Privacy Policy
Last updated: October 19, 2026
This Privacy Policy describes what Human Generator (humgen3d.com, the Human Generator add-on for Blender and our product page on Superhive) collects about you, what happens to it, and the choices you have.
In short
- For every visitor, without consent: anonymous usage statistics in our own database and in PostHog, both without cookies and without your IP address; a click number on links to our store on Superhive; and the data you type into our forms.
- Only with analytics consent: PostHog cookies, session replay and a few first-party cookies that remember a trial request or a survey answer.
- Only with marketing consent: Google, Meta and Reddit advertising tags, attribution cookies and ad click ids on store links.
- In the EU, EEA and UK both consent categories are off until you accept them. Elsewhere they are on by default and you can switch them off in “Cookie Settings” in the footer.
1. What Runs for Every Visitor
The processing in this section does not depend on your cookie choices. None of it stores anything on your device (except the one functional cookie named below) and none of it records your IP address.
Anonymous usage statistics
We measure website usage with a first-party, cookieless method: page views, how far down a page you scrolled and how long it stayed open, clicks on “Buy on Superhive” and “Try for free” buttons, trial requests, survey answers, and which version of a page you saw when we test two versions against each other. The events of one visit are tied together by a random number that exists only in the page's memory and disappears when you close the tab, so visits cannot be linked to each other or to you. The events include the traffic source (for example “google” or “youtube”), the page, the button clicked, the licence you were interested in, and your country as determined by our hosting provider from your IP address. The IP address itself is not stored. These events are kept in our own database (Supabase, hosted on AWS in Ireland) for at most 25 months and are then deleted automatically.
The same events, and reports of errors in our pages, are also sent to PostHog(PostHog Inc., EU cloud at eu.posthog.com, Frankfurt). Without analytics consent PostHog runs in its “cookieless” mode: our site sends the events without any identifier, and PostHog's servers derive a temporary one from your IP address, browser type and a secret that changes every day, then discard the IP address. Visits on the same day can therefore be grouped into one session, visits on different days cannot, and nothing is read from or written to your device. No person profile is created and no session replay is recorded in this mode. Requests to PostHog travel through humgen3d.com; your browser does not talk to PostHog directly.
Because no information is stored on your device, this measurement needs no consent under the ePrivacy rules. Where the data counts as personal data under the GDPR, we process it on the basis of our legitimate interest (Article 6(1)(f)) in understanding which channels and pages lead to trials and purchases, and you may object at any time using the contact details below. Free-text answers you type into our short surveys are stored with the answer; please do not include personal details in them.
Links to our store on Superhive
Human Generator is sold by Superhivemarket.com (BlenderMarket LLC, USA), the merchant of record. When you click a purchase link on this website, the link always carries our affiliate reference, a random click number, the traffic source (for example “youtube”), the page you landed on and the button you clicked and, if this device remembers a trial request (see the analytics cookies below), the random number of that request. Superhive stores these with its record of your visit, and we later match the click number to the order to learn which channel the sale came from. For buyers this makes the click pseudonymous rather than anonymous; it is never combined with your name or address. Advertising click ids (gclid, fbclid and the like) are added to the link only with marketing consent.
Superhive tells us about each sale of Human Generator: the order id, licence, price, date, a customer number and, where Superhive provides it, a one-way hash of the buyer's email address. We keep that record in our database to recognise trial requesters among buyers and to attribute the sale to a visit. We do not receive or store buyers' names, addresses or email addresses. Superhive's own processing of your order is described in its privacy policy.
One functional cookie
When you answer or skip the short “Where did you hear about Human Generator?” question, we set a cookie named hg_asked for one year so we do not ask you again. It records only that you were asked, not your answer. Your cookie choice itself is stored in a cookie named cc_cookie.
2. Where You Are Asked First
If you visit from the EU/EEA or the United Kingdom, the analytics and marketing tools described in sections 3 and 4 stay off until you accept them in the cookie banner. Visitors from other countries are not shown a banner: these tools run by default there, as permitted by local law, and you can opt out at any time through the “Cookie Settings” link in the footer of every page. If your browser sends the Global Privacy Control signal, we treat it as an opt-out from marketing and advertising processing automatically. Your choice is remembered in both cases. Your region is determined from the country our hosting provider attaches to your request. Section 1 applies to everyone.
