Security
Last updated November 3, 2026
Architects, studios and artists often share work that is under NDA. This page says plainly how Nukxon protects your scenes, what we never do with them, and where the limits are.
[email protected] · machine-readable contact: security.txt
1. Your 3D software stays offline
The Nukxon plugins send nothing while you work: no telemetry, no licence checks. The one connection is the Blender add-on’s update check: once a day, and only while Blender’s Allow Online Access is on, the Blender add-on reads a small file from downloads.nukxon.com to see whether a newer version or a notice is out. The export file carries your scene and nothing about you: no user names, no file paths, no computer names and no photo metadata.
2. What a published scene contains
- Public links never include your original 3D model. They show our own reconstruction of the space, made from the Gaussian splat.
- Private client scenes use your cleaned model so the walkthrough is exact, and it is delivered encrypted like the rest of the scene.
- Object and layer names from your file never appear in a published scene, so client names and project codes stay private.
3. Encrypted scenes
The files of every published scene are encrypted, each scene with its own key. The viewer receives that key from our servers only when the scene is opened, so downloading the files alone does not give anyone your scene.
4. Invisible fingerprints
Every published scene carries a unique, invisible fingerprint. If a copy of a scene turns up somewhere it should not, we can tell which publish it came from.
5. Payments
Payments are handled by Dodo Payments, our merchant of record. We never see or store your full card number.
6. Your data
- We do not sell your personal data, and we do not use your content to train machine learning models.
- How long we keep things, and where they are processed, is set out in our Privacy Policy.
- Business customers can request our Data Processing Agreement, which names every subprocessor, at [email protected].
7. The honest limits
Anything a browser can show, someone can try to record from the screen. No viewer, ours included, can make that impossible. What we can do is make copying a scene hard and leave it traceable, and we keep improving both.
Nukxon does not hold a SOC 2 or ISO 27001 certification yet. If your organisation needs a security questionnaire answered for procurement, write to [email protected].
8. Reporting a vulnerability
If you think you have found a security problem in our website, viewer, plugins or services, email [email protected] with what you found and the steps to reproduce it. Please give us a reasonable chance to fix it before telling anyone else, and do not access other people's data or disrupt the service while testing. We read every report and will reply.
