Privacy
Privacy and cookies
Last updated: 30 October 2026
This page explains what personal data the Romwba3D members site (romwba3d.pages.dev) collects, why, and how long it is kept. We have kept it short and in plain English.
Who we are
Romwba3D is run by Dave Chambers in the UK. Dave is the "controller" of your personal data under UK data protection law (UK GDPR and the Data Protection Act 2018).
Contact: dave@romwba3d.com
What we collect and why
Browsing the public site. You don't need an account to look around. We don't use analytics, advertising or tracking cookies, and we don't load scripts, fonts or embeds from other companies. Our host, Cloudflare, processes your IP address and basic request details to deliver the site and protect it from attacks.
Signing in with Patreon (members). When you sign in, Patreon tells us your Patreon user ID and member ID, your name, and your membership details: your status, tier, monthly or yearly billing, pledge amount, the date you joined, your lifetime support, and whether recent payments went through (paid or declined, month by month). We use this to work out which files you can download, for example the back catalogue after 4 paid months. Patreon also shares your verified email address. We use it only to match "free access" gifts. It is held in your sign-in cookie for the session, and we don't save it in our member records.
Member records. Once a day we copy the same membership details for everyone who has pledged to Romwba3D on Patreon, read-only, so the member list and download rules stay up to date. Your email address is not stored in these records.
Download log. When a member downloads a file, we record the time, your Patreon ID and name, which file you downloaded, and your membership type. We use this to keep files for members only and to spot account sharing or misuse. We don't log your IP address or browser.
Free access. If Dave gives you free access, we store your Patreon email, name and Patreon ID, a note, the end date, and when you last signed in.
Contact form. We store your name, email, subject and message so we can reply. To block spam, we also store a scrambled, one-way code made from your IP address (a "hash"). We never store the IP address itself.
Feedback form. We store your message, the page it is about, any name you give and any screenshot you attach. If you are signed in, we also store your Patreon name and ID and your membership type. We also keep the same scrambled IP code to block spam.
Our lawful basis
- Contract: to provide the downloads you pay for through Patreon. This covers sign-in, membership checks and member records.
- Legitimate interests: to keep the site secure and the files for members only (download log, spam protection, security logs), and to answer your messages and feedback. We have checked that these uses are proportionate and expected.
How long we keep it
| Data | How long |
|---|---|
| Sign-in session (cookie) | 12 hours, or until you sign out |
| Download log | 12 months, then deleted automatically |
| Member records | While you are a member, then deleted 24 months after your membership ends |
| Free access entries | 12 months after the access ends or is removed, then deleted |
| Contact messages | 24 months after we receive them, then deleted |
| Feedback and screenshots | 24 months after we receive them, then deleted |
| Scrambled IP code (contact and feedback) | Cleared after 30 days |
Old data is deleted automatically every day, following the periods above.
Who processes data for us
- Cloudflare hosts the site and stores our files and database (Cloudflare Pages, R2 and D1).
- Patreon handles sign-in, memberships and payments. Patreon's own privacy policy covers what Patreon does with your data, including payments.
We don't sell your data or share it with anyone else, unless the law requires it.
International transfers
Cloudflare and Patreon are US-based companies and may process data outside the UK. They protect these transfers with recognised safeguards, such as the UK–US Data Bridge or the UK International Data Transfer Addendum to standard contractual clauses.
Your rights
You can ask to see the data we hold about you, or to correct it, delete it, limit how we use it, or object to how we use it. You can also ask for a copy in a portable format. Email dave@romwba3d.com and we will reply within one month. We may need to confirm it's you, for example by asking you to sign in with Patreon.
If you're unhappy with how we handle your data, please tell us first. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, or call 0303 123 1113.
Cookies and similar storage
We use only what the site needs to work. There are no analytics, advertising or third-party cookies, so we don't show a cookie banner.
| Name | Type | What it does | How long | Needed? |
|---|---|---|---|---|
__Host-rw_state | Cookie (HttpOnly, Secure, SameSite=Lax) | Protects the Patreon sign-in step from forgery | 10 minutes, removed after sign-in | Strictly necessary |
__Host-rw_session | Cookie (HttpOnly, Secure, SameSite=Lax) | Keeps you signed in. It is a signed record of your Patreon ID, name, membership and payment status, so we know which files you can download. | 12 hours, removed when you sign out | Strictly necessary |
rw_signed_in | Browser local storage | Remembers that you're signed in, and your first name, so the menu shows "Members" straight away | Until you sign out, or cleared on your next visit after your session ends | Needed for the signed-in menu |
When you sign in, you go to patreon.com, which sets its own cookies under Patreon's cookie policy. Links to Patreon, MakerWorld and Facebook take you to those sites, which have their own policies.
Changes
If we change this page, we'll update the date at the top.