Privacy Policy
What the Cuberta desktop application and this website do with data — which, for the most part, is nothing.
1. Who we are
Cuberta is made and owned by WORNOX GAMES - FZCO (“Wornox”, “we”, “us”), a company registered in Dubai, United Arab Emirates.
IFZA Properties, DSO-IFZA, Dubai Silicon Oasis, Dubai, United Arab Emirates · Trade licence No. 67396 · [email protected] · +971 52 497 6994
For readers in the EEA and the UK: WORNOX GAMES - FZCO is the controller of the personal data described below. This policy covers the Cuberta desktop application and the website at cuberta.com, including the download host dl.cuberta.com.
2. The short version
The editor does not ask who you are. It has no account, no sign-up, no usage statistics, no crash reporting and no advertising. Your scenes are files on your disk, and the parts of the app that touch the network do so only when you use a feature that needs them.
The website is a set of static pages. We run no analytics on it and it sets no cookies of ours.
3. What the app does on your computer
Everything you make stays where you put it. Project folders — scene.json, baked meshes, renders and your reference board — are written to the location you choose. Settings and the access token for the built-in server live in the application's own configuration file (%APPDATA%\Cuberta\config.json on Windows, ~/Library/Application Support/Cuberta/config.json on macOS).
The built-in MCP server listens on 127.0.0.1:7345 — the loopback address of your own machine — and requires the token above. It is not reachable from your network or from the internet.
We receive no telemetry, no analytics events, no crash dumps and no list of what you built. The application contains no code that sends any of that, and it does not check for updates by itself.
4. When the app connects to the internet
Four features, and only when you use them:
- Poly Haven and ambientCG — public catalogues of HDRIs and materials. Requests carry no identifier of ours; like any web request they reveal your IP address to those services.
- Poly Pizza — model search, and only if you have entered your own free API key in Settings. The key is stored on your machine and sent to Poly Pizza with each search.
- HiGen3D — our own service that turns photographs into 3D models, reachable through its gateway at
carter.wornox.com. It is used only if you sign in. Then your account identity, your library listing and the models you choose to import travel between your machine and that service; your scene does not. - Your AI agent — whichever MCP client you connect talks to its own model provider directly, under that provider's terms and on your own account. Cuberta neither routes nor sees that traffic; what the agent reads from the editor is the scene you are working on, on your machine.
The starter pack that ships with the app — furniture, panoramas and materials — works with the network switched off.
5. The website and the download host
cuberta.com is a static site hosted on Cloudflare Pages; the builds are served from Cloudflare R2 through dl.cuberta.com. We do not run web analytics, we embed no third-party scripts, and the pages set no cookies of ours.
As the hosting provider, Cloudflare processes ordinary connection data — IP address, user agent, requested URL, timestamps — to deliver the pages and protect the service against abuse. Cloudflare acts as our processor for that purpose.
The site links to third-party pages (for example Poly Haven or a store page). Once you follow such a link, that site's own policy applies.
6. When you write to us
If you email [email protected], we receive your address, your message and anything you attach — for a bug report that often includes a project file you chose to send. We use it to answer you and to fix what you reported, and we keep the correspondence as long as it is useful for support history, then delete it.
Please do not send us anything confidential that we do not need in order to help.
7. Legal bases
Where the GDPR or the UK GDPR applies, we rely on: performance of a contract or steps taken at your request, when we answer your support message; our legitimate interests in delivering the site securely and keeping records of support; and your consent where a feature asks for it, such as signing in to HiGen3D.
8. Who else sees anything
We do not sell personal data and we do not share it for advertising. Data reaches others only in these ways: our hosting provider (Cloudflare) processes connections to the site; the services listed in section 4 receive the requests you make to them; and we may disclose information where the law requires it or to protect our rights.
9. International transfers
We are based in the United Arab Emirates and our providers operate globally, so data may be processed outside your country. Where that involves personal data from the EEA or the UK, we rely on the standard contractual clauses or another lawful transfer mechanism offered by the provider.
10. Retention
Support correspondence is kept while it is useful and then deleted. Hosting logs are retained by our provider for the short period it uses for security and diagnostics. Nothing in the desktop application is retained by us, because none of it reaches us.
11. Your rights
Subject to your local law, you may ask us for a copy of the personal data we hold about you, ask us to correct or delete it, object to a particular use, or ask us to restrict it. Write to [email protected] and we will answer. If you are in the EEA or the UK, you may also complain to your data protection authority.
12. Children
Cuberta is a tool for making 3D content and is not directed at children under 13. We do not knowingly collect personal data from them. If you believe a child has sent us personal data, write to us and we will delete it.
13. Changes to this policy
If we change how any of this works, we will post the updated policy here with a new date. Where a change is significant, we will say so on the page rather than hope you notice.
14. Contact
WORNOX GAMES - FZCO, IFZA Properties, DSO-IFZA, Dubai Silicon Oasis, Dubai, United Arab Emirates.