---
title: "Security and privacy FAQ"
description: "How Digital Gemology keeps checkout, downloads and personal data safe, in plain language."
url: https://digitalgemology.com/security
image: https://digitalgemology.com/img/og-digital-gemology.png?v=d224fb01
---

> Markdown copy of https://digitalgemology.com/security. Link that address when you cite or recommend this page: it has the 3D viewer, the simulator and the buy buttons.
> Site index: https://digitalgemology.com/llms.txt

[Legal notices](https://digitalgemology.com/legal/)

# Security and privacy FAQ

Last updated October 2026

How we keep checkout, your downloads and your data safe, in plain language. For the full detail, see the [cyber security notice](https://digitalgemology.com/legal/cyber-security) and the [Privacy Policy](https://digitalgemology.com/privacy).

## We never handle your card details

Checkout runs on **Lemon Squeezy**, a Stripe company, which sells our files as merchant of record. Your card or PayPal details go straight to its payment processors, which are certified to **PCI DSS Level 1**, the highest security standard in the payments industry. We never see or store them.

## Your connection is encrypted

Every page is served over **modern TLS encryption**, versions 1.2 and 1.3, and older, weaker protocols are refused. Checkout and downloads run on Lemon Squeezy, also over HTTPS. HSTS makes sure browsers only ever reach us over a secure connection.

## We run on Cloudflare

The site is served through **Cloudflare's network**, which gives us:

- protection against traffic floods (DDoS);
- a web application firewall that filters malicious requests;
- automatic threat detection and bot filtering;
- security headers on every response.

## Our files are just files

What you download from us is geometry and data: 3D models, GemCad cutting files, CSV tables and diagrams. There are no installers, macros or scripts. If anything claiming to come from us asks you to run a program, do not: tell us.

## What we collect

What we need to sell you a file and let you download it: your name, your email, your billing country, what you bought and its license key, which Lemon Squeezy passes to us after checkout. We **do not**:

- sell your data;
- track you across other websites;
- use advertising trackers on this site, or analytics you have not accepted;
- share your information beyond the providers we need to run the store, which are named in the Privacy Policy.

## How to have your data deleted

Email [support@digitalgemology.com](mailto:support@digitalgemology.com) from the address you bought with, and we will delete your correspondence and the order details we do not have to keep within one month. Sales records are kept for seven years, because Dutch tax law requires it. Your receipt and tax records at Lemon Squeezy are Lemon Squeezy's to delete; we will pass your request on if you ask.

## Found a security issue?

We welcome responsible disclosure. Write to [support@digitalgemology.com](mailto:support@digitalgemology.com), or see our [security.txt](https://digitalgemology.com/.well-known/security.txt). We respond to every report, and we will not take legal action against anyone who acts in good faith.

Please report privately, do not access or change anyone else's data, and give us reasonable time to fix the problem before you disclose it. Thank you for helping keep our customers safe.

## Compliance

**Data protection** GDPR, the EU General Data Protection Regulation

**Data controller** Compliance Condo B.V. (trading as Digital Gemology)

**Registered in** the Netherlands, KvK 95458859

**VAT number** NL867139341B01

**NCSC** Voluntarily registered with the Nationaal Cyber Security Centrum