Privacy Policy — Spoolsight

Effective date: October 5, 2026

Last updated: 2026-10-10

1. Who we are

Spoolsight™ (the "App", at spoolsight.com) is operated by Jonathan Burton, doing business as Spoolsight ("we", "us"). For any privacy question or request, email hello@spoolsight.com.

This policy covers the waitlist, your account, and the App itself. Billing and AI-processing details are also set out in our Billing & Privacy Note.

2. What we collect

2.1 Waitlist (the "Join the waitlist" page)

• Required: your name and email address.
• Consent record: the date and time you joined, and the version of the consent wording you saw.
• Optional beta questionnaire (only if you choose to answer it): roughly how many spools and printers you have, your printer brands, how many prints you make per month, which slicers you use, how you track filament today, your phone platform, your two written answers, whether you accepted the beta-tester commitment, and where you heard about us.

We do not store your IP address with your waitlist entry. To stop spam, we keep a keyed one-way hash of your IP address in a short-lived counter. The counter expires after one hour, and expired counters are deleted automatically within about two hours. Like every page, it also creates a short-lived session record (see §2.2). The page uses no third-party captcha, and the only third-party tracking on it is Google Analytics, described in §2.7.

2.2 Your account

• Name, email address, and password (stored only as a one-way hash).
• Passkeys or two-factor authentication settings, if you turn them on.
• When you last signed in, and roughly when you last used the App (updated at most once every 15 minutes while you're signed in). We use these only to run and support the service — for example, to see whether beta testers are still using it.
• Every visit creates a session record containing your IP address and browser identification (user agent). It expires after 2 hours of inactivity and is then deleted automatically.
• To protect against password guessing and abuse, sign-in, registration and verification attempts are counted in short-lived counters that may include your email address and IP address. These counters expire within one hour (the registration counter: 24 hours) and are deleted automatically within about an hour after they expire.
• If you request a password reset, the reset token expires after 60 minutes, expired tokens are cleared automatically, and any reset tokens you have are deleted with your account.

2.3 What you put into Spoolsight

Your spools, filament types, brands, materials, prints, usage records, weigh-ins, notes and saved views. If you save a print from a slicer screenshot, that screenshot is stored with the print in private storage that only your account can view. Filament-label photos are used only to read the label and are not saved to your account.

If you have a print running, we also store an in-app reminder in your Inbox asking you to confirm it finished. It holds only that print's name and timing. Reminders are kept until you delete your account: deleting the print marks its reminder as read but keeps the print's name in it.

2.4 Billing, AI usage and feedback

• Billing: your Stripe customer ID, subscription status and period, and your card brand and last four digits. We never see or store your full card number. See the Billing & Privacy Note.
• AI usage log: the date and token counts of each screenshot or label extraction, used to enforce monthly limits.
• Beta feedback: the message, category, page and time of any feedback you send from inside the App.

2.5 Logs and cookies

• Our application logs identify you by your numeric account ID — not your name or email address — and are kept for 14 days. Database error messages are cleaned of personal data before they are logged.
• Our web server keeps standard access logs (your IP address, the address of the page requested, and your browser identification) for security and troubleshooting. These logs are rotated and deleted within 14 days.
• Inside the App itself, once you're signed in, we use only the cookies the App needs to work (your sign-in session and form security) — no analytics, advertising or tracking cookies. On our public pages, signed-out visitors may see analytics cookies from Google Analytics; see §2.7.

2.6 Beta program (added 2026-10-05)

If you answered the optional beta questionnaire, we may pick you as a beta tester. This is what happens to your data.

• Emails. We write to the email address you joined the waitlist with:

  • an invitation if we pick you and you don't have a Spoolsight account yet;
  • one reminder, about three days later, if you haven't activated yet and the link still has at least a day to run;
  • a "You're in" email instead of an invitation if you already have a verified Spoolsight account with that email address; or
  • a short email if we don't include you in this round. You stay on the waitlist.

  If we resend an invitation, it carries a new link and the old link stops working.

• Your activation link. The invitation and the reminder contain a personal link. It works once and expires 7 days after the invitation was sent. We store only a one-way hash of the link, never the link itself. When you activate, you choose your name and password. Your account uses the email address you joined with. It counts as verified, because the link reached that address. No account is created unless you activate.

