Privacy Policy

Last updated: October 10, 2026

This Privacy Policy explains how Free Game Assets (“we”, “us” or “our”) collects, uses, shares and protects information when you visit 1fbx.com (the “Site”) and download free game assets from it. We have written it to be as clear as possible. If you have any questions after reading it, you can reach us at [email protected].

By using the Site you acknowledge that you have read this Privacy Policy. Where the law requires your consent for a particular use of your information, such as the use of advertising cookies in the European Economic Area, we ask for that consent separately and you remain free to refuse or withdraw it.

1. Who we are

Free Game Assets is a free website that offers game assets, including 3D models, FBX files and ZIP packs, for use in game development and other creative projects. Visitors do not need to register or create an account to browse or download assets. Only our staff, meaning site administrators and invited contributors, have accounts, which they use to upload and manage assets.

For the purposes of data protection law, including the EU General Data Protection Regulation (“GDPR”) and the UK GDPR, the operator of Free Game Assets is the data controller responsible for the personal information described in this policy. We operate online only and do not maintain a public office address; all privacy enquiries are handled by email at [email protected].

2. Information we collect

Because the Site does not offer public user accounts, we collect only a limited amount of information. The categories below describe everything we collect and why.

2.1 Information collected automatically (log data)

Like almost every website, our web servers and file-hosting servers automatically record certain technical information each time a page or file is requested. This log data may include:

• your Internet Protocol (IP) address;
• the date and time of the request;
• the page, image or file requested, including the asset you downloaded;
• the referring web address (the page you came from), if your browser provides it;
• your browser type and version, operating system and device type, as reported by your browser’s user-agent string;
• the HTTP status code and the amount of data transferred.

We use log data to deliver pages and downloads, keep the Site secure, detect and prevent abuse such as automated mass downloading or attacks, diagnose technical problems and understand overall traffic levels.

2.2 IP addresses

Your IP address is processed whenever you connect to the Site because it is technically necessary to send you the page or file you requested. In addition to the log data described above, IP addresses may be used for short-term rate limiting to protect our servers and download mirrors from abuse.

2.3 Hashed IP addresses for ratings and reports

Visitors can rate assets and report assets that are broken, contain a bug, may infringe copyright or raise another concern. To prevent the same person from voting many times or flooding us with duplicate reports, we store a one-way cryptographic hash of your IP address alongside the rating or report, rather than the IP address itself. A hash is a scrambled value that cannot practically be reversed to reveal the original IP address, but allows us to recognise when the same address submits again. With a report we also store the report category you selected and any optional text you choose to include. Please do not include personal information in report text that is not needed to describe the problem.

2.4 Contact form data

If you use our contact form, we collect the name, email address, subject and message you provide. This information is stored in our database and sent to our site email inbox so that we can read and reply to your message. If you write to us directly by email, we receive your email address and whatever information you include in your message.

2.5 Staff account data

If you are an administrator or invited contributor, we hold the account information needed to operate your account: your username or display name, email address, a securely hashed password (we never store passwords in plain text), your role and permissions, records of the assets you upload or edit, and security information such as login times and the IP address used to sign in. This information is not collected from ordinary visitors.

2.6 Information collected by third parties

Google, acting through Google AdSense and Google Analytics, collects information about your visit using cookies and similar technologies, as described in sections 3 to 5. We do not receive information from Google that directly identifies you; we see only aggregated reports.

3. Cookies and web beacons

Cookies are small text files that a website places on your device so that it can recognise your browser. Web beacons (also called pixels or tags) are small pieces of code or tiny images that record when a page or advertisement has been viewed. Similar technologies include local storage and device identifiers.

