Privacy

What this tool processes, and where it goes

• The address you type is sent to our server and on to data services to build your house model: postcodes.io (postcode location), Ordnance Survey (building outlines and measured heights — our server sends OS the map coordinates of the area, never your address text), and planning.data.gov.uk (conservation areas and listed-building status); OpenStreetMap and the Environment Agency serve as fallbacks. We do not store your address after your lookup is answered.
• Photos you upload — of your house, room, or an inspiration image — stay in your browser, with one exception you trigger yourself: pressing Generate on the automatic AI render (where offered) sends that photo, via our server, to Google's image-generation service solely to produce your render. We don't store it, and it isn't used for anything else. Everything other than that stays on your device — colour palettes are extracted in your browser.
• The photographic street view (where offered) loads Google's 3D map imagery directly into your browser, so Google sees your IP address and the area being viewed — the same as using Google Maps.
• Your design (extension sizes, room measurements, budget band, and so on) lives in your browser and, if you use the share button, in the link itself — which goes only to the people you send it to. We keep no copy.
• Viewing your design in AR on Android briefly uploads the 3D shape file to our server so Google's Scene Viewer can fetch it — it contains the massing geometry only (no address, no photos), sits at an unguessable link, and is deleted after about 15 minutes. The iPhone AR path sends nothing anywhere.
• The printable brief is generated on your device. Where it goes is entirely your choice; nothing is sent to any trade by us. (No trades are connected to this pilot yet — when that changes, sending your brief to one will be an explicit, separate step, and this notice will change to describe it first.)

Usage analytics — deliberately anonymous

We count events like "a model was generated" or "a brief was printed" to learn which parts of the tool are useful. These events carry no address, no photo, no name, no IP address, and no cookie — the random session id lives only until you close or refresh the page. Because nothing is stored on your device or read from it, there is no cookie banner because there are no cookies.

Buying links ("Get the look")

After an interior redesign renders, the tool can suggest where to buy paint testers and similar items. These are affiliate links: if you buy something after clicking one, the retailer pays Hopecraft a small commission at no cost to you — and it never changes which colours or items are suggested (the suggestions are computed from your own photo and room, and that separation is enforced by automated tests). Clicking one takes you to the retailer's own site, where their privacy policy and cookies apply — the link carries an anonymous reference so the retailer can attribute the sale, but nothing that identifies you from our side. We record only that a link of that type was clicked, with the same anonymous counting described above. As an Amazon Associate, Hopecraft earns from qualifying purchases.

Third parties your browser talks to directly

Like most web pages, the page itself loads some resources directly, so those services see your IP address in the ordinary course of serving you: the content-delivery networks serving the page's fonts and 3D library, and OpenStreetMap tile images where the free map fallback is in use (Ordnance Survey map tiles are fetched by our server on your behalf, so OS sees our server's address, not yours). Our hosting provider (Render) handles the traffic and keeps short-lived infrastructure logs, as all hosts do.

Accounts and saved projects (optional)

You can use everything on this site without an account. If you choose to create one — to save projects and come back to them — here is exactly what that involves:

• Sign-in is a username and password, or a passkey — your choice. A password is stored only as a salted scrypt hash: the password itself is never saved, never logged, and cannot be read back even by us. A passkey stores no secret with us at all — your device asks for its own fingerprint, face or PIN, that biometric never leaves your device, and what we hold is a public key usable only to check your device's signature.
• An email address is optional, and used for one thing: account recovery. Email-based recovery isn't switched on yet — until it is, the address is simply held against your account, exportable and deletable like everything else. Nothing goes on a marketing list.
• Trade accounts (registered at /supplier) additionally hold the business details the trade supplies — business name, phone, an email for briefs if they choose one, services offered, coverage and capacity — used to vet them and match them to projects, and visible to the Hopecraft team for exactly that purpose. Nothing else.
• What we hold: that public key, a display name if you set one, and your saved designs (the same encoded design data a share link contains — dimensions and choices, not photos). Held on our host (Render, EU region) until you delete it.
• Your controls are buttons, not a request form: "Export my data" downloads everything we hold about you as one file; "Delete account" erases it all, immediately and permanently.
• If you lose your password and every device with your passkey, we cannot currently recover the account — email-based recovery is not yet switched on. Your designs are never locked in, though — any of them can also be kept as an ordinary share link.

Lawful basis: performance of the service you asked for (saving your projects). Nothing from an account is used for marketing or shared with anyone outside the Hopecraft team.

Drone surveys (only if you have had one)

If you have had a drone survey of your house, its results can be attached to your account so the tool draws your house from the survey instead of from the map. Here is exactly what that involves, in the order the law asks us to state it: what is held, why, who sees it, where and for how long, and what you can do about it.

• What is held:
  • the survey record: your house's measurements (its walls, roof and extensions, and its windows and doors as sizes and positions) and the site code the survey was filed under;
  • the part of the map lookup the tool needs to draw the surveyed house: the map's outline and sizes for your house, its roof, the shapes of the neighbouring buildings as distances from yours, the planning flags, and your position to the nearest kilometre (for the sun study). Not your address, your house number or the map's exact point for your house: those are never sent from the founder's computer and are never held here;
  • if you asked for it, a small copy of the 3D scan of your house alone (the textured model built from the flight's photographs, cut down to your house so it shows no neighbour, about 10 MB), which the tool shows to you alone as its Scan view.
  A survey sent again for the same house replaces the earlier one. The flight's photographs themselves are never stored on this site.
• Why: to draw your house from the survey, as you asked. Lawful basis: performance of the service you asked for (the survey, and the model drawn from it).
• Who sees it: you, signed in, and the Hopecraft team, who attach it. Nobody else: a share link you make never carries the survey's figures — anyone who opens one sees the map's house and a line saying the design was drawn on a private survey.
• Where, and for how long: in your account on our host (Render, EU region), like your saved projects, until you delete the account or ask for the survey to go. The flight's photographs, the 3D reconstruction and the full map lookup (which does carry your address) stay on the founder's own computer, never on this site, and are deleted 12 months after your survey report is delivered — long enough to re-check a measurement or correct the record if you ask, then gone. The photographs show the outside of your house and, at its edges, your neighbours'; they are never published. Ask any time for them to be deleted sooner.
• Your controls: "Export my data" includes the survey; "Delete account" erases it, the scan with it, and everything else.

How long anything is kept

Address lookups: not stored. Photos: never received. Anonymous usage counts: kept as aggregate numbers. Accounts and saved projects: only if you create them, only what the section above lists, and only until you delete them. Drone surveys: in your account until you delete it or ask - never your address or the map's exact point; the flight's photographs, the reconstruction and the full map lookup on the founder's own computer for 12 months after the report, sooner if you ask.

Your rights

Under UK GDPR you can ask what we hold about you, ask for correction, or ask for deletion. If you made an account, the export and delete buttons in "My projects" answer both instantly; for anything else, ask any time: Michael Hope, hopecraftuk@gmail.com.