Privacy
Effective 16 October 2026.
TOK CAD is browser CAD. You can model without an account; projects you model stay in your browser's storage on your device unless you download them or send one for a molding check. This page says what Tokeena Engineering, which runs TOK CAD at tok-share.com/cad, stores and why.
Who is responsible
Tokeena Engineering. Contact us through tok-eng.com for any question or request about your data.
Accounts
An account is optional. If you create one we store your account name, your email address, when the account was created, and whether the email is confirmed. Your passphrase is stored only as a salted scrypt hash; sign-in sessions, email confirmation and password-reset links, and agent keys are stored only as hashes. We use your email address only to confirm it, to send password-reset links you ask for, and to tell you if someone tries to register it again. We do not send newsletters or share your address.
Account email is sent through Google's Gmail service from Tokeena Engineering's address, so Google processes those messages under Google's privacy policy.
Agent keys and the agent relay
Signed-in users can create keys that let an AI agent work on a project open in their browser, after approving it there. For each key we store its label, access level, and creation, last-use, expiry and revocation times. Commands and results between the agent and your browser pass through our server in memory only, over HTTPS; they are not stored. TOK CAD does not run agent projects on the server.
The molding check
When a signed-in user runs the molding check, the part's 3D geometry (as a STEP file, with the names in it) is sent to our server and analyzed there by Tokeena Engineering's own molding-analysis service on the same machine. The file and its results are stored with your account's id for 7 days, so the check can be run again without sending the part each time, and are then deleted. They are not shared, and not used for anything else.
Cookies and browser storage
TOK CAD uses essential first-party cookies only: one remembering your cookie choice and, if you sign in, the session cookie __Secure-partmode_account. Your browser's local storage and IndexedDB keep your projects, recovery history and preferences on your device. There are no analytics, advertising or third-party trackers. See cookie details and settings.
Server logs
Like any website, our web server records each request's IP address, time, requested address and browser type, for security and to fix problems. These logs are not used to profile you and are deleted over time.
How long we keep it, and your choices
A sign-in session lasts 30 days unless you sign out. Your account data stays until you delete the account from the account page, which removes the account, its email address, its sessions and its keys at once. Projects in your browser stay until you delete them or clear this site's data. You can ask us at any time what we hold about you, or to correct or delete it.
Changes
If this page changes we will update the date above.