We use cookies and similar technologies as follows:

• Strictly necessary cookie (staff only): when an administrator or contributor signs in, the Site sets a single session cookie that keeps them logged in and protects their session against forgery. Ordinary visitors who do not sign in do not receive this cookie. It expires when the browser session ends or the staff member logs out.
• Advertising cookies: set by Google and its advertising partners through Google AdSense to deliver, measure and, where permitted, personalise advertisements.
• Analytics cookies: set by Google Analytics to help us understand how visitors use the Site.
• Consent cookie: where a consent management platform is shown, a cookie or local storage entry records your choices so that you are not asked again on every page.

You can control and delete cookies through your browser settings. Most browsers let you block all cookies, block third-party cookies only, or clear cookies when you close the browser. If you block cookies, the Site will still work for browsing and downloading, although advertisements may be less relevant to you.

4. Google AdSense and third-party advertising

We use Google AdSense to display advertisements on the Site. Advertising revenue is what allows us to keep every asset free to download. In connection with this:

• Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites.
• Google’s use of advertising cookies enables it and its partners to serve ads to our users based on their visit to this Site and/or other sites on the Internet.
• Third-party ad vendors and ad networks other than Google may also serve advertisements on the Site through Google’s systems, and they may use cookies, web beacons and similar technologies to collect information about your visit for the purpose of serving and measuring ads.

You may opt out of personalised advertising by visiting Google Ads Settings. You may also opt out of a third-party vendor’s use of cookies for personalised advertising by visiting www.aboutads.info/choices. If you are in the European Union or European Economic Area, you can manage your preferences at www.youronlinechoices.eu. Opting out of personalised advertising does not stop advertisements from appearing; it means the advertisements you see will be based on more general factors, such as the content of the page or your approximate location, rather than your interests.

For more information about how Google collects and uses data when you visit websites that use its services, please read How Google uses information from sites or apps that use our services. You can also learn more about the cookies Google uses for advertising at How Google uses cookies in advertising.

We do not control the cookies or technologies used by Google or other advertising partners, and their use of information is governed by their own privacy policies.

5. Google Analytics

We use Google Analytics, a web analytics service provided by Google, to understand how visitors find and use the Site, such as which pages and assets are most popular, how long visits last and which countries visitors come from. Google Analytics uses cookies and collects information such as pages viewed, approximate location derived from your IP address, device and browser information, and interactions with the Site. We use these reports in aggregate to improve the Site and decide which assets to publish. We do not use Google Analytics to identify individual visitors, and we do not send Google personal information such as names or email addresses.

You can prevent Google Analytics from collecting data about your visits by installing the Google Analytics Opt-out Browser Add-on, by blocking cookies in your browser, or by declining analytics cookies in our consent banner where it is shown.

6. Consent for visitors in the EEA, the UK and Switzerland

If you visit the Site from the European Economic Area, the United Kingdom or Switzerland, we use a consent management platform certified under the IAB Transparency and Consent Framework, as required by Google, to ask for your consent before non-essential cookies are used for advertising and analytics. The consent banner lets you accept, reject or customise your choices by purpose and by vendor. If you do not consent, Google may still serve non-personalised or limited ads, which use cookies or similar technologies only where permitted, for purposes such as frequency capping, aggregated ad reporting and combating fraud and abuse.

You can change or withdraw your consent at any time by using the privacy or cookie settings link provided on the Site, or by clearing your cookies and revisiting the Site, which will cause the consent banner to appear again. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.

7. How we use information

We use the information described above to:

• provide the Site, display asset pages and deliver downloads from our file-hosting servers;
• record ratings and display average ratings for assets, while preventing duplicate votes;
• receive, review and act on reports about broken, faulty or potentially infringing assets;
• read and respond to messages sent through the contact form or by email;
• operate staff accounts, authenticate administrators and contributors, and keep a record of who uploaded or changed each asset;
• maintain the security and integrity of the Site, including detecting, preventing and responding to fraud, abuse, automated scraping, hotlinking and attacks;
• show advertisements and measure their performance through Google AdSense;
• analyse aggregated usage so that we can improve the Site and its content;
• comply with legal obligations, respond to lawful requests and enforce our Terms of Use.

