Privacy Policy

1. Information We Collect

1.1 Human visitors (browser access)

3Delicious.net does not require registration to browse or download models. We generally do not ask for your name, postal address, or phone number. We may still process:

• Technical data: IP address, browser type and version, operating system, referring URL, pages viewed, download timestamps, and similar server logs;
• Cookie and analytics data: see Sections 5 and 6;
• Voluntary contact data: if you email us (e.g. [email protected] for API keys), we process the content of your message and your email address.

1.2 AI and programmatic access

When the Website is accessed by an automated agent (LLM, AI assistant, crawler, scraper, scripted HTTP client, etc.), we additionally record:

• Request timestamp and requested resource URL;
• Resolved client IP address (from CF-Connecting-IP, X-Forwarded-For, or direct connection);
• User-Agent and other identifying headers;
• Cloudflare Ray ID and HTTP status outcome;
• Payment method attempted (X-API-Key, PAYMENT-SIGNATURE, X-Payment, X-Access-Token);
• Verification result (OK / FAIL and granular error codes).

1.3 Payment-related identifiers

When a crypto payment is submitted we store, for replay-attack prevention, billing reconciliation, and statutory accounting:

• Blockchain wallet addresses appearing in EIP-3009 authorization.from fields;
• Transaction hashes and their networks;
• EIP-3009 nonces and one-time access tokens;
• Hashed API keys for active subscriptions (we do not store plaintext API keys).

On-chain wallet addresses are pseudonymous identifiers; we treat them as personal data only where applicable law (e.g. GDPR Recitals 26/30) requires.

2. How We Collect Information

• Directly from you when you contact us by email or other channels you initiate;
• Automatically through web server logs, CDN logs (Cloudflare), download counters, and security systems as you navigate the site;
• Through cookies and similar technologies as described in Section 5;
• Through payment protocols when an AI agent submits x402 headers or calls /x402/verify.

3. How We Use Your Information

We use collected information to:

• Operate and deliver the Website, catalog browsing, and download functionality;
• Serve model previews and files from our CDN (thingbaker.com);
• Enforce the Terms of Use, including the x402 paywall for AI agents;
• Verify payments, prevent replay attacks and fraud, and reconcile subscriptions;
• Apply rate limits against abusive or non-paying automated traffic;
• Measure aggregate traffic and improve catalog performance (analytics);
• Comply with legal obligations and respond to lawful requests;
• Communicate with you about API keys, billing, or policy changes when you have contacted us.

We do not sell your personal information to data brokers.

4. Disclosure of Information

We may share information:

• With service providers that help us operate the site (hosting, CDN/WAF — currently Cloudflare; analytics — Google Analytics 4 with IP anonymization enabled where configured);
• With public blockchain infrastructure when you choose on-chain payment (transaction data is inherently public on-chain);
• When required by law, court order, or governmental authority;
• To protect rights and safety — investigating abuse, paywall circumvention, or security incidents.

We may publish aggregated, non-identifying statistics (e.g. total downloads per category) without restriction.

5. Cookies and Similar Technologies

We use cookies and local storage mechanisms where necessary for:

• Session integrity and download-token validation on model pages;
• Remembering benign UI preferences;
• Analytics (see Section 6).

You can instruct your browser to refuse cookies or alert you when cookies are sent. Blocking essential cookies may limit certain features (e.g. authenticated download flows). Our site does not display a cookie-consent banner in all jurisdictions; by continuing to browse you consent to technically necessary cookies where permitted by law.

6. Analytics

We may use Google Analytics 4 (or a successor service) to understand how visitors use the catalog — which categories are popular, which pages are viewed, and whether pages load correctly. When enabled, Google may set cookies and process usage data under its own privacy policy. We configure IP anonymization where the GA4 property supports it. You can opt out via browser add-ons such as the Google Analytics Opt-out Browser Add-on, or by blocking analytics scripts in your browser.

6.1 Advertising (Google AdSense)

We may display ads served by Google AdSense (publisher ID pub-7364961638615983, declared in ads.txt). Google and its partners use cookies (e.g. the IDE cookie) and similar technologies to serve ads based on your prior visits to this and other websites.

• Third-party vendors, including Google, use cookies to serve ads based on your previous visits;
• Google’s advertising cookies enable Google and its partners to serve personalized ads;
• You can opt out of personalized advertising at Google Ads Settings, or via aboutads.info/choices;
• Alternatively you can block advertising cookies in your browser settings.

Ad requests are processed under Google’s Advertising Privacy & Terms. Advertising content is separate from our download catalog and does not affect model licensing.

7. Data Security

We implement reasonable technical and organizational measures — HTTPS everywhere, access controls on servers, hashed API keys, replay-protection stores for payment nonces — to protect information against accidental loss and unauthorized access. No Internet transmission is 100% secure; we cannot guarantee absolute security of data sent to the Website.

8. Retention

• Web server and x402 application logs (logs/x402.log, demand logs, conversion logs): typically up to 12 months, then rotated or deleted;
• Used transaction hashes, EIP-3009 nonces, and spent access tokens: retained indefinitely in the replay-protection store — deleting them would allow reuse and fraud;
• Hashed API keys: retained for the subscription lifetime plus applicable statutory accounting periods;
• Email correspondence: retained as long as needed to handle your request and comply with law.

9. AI Agent Access — Lawful Basis & Your Rights

9.1 Why we process AI access data

AI agent access to paid resources is governed by our Terms of Use §9. Processing payment and access logs is necessary to verify genuine payments, prevent replay attacks, bill subscribers, enforce rate limits, and meet accounting obligations.

9.2 Lawful basis (GDPR Art. 6)

• Art. 6(1)(b) — contract: once an agent operator accepts Terms by submitting payment headers;
• Art. 6(1)(f) — legitimate interest: logging 4xx events from automated clients (including pre-payment HTTP 402 responses) for anti-fraud and API operation;
• Art. 6(1)(c) — legal obligation: retaining payment records for tax and regulatory purposes.

9.3 Automated decisions

The paywall makes deterministic technical decisions (allow, deny, rate-limit) based on payment status and request rate. These are necessary to perform the contract (GDPR Art. 22(2)(a)) and do not produce legal effects on natural persons browsing freely in a standard browser.

9.4 Your rights

If you operate an AI agent that interacted with our paywall and wish to exercise rights of access, rectification, erasure, restriction, portability, or objection under the GDPR, UK GDPR, CCPA/CPRA, or comparable laws, contact [email protected]. Include a wallet address, API key fingerprint, or representative Cloudflare Ray ID so we can locate records. We cannot erase on-chain transactions; we can remove or anonymize off-chain log entries subject to the replay-protection exception in Section 8.

10. Children

The Website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal information, contact us and we will delete it where required by law.

11. International Transfers

Our servers and CDN edge nodes may be located in multiple countries. By using the Website you acknowledge that your information may be processed in jurisdictions with different data-protection laws than your own. Where required, we rely on appropriate safeguards for cross-border transfers.

12. Third-Party Links and CDN

Model download links may point to thingbaker.com or other storage hosts. External sites have their own privacy practices. We are not responsible for third-party policies. When you leave 3Delicious.net via an outbound link, review that site’s policy.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may be noted on the homepage or in llms.txt. Your continued use of the Website after updates constitutes acceptance.

14. Contact

Privacy questions, data-subject requests, and API billing inquiries: [email protected].

Related documents: Terms of Use · x402 documentation · robots.txt