior in order to serve ads. Where you have consented (or where permitted
by law), these may be personalized ads; otherwise non-personalized ads are served.
- Cookies & Local Storage: We use browser local storage to remember
your UI preferences (units, panel positions). We use cookies for session management
(keeping Premium users logged in) and, subject to your consent, for advertising.
1A. Cookie Consent & Consent Management
We use a Google-certified Consent Management Platform (CMP) integrated
with the IAB Europe Transparency & Consent Framework (TCF). When required by law, the
CMP presents a consent banner before advertising or non-essential cookies are set, and
records your choices.
- EU/EEA & UK visitors: You are asked to consent to (or reject)
cookies and the processing of personal data for advertising and measurement before any
such cookies are placed.
- Google Consent Mode v2: Advertising and analytics tags load in a
"denied" state by default and only adjust their behavior after you make a choice in
the consent banner.
- Changing your mind: You can reopen the consent options and review
or withdraw your consent at any time using the "Privacy Choices" link in the
site footer.
2. How We Use Your Information
We use the information we collect to:
- Create, authenticate, and manage your Premium account.
- Process your subscription payments and prevent fraudulent transactions.
- Provide customer support and respond to your technical inquiries.
- Send transactional emails (e.g., password resets, billing receipts, terms updates).
- Analyze usage trends to improve our parsing logic and user interface, including
feature-usage data linked to signed-in accounts as described in Section 1.2.
- Display targeted advertisements (Free tier only).
3. Third-Party Service Providers
We rely on trusted third-party platforms to run the Service. These providers have their
own strict privacy policies regarding how they handle data:
- Payment Processors: Used to securely process subscription fees.
- Authentication/Database Providers: Used to securely store user
credentials and subscription states.
- Google Sign-In: Used to authenticate users who choose to sign in
with a Google account. See Google's Privacy Policy.
- Vercel: Used for website hosting and performance analytics.
- Google AdSense: Used to serve advertisements to Free tier users.
See
Google's Privacy Policy and
AdSense policies.
3A. International Data Transfers
Our service providers (including Stripe, Supabase, Vercel, and Google) operate
infrastructure in the United States and other countries. If you access the Service from
the EU/EEA, UK, or Switzerland, your personal data may be transferred to and processed in
countries outside your own that may not provide the same level of data protection. Where
required by law, these transfers are protected by appropriate safeguards — such as
certification under the EU–U.S. Data Privacy Framework and/or the European
Commission's Standard Contractual Clauses, as implemented by each provider. You can
contact us (see Section 10) for more information about the safeguard applied to a
specific transfer.
4. How We Handle Your DSTV Files
Our core philosophy remains protecting your proprietary structural data:
- Local Processing: By default, all DSTV/NC1 file reading, parsing,
and rendering occur entirely within your web browser.
- No Unwanted Uploads: We never transmit your file data over the
network for analytics, ad targeting, or basic viewing.
- Premium Cloud Features: If your Premium plan includes cloud storage
or remote project sharing, your files will be securely transmitted and encrypted at
rest on our servers. This data is strictly used to provide the storage service to you
and is never shared with third parties.
4A. The Android App (Google Play)
The Service is also available as the NC1 Viewer app for Android,
distributed through Google Play. The app displays the same website in an app window, and
this Privacy Policy applies to it in full. The Android app differs from the website in
three ways:
- No advertising: The Android app does not display advertisements,
and no advertising cookies are set inside it. The consent banner described in
Section 1A therefore does not appear in the app.
- No in-app purchases: Pro subscriptions cannot be purchased or
managed inside the Android app, and no payment information is collected in it.
- Local file handling: Files you open in — or share to —
the Android app are parsed and rendered locally on your device, exactly as in the
browser (Section 4), and are never uploaded to us.
5. Data Security
We implement industry-standard security measures to protect your account data, including
encrypting passwords and enforcing secure (HTTPS) connections. However, no internet
transmission is 100% secure. You are responsible for keeping your account credentials
confidential. For locally processed files, you remain fully responsible for the security
of your own device and network.
6. Data Retention & Account Deletion
We retain your personal information only for as long as your Premium account is active
or as needed to comply with our legal and tax obligations, resolve disputes, and enforce
our agreements. You can delete your account yourself at any time via
Account settings → Delete account. Deletion takes effect immediately
in our active systems: your account, subscription record, and payment-processor customer
profile are erased, any active subscription is cancelled, and your name and email are
removed from past support tickets. Your account usage history is deleted at the same time.
Residual copies in encrypted backups are purged within 30 days. Independently of account
deletion, the account usage data described in Section 1.2 is automatically deleted 180 days
after it is recorded. Invoices and payment records already issued are retained by our payment processor
for as long as tax and accounting law requires.
7. Your Privacy Rights (GDPR & CCPA)
Depending on your location, you have rights regarding your personal data:
- Access & Portability: You can request a copy of the personal
data we hold about you.
- Correction: You can update your account information at any time
via your user dashboard.
- Deletion ("Right to be Forgotten"): You can permanently delete your
account and associated personal data at any time via
Account settings → Delete account, or by contacting us (see
Section 10).
- Opt-out of Targeted Ads: Free tier users can opt out of personalized
advertising via the "Privacy Choices" link in the footer, by visiting
Google's My Ad Center,
by visiting aboutads.info,
or by using browser-based global privacy controls (GPC).
7.1 U.S. State Privacy Rights (CCPA/CPRA, Colorado, Virginia, and others)
If you are a resident of California, Colorado, Connecticut, Virginia, or another U.S.
state with a comprehensive privacy law, you have the right to know what personal information
is collected, to request its deletion or correction, and to opt out of the "sale" or
"sharing" of your personal information and of targeted advertising.
- We do not sell your personal information for money. However, the use of advertising
cookies may be considered a "sale" or "sharing" of personal information under some
state laws.
- To opt out of the sale/sharing of personal information for advertising,
use the "Privacy Choices" link in the footer, or enable a Global Privacy
Control (GPC) signal in your browser, which we honor where required.
- You will not be discriminated against for exercising any of these rights.
To exercise your rights to access, correct, or delete your Premium account data, please
contact us directly (see Section 10).
8. Children's Privacy
The Service is designed for professional software developers, fabricators, and engineers.
It is not directed at children under 13, and we do not knowingly collect personal
information from minors.
9. Changes to This Policy
We may update this Privacy Policy as we add new Premium features or change our data
practices. We will notify users of significant changes by updating the "Last Updated" date
at the top of this document, placing a prominent notice on the site, or sending an email
to Premium account holders.
10. Contact Information
If you have any questions or concerns about this Privacy Policy, your account data, your
privacy choices, or how we handle your structural files, you can reach us at:
contact@nc1-viewer.com
You can also use the
Contact page on the site.
We aim to respond to privacy requests within 30 days.