What we mean by “safe”
TooBig3D is a browser-based 3D model prep tool. There is no installer to side-load, no driver to elevate, and no background service running on your PC. You upload a mesh, the cloud does the heavy work, and you download print-ready parts. The sections below explain the practical protections behind that workflow. For the binding legal text, see the Privacy Policy, the Terms of Service, and the print-safety Disclaimer.
Security pillars
- Browser-based. No software to install. Works on locked-down PCs and managed devices.
- No admin rights. Nothing runs locally that needs elevated permissions, kernel access, or driver updates.
- Auto-cleanup. Uploaded meshes and AI-generated outputs expire on the same per-plan retention schedule and are permanently purged within 24 hours after the window ends.
- Cloud-powered. Heavy slicing and mesh work runs in the cloud, so your machine stays cool.
File retention by plan
Uploaded meshes are tied to a per-plan retention window. After that window ends, the file is queued for permanent deletion and purged within 24 hours. You can also delete a file manually at any time from your dashboard.
- Free: 7 days
- Hobbyist: 30 days
- Maker Pro: 90 days
- Lifetime: 365 days
AI-generated outputs (text-to-3D and image-to-3D models produced inside TooBig3D) follow the same per-plan retention windows: Free 7 days, Hobbyist 30 days, Maker Pro 90 days, Lifetime 365 days. After your retention window ends, outputs are purged on the same 24-hour cycle. Re-export the result locally if you want to keep it beyond your plan window.
AI training and your uploads
Private uploads are not used to train public models by default; no public model-training opt-in control is available in the current implementation. AI processing on your files is used solely to produce the output you requested in that session — generation, slicing assistance, hollowing recommendations, seam suggestions, and so on.
Account & transport security
- HTTPS everywhere. Uploads, downloads, API calls, and the web app are served over TLS.
- Password hashing. Passwords are hashed with a modern algorithm; we never store them in plain text.
- Session isolation. Each signed-in session is scoped to your account and expires on logout.
- Least-privilege access. Only the infrastructure providers required to run the service (hosting, storage, processing) ever touch your data.
No system can promise absolute security. Please don’t upload content you wouldn’t be comfortable processing online — for example, unreleased proprietary geometry covered by a strict NDA.
Print safety
TooBig3D outputs are intended for hobbyist and prosumer 3D printing. Generated and AI-assisted models are not certified for safety-critical, structural, medical, automotive, aerospace, or load-bearing use. Always inspect a printed part before relying on it, and follow the full print-safety disclaimer.
Reporting an issue
If you believe you’ve found a security issue with TooBig3D — anything from a leaked URL to an authentication bug — please email [email protected] with the subject line “Security Report”. Include enough detail to reproduce. We’ll acknowledge receipt and keep you in the loop on the fix.
For removal of non-consensual intimate imagery, AI-generated likeness misuse, or content depicting a minor, use our public Content Removal Request form. Valid requests are reviewed by our designated contact within 48 hours. Suspected CSAM can also be reported directly to NCMEC at CyberTipline.