3. Analytics (Consent Category)
With analytics consent, PostHog switches from the cookieless mode to cookies (names starting with ph_, kept for one year) and starts session replay: a recording of how you move through our pages, with text you type masked. Visits from the same browser can then be linked over time. We use this to understand how visitors use the website, find problems and compare page versions. PostHog keeps replays and events under its own retention settings; our own copy of the events is kept for at most 25 months.
With analytics consent we also set these first-party cookies when the situation arises:
hg_lead(180 days): set when you request the free trial on this website, from the trial page linked from our Superhive store page, or when you open the install guide from the email sent after a trial request on one of our ad landing pages. It stores only the random request number of your trial request, the time and where it was made (no email), so a later purchase can be credited to the trial. The older cookieshg_ad_trialandhg_embed_trialserved the same purpose and are still read until they expire.hg_trial(180 days): set when you request the trial on this website. It stores only the use case you selected and the day of the request, so we can see which use cases the trial works best for.hg_heard(one year): set when you answer the optional “Where did you hear about Human Generator?” question. It stores your answer (for example “YouTube”, never free text you typed), so we can see which channels lead to purchases.
If you withdraw analytics consent, these cookies and the PostHog cookies are deleted from your browser, session replay stops and PostHog returns to the cookieless mode described in section 1.
4. Marketing and Advertising (Consent Category)
With marketing consent we load the following advertising tags. Before consent none of them is loaded and no request reaches these companies from our pages.
- Google Tag Manager and Google Ads (Google Ireland Ltd.), with Google Consent Mode v2 reflecting your choices. We report a buy click as a Google Ads conversion. Cookies:
_ga,_gid,_gat,_gcl_*,_gac_*. - Meta Pixel (Meta Platforms Ireland Ltd.) for conversion tracking, ad optimisation and retargeting on Facebook and Instagram. Cookies:
_fb*,fr. - Reddit Pixel (Reddit, Inc.) for conversion tracking and ad optimisation on Reddit. It records page visits, purchase-link clicks and trial requests. Cookies:
_rdt_*.
We also store the origin of your visit in first-party cookies for 90 days: the UTM campaign parameters (utm_source, utm_medium, utm_campaign, utm_content, utm_term, marketing_channel) and advertising click ids (gclid, gbraid, wbraid, fbclid, rdt_cid, msclkid, ttclid). These are appended to purchase links so that a sale on Superhive can be matched to the advertisement that led to it.
If you withdraw marketing consent, these cookies are deleted, Google Consent Mode is set to denied, the Meta Pixel's consent is revoked and the Reddit Pixel receives no further events. Google, Meta and Reddit process the data they receive under their own privacy policies (linked in section 8) and may use it for their own purposes, including building advertising audiences.
5. Trial Requests and Emails
When you request the free trial (on this website, on the trial page linked from our Superhive store page, or on one of our ad landing pages) we store your email address, your answer to the optional question in the form, the traffic source and landing page of your visit, your country and a random request number in our database. Your address is also added to our trial mailing list at Brevo (Sendinblue SAS, France), which sends the trial emails. The links in those emails carry your request number, and Brevo tells us whether an email was delivered, bounced or clicked; we keep those email events for at most 25 months. The legal basis is the performance of your request (sending you the trial) and our legitimate interest in knowing whether the trial leads to purchases. Every email has an unsubscribe link, and you can ask us to delete your request record at any time.
Ad landing pages:when you request the trial from one of our ad landing pages, we can tell the platform that showed you the ad, Meta (Facebook/Instagram) or Reddit, that the ad led to a trial request, so our ads can be measured and shown to similar people. We send the platform a hashed version of your email address, your IP address, your browser type and the ad click id, directly from our server (Meta's and Reddit's Conversions APIs); no Meta or Reddit cookie is involved. In the EU, EEA and UK we only do this if you tick the optional box in the form; elsewhere we do it by default unless your browser sends the Global Privacy Control signal. For this processing Meta Platforms Ireland Ltd. (or Reddit, Inc.) and we are joint controllers. You can withdraw by contacting us, and each platform's own handling is described in its privacy policy.
The product description on our Superhive store page is shown from humgen3d.com. It stores nothing in your browser and sends us only anonymous, cookie-free statistics: that the description was viewed, whether on a narrow or wide screen, and whether the trial button was clicked, together with a random number for that single page view.
