Privacy notice
Published 2026-10-16 · Phase
Phase Hardware and its Phase Network design marketplace at phasehardware.com are operated by Orbital Thermal Intelligence Systems Inc., doing business as Phase. This notice explains the information we handle and how to submit a privacy request.
Information you provide
When you create a Phase account, we store your name, email address, verification status, and a one-way password hash. If you choose Google sign-in, Google provides your identifier, verified email, and profile information. Phase uses secure session cookies and stores session expiry, IP address, and user-agent details for authentication and abuse prevention. Phase stores account details, cart contents, orders, support messages, design listings, uploaded files, and verification requests that you choose to create.
Checkout is hosted by Stripe. Phase stores payment references, status, amounts, and order or delivery details returned by Stripe; card numbers are not collected by Phase application forms. Do not put payment credentials, passwords, government IDs, or unrelated sensitive information in support messages.
Purposes and service providers
Information is used to provide accounts, fulfill requested purchases and services, answer inquiries, maintain design records, and protect the service. Sites/OpenAI provides hosting; Cloudflare D1 and R2 provide application storage; Google provides optional sign-in; Resend delivers requested account-verification and password-reset emails; Stripe processes payments. Suppliers or carriers may need order and delivery information to fulfill an order. Their applicable notices also govern their services.
Optional external tools are blocked until allowed in Privacy choices. Opening the Ucamco viewer or loading supplier-hosted images connects directly to the provider, which receives your IP address and connection information. The local Gerber workbench processes files in your browser; publishing a design or explicitly uploading files sends them to the server.
Visibility and security
Draft designs and private uploaded files require access checks. Publishing a design makes its listing visible; files become publicly downloadable only when marked public on a published revision. Copies already downloaded by other people cannot be recalled. Authorized staff can access operational records for their assigned work.
The application uses HTTPS hosting, authorization checks, request validation, and access restrictions. No method of storage or transmission guarantees absolute security. Hosting providers may process security and connection logs. Application abuse counters use a short-lived hash derived from the connection address rather than storing the raw address in that table.
Storage and retention
Account, order, inquiry, and design records remain in application storage until removed through an operational process. There is currently no automatic retention schedule for those records. Legal, accounting, fraud-prevention, and dispute obligations may require keeping some information after a deletion request. Backup copies may remain subject to the hosting provider’s retention settings.
Your browser privacy choice expires after 180 days. Rate-limit counters expire within two minutes and are cleaned up by subsequent API writes. Provider security logs have separate retention practices.
Your choices and requests
Use the Privacy rights request type on the contact form to request access, a copy, correction, deletion, restriction, objection, or an opt-out. Include the relevant account email and the action requested. Do not include identity documents in your initial request. Identity and authority are verified before account data is disclosed or changed; requests are handled subject to applicable rights and exceptions.
You can withdraw permission for optional external tools at any time in Privacy choices. Global Privacy Control blocks these tools. This application has no advertising or analytics integration and no feature for selling personal information. A privacy request does not automatically delete an account or purchase record.
Other considerations and contact
Services and providers may process information in countries different from yours. Applicable privacy rights and transfer requirements depend on the operator, location, and circumstances. This notice does not assert compliance with every jurisdiction.
The site is intended for people authorized to undertake engineering work or purchases. If you believe a child has submitted personal information, select Privacy rights on the contact form so it can be reviewed. Contact Phase through the privacy request form for questions about this notice or the identity of the responsible operator.