The embedded viewer and your visitors

This page is for anyone running a Confsas3D configurator inside their own site who needs to know what that iframe handles. It is written so you can link to it from your own privacy policy.

The short answer

The viewer sets no cookies, uses no browser storage, and creates no identifier that outlives the tab. That is why it needs no prior consent under Article 5(3) of the ePrivacy Directive — the one that requires the banner — and changes nothing about whatever you already have in place.

This is not a setting, and not something we switched off for you: it is how the thing is written. If it ever stopped being true, it would stop being true here before it stopped being true on your site.

1. What is collected, exactly

When someone opens one of your configurators, the viewer counts what they do with the product:

• Which options they look at and which they pick.
• How long they take to touch anything for the first time.
• Whether they request a price or hand the product to your cart.
• The configuration they settle on.
• The domain of the page the configurator sits on — yours — so the manufacturer can authorise it. Never the full page address.

2. What is not collected

• No name, email, phone or address, unless the person deliberately fills in the "request a quote" form — and that is a form they see and submit themselves.
• No cookies, session or persistent.
• Nothing in localStorage, sessionStorage or IndexedDB.
• No device, canvas, font or audio fingerprinting.
• No advertising identifier, no pixel, no third-party network.
• Nothing your visitor does OUTSIDE the iframe. The viewer cannot read your page: a cross-origin iframe has no access to it, and ours does not ask for any.

3. How it counts without identifying anyone

Each visit gets a random identifier that lives only in the tab's memory and disappears when the tab closes. It exists so one visit is not counted twice, and for nothing else: it is never written to the browser, so the same person returning tomorrow is, to us, a new visit with no connection to today's.

What our servers store are sums, not visits. "Eighty-eight people chose the walnut finish", never "this person chose the walnut finish". There is nothing to anonymise afterwards because it was never collected identified — which is the only way that sentence is true.

4. The IP address

As with any HTTP request, our servers receive the visitor's IP. It is not stored. It is used transiently to cap requests per hour and stop automated submissions, and for that it is turned into a salted hash that cannot be reversed. The counter collection is not, and cannot become, a log of who visited what.

5. Where it is processed

On Google Cloud (Firebase) infrastructure in the United States, under the European Commission's standard contractual clauses. It is the same provider that already serves the viewer you embedded: the iframe adds no new sub-processor beyond those already listed in our privacy policy.

6. How long it is kept

• The sums are stored grouped by month, for as long as the manufacturer keeps their account.
• The technical markers that stop a visit being counted twice delete themselves after two days.
• Rate-limit counters delete themselves when their window closes.

7. If a visitor wants to exercise their rights

On what this page describes there is nothing to exercise, and not as a dodge: with no persistent identifier there is no way — for you, for the manufacturer, or for us — to find one person's data inside a sum, because it was never separate. If that person did fill in the quote form, then there is data about them, and the controller is the manufacturer who publishes the configurator; we process it on their behalf as a processor.

8. What you can copy into your own policy

This site includes a 3D configurator provided by Confsas3D. It sets no cookies and stores no information on your device. It records anonymously and in aggregate which product options are viewed, without creating any identifier that could recognise you on later visits.

Something that does not add up, or does your legal adviser want to check it? Write to us and we will answer in writing.