[ privacy policy ]
Privacy policy
Last updated 21 October 2026
The short version
We hold your email address so you can sign in, and we know whether your subscription is active. We do not have your files. Depot opens them in your browser, on your own computer, and they never travel to us. We do not sell anything to anyone.
Who is responsible
Klembyte is the controller of the personal data described here. Write to hello@klembyte.com about anything on this page.
What we hold, and why
Your account
Your email address and a hashed version of your password. We need these to let you in and to contact you about your subscription. The legal basis is performance of our contract with you.
Your subscription
Whether you have an active subscription, which plan, and when it renews. This comes to us from Paddle. We do not receive your card number, and we could not charge your card if we wanted to.
Technical logs
Our server records ordinary request logs — IP address, time, which page, which browser. These exist to keep the service running and to spot abuse, and we keep them for a short period. The legal basis is our legitimate interest in a service that works and is not being attacked.
What we do not hold
The files you work on. When you open a vehicle, a carcols.meta or a texture, your browser reads it from your disk and the work happens there. Nothing about the contents is sent to us, which is why Depot needs a Chromium browser in the first place.
This is a design decision, not a promise about intentions. There is no upload step to switch off.
Payments
Payments go through Paddle, who are the merchant of record for Depot. Paddle collect what they need to take the payment and meet their tax obligations, under their own privacy policy. From our side we see your email address, your country for tax purposes, and the state of your subscription.
Cookies
Depot sets a cookie to keep you signed in. That is a strictly necessary cookie: without it, you could not stay logged in.
We do not use advertising cookies, and we do not run third-party analytics or tracking on Depot. Your browser also stores small preferences, like which tool you had open, on your own machine — those never reach us.
Who else sees it
- Paddle — payments, invoicing and VAT.
- Our hosting provider — they run the server Depot sits on, in the United States.
- Resend — they deliver our email, and are also in the United States.
Where your data is
Depot runs on servers in the United States, and the email we send goes through a provider there too. That means the little we hold about you — your email address, your display name, whether your subscription is running — is stored and processed outside the European Economic Area.
We say so plainly because you are entitled to know, and because it is the sort of thing a policy usually buries. Our agreements with those providers carry the standard data protection terms for transfers out of the EEA.
What is not there is the thing that would actually matter: your files. Those are never sent anywhere at all.
That is the whole list. We do not sell or rent personal data, and we do not share it for anyone else's marketing.
How long we keep it
Account data stays while you have an account. When you close it from your account page, the account stops working immediately and is deleted for good 90 days later — not archived, not anonymised, deleted. Those 90 days exist for one reason: so you can sign in and undo it if you change your mind.
Invoices are kept as long as tax law requires, which in the Netherlands is seven years, and they belong to Paddle as much as to us. Technical logs are kept briefly and then discarded.
Your rights
Under the GDPR you can ask us for a copy of your data, ask us to correct it, ask us to delete it, object to processing, or ask for it in a portable form. Email hello@klembyte.com and we will deal with it within a month.
If you think we have handled your data badly, please tell us first — but you have every right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority where you live.
Changes
If this policy changes in a way that matters, we will say so before the change takes effect. The date at the top shows when it last changed.