We do not use your information for automated decision-making that produces legal or similarly significant effects on you.

8. Legal bases for processing (GDPR and UK GDPR)

If you are in the EEA, the UK or Switzerland, we rely on the following legal bases:

• Legitimate interests (Article 6(1)(f)): to operate and secure the Site, process log data, deliver downloads, prevent duplicate ratings and reports using hashed IP addresses, handle reports, and respond to enquiries you send us. Our legitimate interests are running a reliable, safe and free asset library. We have assessed these interests against your rights and believe the processing is proportionate and expected.
• Consent (Article 6(1)(a)): for non-essential cookies and similar technologies used for personalised advertising and analytics, where consent is required by law. You may withdraw your consent at any time.
• Contract (Article 6(1)(b)): to provide staff accounts to administrators and contributors under the arrangements we have with them.
• Legal obligation (Article 6(1)(c)): where we must keep or disclose information to comply with the law, for example in response to a valid court order or to handle copyright notices.

9. How we share information

We do not sell your personal information. We share information only in the following circumstances:

• Hosting and infrastructure providers: companies that host our website, database, email and file-hosting servers process information on our behalf so that the Site can function. They are permitted to use it only to provide services to us.
• Google: Google receives information through AdSense and Analytics cookies and tags as described above, and acts as an independent controller for some advertising purposes.
• Legal requirements: we may disclose information if we believe in good faith that it is necessary to comply with applicable law, a court order or a lawful request from public authorities, to enforce our Terms of Use, to respond to claims of copyright infringement, or to protect the rights, property or safety of Free Game Assets, our users or the public.
• Business transfers: if the Site is transferred to a new operator, for example through a sale or reorganisation, information may be transferred as part of that transaction, and the new operator will be bound to handle it in line with this policy or will notify you of any changes.

When you submit a copyright report, we may share the content of the report with the contributor who uploaded the asset so that the matter can be resolved, but we will not share your email address unless the law requires it or you agree.

10. Data retention

We keep personal information only for as long as we need it for the purposes described in this policy:

• Web server and download logs: kept for up to 90 days, after which they are deleted or anonymised, unless a specific log entry is needed for longer to investigate a security incident or abuse.
• Rating records: the hashed IP address associated with a rating is kept for as long as the asset remains published, so that duplicate votes can continue to be prevented. When an asset is removed, its ratings and associated hashes are deleted within 30 days.
• Report records: reports, including the hashed IP address and any optional text, are kept for up to 12 months after the report has been resolved. Copyright notices and counter-notices may be kept for up to 3 years so that we can demonstrate how they were handled.
• Contact messages: messages sent through the contact form or by email are kept for up to 24 months after our last correspondence with you, and then deleted.
• Staff accounts: kept while the account is active and deleted within 90 days after the account is closed, except for upload history attached to published assets, which may be kept in a minimal form for as long as the asset remains on the Site.
• Google cookies: retention is set by Google. Our Google Analytics data retention is configured to 14 months.

11. Security

We take reasonable technical and organisational measures to protect information against loss, misuse and unauthorised access, disclosure, alteration or destruction. These measures include encrypted connections (HTTPS) for the Site, hashing of IP addresses used for ratings and reports, hashing of staff passwords, restricted access to the administration area and database, and regular software updates. No method of transmission over the Internet or method of electronic storage is completely secure, so while we work hard to protect your information we cannot guarantee its absolute security.

12. International transfers

Our hosting providers and Google may process information in countries other than the one in which you live, including the United States, and those countries may have data protection laws that differ from yours. Where we or our providers transfer personal information out of the EEA, the UK or Switzerland, we rely on appropriate safeguards, such as adequacy decisions, the EU-U.S. Data Privacy Framework where the recipient is certified, or the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum.

