Privacy Policy

Last updated: November 7, 2026

This Privacy Policy describes how 3DSync ("the Application", "we", "us") handles information when you use the 3DSync homebrew application for Nintendo 3DS and the accompanying web-based configurator hosted at https://3dsync.vllni.dev/ (collectively, "the Service"). By using the Service you acknowledge that you have read and understood this policy.

1. No Data Collection by the Developer

The developer of 3DSync does not collect, receive, store, or process any personal data about you. The Service does not include analytics, tracking pixels or crash reporters. The configurator's files are delivered by a small program the developer runs on Cloudflare Workers; it only chooses which file to send for the address you open, never sees what you enter on the page, and keeps no logs (see section 5). All processing described below occurs exclusively on your own devices.

2. How the Configurator Web App Works

The configurator is a fully client-side static web page. When you authenticate with a cloud provider, the following happens entirely inside your browser:

• Google Drive: A login window opens on Google's own OAuth 2.0 consent screen. Google issues an authorisation code, which the window hands back to the configurator page; the page exchanges it directly from your browser for a refresh token by calling https://oauth2.googleapis.com/token.
• Dropbox: A login window opens on Dropbox's own OAuth 2.0 consent screen. Dropbox issues an authorisation code, which the page exchanges directly from your browser for a refresh token by calling https://api.dropbox.com/oauth2/token.

Tokens, passwords and the other settings you enter are kept only in the page's memory, solely to assemble the config file. They are never transmitted to any server controlled by the developer, and they are forgotten when you close or reload the page. The one value kept in your browser's localStorage is a Dropbox app key you enter in expert mode, which is not a secret. Once you click Download, the config file is saved to your computer.

If you import a 3DSync.ini you made before, the file is read by the page itself and is not uploaded anywhere. Its contents are held in the page's memory like anything you type, and are forgotten in the same way.

3. Google API Services – Limited Use Disclosure

3DSync's use of information received from Google APIs will adhere to the Google API Services User Data Policy , including the Limited Use requirements.

Specifically, the Application requests the https://www.googleapis.com/auth/drive scope solely to upload and download files between your Nintendo 3DS SD card and your own Google Drive account. The Application:

• does not use Google user data to serve advertisements;
• does not allow humans (including the developer) to read your Google Drive data;
• does not transfer your Google user data to third parties except as necessary to provide the file-sync functionality (i.e., the 3DS device you own, operating under your Google credentials);
• does not use Google user data for any purpose other than syncing files you have explicitly configured.

4. Data Stored on Your Devices

The downloaded 3DSync.ini config file contains your OAuth refresh token and optional folder identifiers. This file is stored on your personal SD card and is your responsibility to protect. You should not share this file publicly. To revoke access at any time, visit your Google Account's Third-party app access page or your Dropbox connected apps page and remove 3DSync.

5. Third-Party Services

The website, including the configurator and the Universal-Updater store, is hosted on Cloudflare. To deliver a page, Cloudflare processes standard HTTP request metadata such as your IP address and browser type, under Cloudflare's Privacy Policy. The developer does not collect or store this information; Cloudflare shows the developer only aggregate traffic statistics, such as the number of requests per country.

The configurator loads fonts and icons from the Google Fonts and Font Awesome CDNs; its scripts are served from this site. Your browser may send standard HTTP request metadata (such as your IP address) to those CDN providers when fetching these resources. Their use of that data is governed by their own privacy policies, not this one.

Your use of Google Drive is governed by Google's Privacy Policy. Your use of Dropbox is governed by Dropbox's Privacy Policy.

6. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect any personal information from children.

7. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the Service after a change constitutes acceptance of the updated policy.

8. Contact

Questions about this Privacy Policy can be directed to the developer via GitHub Issues.