6. Questions Sent from the Documentation
The question box on our documentation pages stores your name (if given), email address, question, the page you asked it from and your browser type in our database, so that we can answer you by email. We keep questions and answers as support history; ask us to delete yours at any time.
7. The Human Generator Add-on
The Human Generator add-on for Blender talks to humgen3d.com when you set it up, activate a licence or download content. It sends nothing while you work on your humans.
- Activating a licence: the add-on sends the GUID of your Superhive order, the email address you enter, the add-on version, the Blender version and your operating system. We check the order with Superhive. The email address is stored only as a hash (a one-way fingerprint) bound to the order, so the licence can be used again from another computer only with the same address; the address itself is not stored. Failed attempts are counted per IP address for one hour to stop guessing of order ids; the count is discarded after that.
- Downloading content: the add-on sends the names of the packs it downloads, with the same version and platform details, so we can hand out the download links and count installs.
- Trial installs: when you install the trial from a link in our trial email or on the trial page, that link carries the random request number of your trial request. The add-on sends it with the trial download, so we can see whether a trial request led to an install. Nothing about your Blender files or your work is sent.
We use this to verify the purchase, deliver the downloads and see whether trial requests lead to installs. The legal basis is the performance of the licence (activation and downloads) and our legitimate interest in knowing whether the trial works (install counts). Activations are kept as long as the licence is valid; the download and install records are kept as long as our other first-party events (25 months). Apart from the order check with Superhive, this data is not shared with third parties. The optional “Let me know about updates and offers” box in the activation form adds your address to our customer mailing list at Brevo only when you tick it.
8. Who Receives Data
We do not sell your personal data. These companies process data for us or receive it:
Hosting and database (all visitors)
- Vercel Inc. serves the website and determines your country from your IP address for the requests it handles.
- Supabase Inc. hosts our database on AWS in Ireland.
PostHog (all visitors; cookies and replay only with analytics consent)
- Purpose: product analytics, error reports, A/B testing and, with consent, session replay
- Data location: EU servers (eu.posthog.com, Frankfurt)
- Privacy policy: PostHog Privacy Policy
Superhivemarket.com / BlenderMarket LLC (all purchase-link clicks and sales)
- Relationship: merchant of record of Human Generator
- Data shared: the click number, traffic source, landing page, button and trial request number in purchase links; ad click ids only with marketing consent
- Data received: sale records with a hashed email address, never names or addresses
- Privacy policy: Superhive Privacy Policy
Brevo (trial requesters and newsletter subscribers)
- Purpose: sending the trial emails and, if you opted in, product news
- Data: email address, trial request details, email delivery and click events
- Privacy policy: Brevo Privacy Policy
Google (marketing consent only)
- Services: Google Tag Manager, Google Ads conversion tracking
- Privacy policy: Google Privacy Policy
Meta (marketing consent; ad landing pages as described in section 5)
- Services: Meta Pixel and Conversions API
- Privacy policy: Meta Privacy Policy
Reddit (marketing consent; ad landing pages as described in section 5)
- Services: Reddit Pixel and Conversions API
- Privacy policy: Reddit Privacy Policy
9. Your Choices
- Accept all: enable analytics and marketing
- Required only: neither category; only section 1 applies
- Manage preferences: choose analytics and/or marketing
You can change your choice at any time through the “Cookie Settings” link in the footer of any page. Withdrawing a category deletes its cookies and stops the tools listed under it. The cookieless statistics, the click number on purchase links and the data you submit in forms do not depend on this choice; to object to them, contact us.
Data Security
We take reasonable measures to protect your information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.
Your Rights
Depending on your location, you may have certain rights regarding your personal information:
- Right to access: request a copy of the personal data we hold about you
- Right to rectification: request correction of inaccurate data
- Right to erasure: request deletion of your personal data
- Right to withdraw consent: withdraw consent for analytics or marketing at any time through Cookie Settings, and for the ad-platform reporting of trial requests by contacting us
- Right to object: object to processing based on our legitimate interests
- Right to complain: lodge a complaint with your data protection authority
To exercise any of these rights, please contact us at the email address below. Anonymous statistics cannot be linked to you and therefore cannot be retrieved or deleted for you.
Children's Privacy
Our website is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date.
Contact Us
If you have any questions about this Privacy Policy or our data practices, or want to exercise your rights, email support@humgen3d.com or use the contact page.