13. Your rights under the GDPR and UK GDPR

If you are in the EEA, the UK or Switzerland, you have the following rights regarding your personal information, subject to certain conditions and exceptions:

• the right to access the personal information we hold about you and receive a copy of it;
• the right to rectification of inaccurate or incomplete information;
• the right to erasure of your information in certain circumstances;
• the right to restrict our processing in certain circumstances;
• the right to data portability, to receive information you provided to us in a structured, commonly used and machine-readable format;
• the right to object to processing based on our legitimate interests;
• the right to withdraw consent at any time where we rely on consent;
• the right to lodge a complaint with your local data protection authority, such as the supervisory authority in your EU member state or, in the UK, the Information Commissioner’s Office.

To exercise any of these rights, email us at [email protected]. We will respond within one month and may ask for information to verify your request. Please note that because ratings and reports are linked only to a hashed IP address, we may not be able to identify which records relate to you unless you can provide enough information, such as the IP address you used at the time, for us to locate them.

14. California privacy rights (CCPA and CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you specific rights. In the preceding 12 months we have collected the following categories of personal information: identifiers (such as IP addresses and, if you contact us, your name and email address); internet or other electronic network activity information (such as log data and interactions with the Site and its advertisements); approximate geolocation derived from IP addresses; and the contents of messages you send us. We collect this information from you directly and from your device, for the business purposes described in section 7.

You have the right to:

• know what personal information we collect, use, disclose and share, and request a copy of it;
• request deletion of personal information we have collected from you;
• request correction of inaccurate personal information;
• opt out of the “sale” or “sharing” of personal information;
• limit the use of sensitive personal information (we do not collect sensitive personal information);
• not be discriminated against for exercising any of these rights.

Do Not Sell or Share My Personal Information. We do not sell personal information for money. However, allowing Google and other advertising partners to use cookies on the Site to show you personalised advertisements may be considered “selling” or “sharing” for cross-context behavioural advertising under California law. You can opt out by using the privacy or cookie settings link on the Site where provided, by turning off personalised ads in Google Ads Settings, by using the opt-out tools at www.aboutads.info/choices, or by enabling a Global Privacy Control signal in your browser, which we treat as a valid opt-out request for that browser. You may also email us at [email protected] with the subject line “Do Not Sell or Share”. We do not knowingly sell or share the personal information of consumers under 16 years of age.

You or an authorised agent may submit a request to know, delete or correct by emailing us. We will verify your request using information you provide and respond within 45 days, as required by law.

15. Children’s privacy

The Site is intended for game developers, artists and other creators, and is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13, in line with the U.S. Children’s Online Privacy Protection Act (COPPA). In the EEA, we do not knowingly collect personal information from children under 16 (or the lower age set by the relevant member state) without the consent of a parent or guardian. Children should not use the contact form or submit reports. If you believe a child has provided us with personal information, please contact us at [email protected] and we will delete it promptly.

16. Third-party links

The Site may contain links to other websites, including asset creators’ portfolios, software tools, documentation and advertisers. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policy of every website you visit.

17. Downloaded files

Asset files you download from the Site, such as FBX models, textures and ZIP packs, are delivered from our file-hosting servers. The download request is logged as described in section 2.1, but the files themselves do not contain tracking code, do not contact our servers when you open them and do not collect information about you or your projects. We do not track how or where you use downloaded assets.

18. Changes to this policy

We may update this Privacy Policy from time to time, for example to reflect changes in the law, our services or the third parties we work with. When we do, we will revise the “Last updated” date at the top of this page. If we make significant changes, we will make reasonable efforts to draw attention to them, for example by displaying a notice on the Site. We encourage you to review this policy periodically.

19. Contact us

If you have any questions about this Privacy Policy, wish to exercise your privacy rights or want to raise a concern about how we handle your information, please contact us by email at [email protected]. We do not have a postal address for privacy enquiries, and email is the fastest way to reach us. We aim to reply to all privacy enquiries within 30 days.