Draft for review. Ops owns this placeholder. It is not final legal advice. Haze still needs to review it before anyone treats it as Chippo's policy.
DraftPrivacy
This is a public placeholder for a privacy page. It describes only what this website's own code does today. It is not a finished privacy policy.
What this draft covers
This draft covers the public Chippo website, including the product pages, documentation, and account pages served with it.
It does not describe the SolidWorks plugin, a desktop installer, or any product surface that is not this website.
What the website stores
When storage is available, the site saves your language choice (English or Chinese) in this browser's local storage so a later visit can open the same language. If storage is blocked, the site still loads.
Signing in keeps a short-lived sign-in check in this tab's session storage. After sign-in, access and refresh tokens for that tab stay in session storage. Other tabs do not share that session. This website does not store the account session in an HTTP cookie.
Sign-in also stores a random device id for this browser in local storage and sends it to the Chippo account service so that service can tell browsers apart. The id is not your name or email.
If you start checkout from an account page, this tab may keep a checkout attempt id in session storage until that attempt finishes or is cleared. Card numbers are not entered into these pages. This draft does not describe the checkout service.
Signed-in account pages show profile, entitlement, credit, and usage fields returned by the Chippo account API for that session. This draft does not list every field that API can return.
If you answer the consent bar, this browser's local storage also keeps that choice and a version. Until you answer, analytics storage stays off. This version does not load an analytics service.
Why it is stored
The language choice keeps the site in the language you selected.
The sign-in check and tab session let you finish sign-in and view that tab's account pages.
The device id is what the account service asks for when this browser signs in.
The checkout attempt id is only there so one checkout attempt is not sent twice by accident.
The consent choice records whether a later analytics script may run.
What this draft does not decide
It does not say whether information is sold, shared, or transferred, how long it is kept, which law applies, or the legal basis for processing.
It does not list subprocessors, identity providers, or hosting logs. Ops and counsel still need to fill those in.
Contact
No legal contact address is published on this page. This placeholder is not a channel for privacy requests. Ops will add an address after review.
Placeholder updated 2026-10-28