G Workshop

Privacy

Short version: we keep what we need to run your account and the projects you choose to store, measure visits to our websites to make them better, and never sell anything.

This covers GCarve, GBurn, GSketch and Phosphor (in the browser and on the desktop), your G Workshop account and the websites gworkshop.app, gcarve.app, gburn.app, gsketch.app and phosphorfx.com.

Your account

One account for every app: your email, a hashed password (never the password itself), passkeys and two-step settings if you turn them on, your plan, the devices you're signed in on, your app settings, and what you save to your account: projects, templates, layouts and your own bit and machine libraries. Payments are handled by Stripe; we never see your card.

Signing in across the apps

Each website keeps its own sign-in cookie, which only keeps you signed in. When you sign in at gworkshop.app, the other sites are told who you are through a short-lived, single-use link, so you don't sign in again; signing out ends your sign-in on every site.

Website visits

The public pages of our websites use Google Analytics 4 to count visits and see which pages help people (pages viewed, how you arrived, rough location, device and browser). Google may set cookies for this. It is not used for ads. To opt out, use your browser's tracking protection or Google's Analytics opt-out add-on.

The apps themselves (each site's /app) don't load Google Analytics.

Using the apps

GCarve adds one to a daily counter when it is opened, when the demo project is opened, when a first toolpath is made and when G-code is exported. Only the count is kept: no account, no IP address, nothing about you or your project.

When you are signed in, a few actions (signing in, opening an app, the kind of toolpath made, exporting, saving a project, paying) are written to a log next to your account, for support and to see what is used. It is kept 90 days, is visible to our administrators only, and never contains your drawings, models, media or file names.

Errors are logged too: a crash or a failed start reported by an app, and any error our server returns, with the app, the browser name and, if you are signed in, your account. File names are removed. They are kept 30 days.

Your files stay with you

Files you open or import (drawings, photos, fonts, models, G-code, videos, cameras, audio) are read on your own computer and are not uploaded, unless you save a project to your account or share it. Phosphor projects saved to your account hold layers, effects, mappings and settings with references to your media, not the media.

The desktop apps check GitHub once per start for a newer version, keep an unsaved-work recovery copy on your own computer, and talk to our server only when you sign in, use cloud projects or an error is reported.

Community projects

A project you share to the GCarve community projects is public once it is approved: its title, description, pictures and files, and your name only if you choose to show it (otherwise "A GCarve maker"). Your email is never shown. Ratings are stored with your account; downloads are counted once per visitor a day, using the visitor's address only in memory for that day.

Messages and email

What you send through the dashboard or support, with your email so we can answer. We email you only about your account (confirming your address, sign-in links, receipts, renewals, answers to your messages) and, rarely, about important changes. We don't send newsletters without asking.

Who helps us run it

We share nothing else with anyone, and we never sell data.

Your choices

See and change your settings on your account page. Delete your account and everything stored with it any time there; it is gone from our server at once, and from backup copies as they are replaced. Want a copy of your data or have a question about it? Ask through support.

Updated 20 October 2026: one privacy policy for GCarve, GBurn, GSketch and Phosphor and the shared G Workshop account.