Who we are
twentyfour26 provides online part submission, quoting, and CNC machining services. This policy explains how we handle information through twentyfour26.com, our order submission tools, and our admin area.
For privacy questions or requests, email founders@twentyfour26.com.
Information we collect
- Part submissions: your email address, CAD files, engineering drawings, material selections, notes, file names, dimensions, and submission history.
- Google sign-in: when you choose Google login, Google provides account information such as your email address, account identifier, name, and profile image. Our authentication provider processes this information and session credentials to sign you in. We do not receive your Google password.
- Account administration: customer identifiers, admin access permissions, and records of who added an admin.
- Communications: information you provide when you contact us about an order or support request.
- Technical information: hosting and security systems may process IP addresses, browser information, request timestamps, and error logs.
How we use information
We use information to receive and review designs, assess manufacturability, prepare quotes, fulfill accepted orders, communicate with you, troubleshoot problems, and protect the service.
We group submissions made with the same email address under a customer identifier. Providing an email does not prove account ownership or grant access to order history. Account access requires verification.
Google account information is used for authentication, account administration, and security. Google sign-in currently serves the admin area; public part submissions do not require a login. We do not request access to your Gmail messages, Google Drive files, or Google contacts through this sign-in flow.
Who processes information
Authorized team members can access order information and uploaded files as needed to operate the service. Our service providers process information on our behalf:
- Supabase: account authentication, order records, and private file storage.
- Railway: hosting the server that receives and processes submissions.
- Cloudflare: website delivery, network routing, performance measurement, and security.
- Google: Google sign-in. Website fonts are hosted with our website.
We may disclose information when required by law, to protect rights or security, or as part of a business transfer subject to appropriate privacy protections. We do not sell personal information or use Google account data for advertising.
Cookies and browser storage
We use session cookies to keep authorized users signed in and short-lived cookies to complete sign-in securely. Hosting or security providers may also use cookies needed to deliver and protect the website. Blocking these cookies may prevent sign-in from working.
File security and retention
Uploaded part files are stored in private storage. Access is restricted through server authorization and database access rules. Authorized downloads use temporary links. No storage or transmission method can guarantee complete security.
We keep account information, submissions, files, and operational records for as long as needed to provide services, maintain order history, resolve issues, and meet legal obligations. Incomplete submissions and recovery copies may also be retained. Deleting an active record may not immediately remove copies held in backups or records that must be retained for legal or security reasons.
Our service providers may process information in countries other than your own.
Your choices and requests
You can contact founders@twentyfour26.com to request access to, correction of, or deletion of your personal information, account, or submitted files. Please identify the email address or order involved. We may need to verify your identity before acting on a request.
You can revoke Google account access through your Google account connections. Revoking Google access does not automatically delete previously submitted orders or information already held by us; contact us to request deletion.
Depending on your location, you may have additional rights concerning your personal information, including the right to object to or restrict processing, receive a copy of your information, or contact your local data protection authority.
Children and policy updates
Our services are intended for people and businesses developing hardware, not for children under 13. If you believe a child has provided personal information, please contact us so we can investigate and address it.
We may update this policy as our services change. The date at the top identifies the current version. We will provide additional notice of material changes when required.