• Activation attempts are counted per IP address, stored as a one-way hash, in a counter that expires after one minute.

• Tester role and free Pro. Activating your invitation, or our approval of an existing account, adds the Tester role to your account. It also gives you Pro free of charge for the number of months stated in the email. If you already have free Pro, it is extended. If your free Pro has no end date, it stays as it is. This never involves Stripe, and you are not charged.

  • If your account already has a paid Pro subscription, you get the Tester role only. Your subscription and billing carry on unchanged.

• Your answers are linked to your account. Once your account is activated or approved, your waitlist entry and questionnaire answers are linked to it. The operator can see them in the private admin area, including next to any feedback you send from the App, so your feedback can be read in context.

• Decision records. Our internal admin log records each beta decision (approved, declined, invitation resent, reminder sent, activated) by entry number, account number (once there is one) and date. It does not record your name, email address or answers.

2.7 Google Analytics (public pages only, added 2026-10-07)

We use Google Analytics to see how visitors find and use Spoolsight's public pages: the homepage, the free cost calculator, the join-the-waitlist page, the legal pages, and the sign-in, register and forgot-password pages. It never runs anywhere inside the App once you're signed in, and never on a page whose link carries a token — for example a password-reset link, a beta activation link, or an email-verification link.

• What Google receives: the page address (limited to the page itself, plus any campaign tag in the link you followed — everything else in the address is removed first); the page you came from (reduced to just "spoolsight.com" if it was one of our own non-public pages); the page title; and the standard browser and device information the Google tag sends. Google also derives an approximate location from your IP address; Google Analytics does not log or store IP addresses. Depending on your browser settings, this may include scrolling and clicking on links that leave our site.
• What Google never receives: your account ID, name, email address, anything you type into a form or the calculator, your inventory data, or a user ID. Google Signals and ad personalization are switched off, and we never use advertising cookies.
• Cookies: once you accept (or, outside Europe, unless you decline), Google Analytics sets the cookies _ga and _ga_<property ID> on your device. They last 13 months and are not renewed just by visiting again. Declining removes them. Your choice itself is kept in your browser's local storage, not in a cookie, for 13 months, and is never sent to our server.
• Consent: if your device's time zone looks like it's in the EEA, the UK or Switzerland, analytics cookies are off by default (Google determines this region from your IP address, regardless of what your banner shows) and a banner offers Accept or Decline. Until you choose, the Google tag still sends cookie-free pings with no cookie identifier, so Google can report region-level totals without setting a cookie — this is Google's standard "Consent Mode" behaviour. Outside those regions, analytics cookies are on by default; a "Do Not Track"-style Global Privacy Control signal from your browser is treated the same as declining. Anyone, anywhere, can change their choice at any time using "Analytics preferences" in the footer of any public page.
• Retention: Google keeps this data for the period set in our Google Analytics property (currently 2 months, Google's default).
• Google's own privacy practices are described at policies.google.com/privacy.

3. How we use it

• Waitlist: to email you about Spoolsight's launch and beta, and to choose beta testers.
• Account and content: to provide the App to you.
• Billing: to take payment and manage your subscription.
• Security: to prevent abuse and keep the App running.

We do not sell your personal information, and we do not use it for advertising.

4. Who can see it

Inside Spoolsight, only the operator can see waitlist entries and account-level information, through a private admin area.

The admin area also shows, for each account, these sign-in and activity times and counts of what the account holds (for example, how many spools, prints and AI scans) — never their contents.

To troubleshoot a problem with your account, the operator may access your account and use the App as you would. Each such access, and any change made during it, is recorded in an internal audit log.

We use these service providers to run the App:

Each provider handles data under its own terms and privacy policy. We may also disclose information when the law requires it.

5. How long we keep it

6. Deleting your data

Your account. You can delete your account yourself from your account settings. Before you do, you can download a copy of your data from Settings → Data.

• If you have an active Pro subscription, deleting your account cancels it immediately at Stripe, with no refund for the rest of the paid period.
• If we cannot cancel the subscription, your account is not deleted. You stay signed in and can try again or contact us.
• We do not delete your Stripe customer record. Stripe keeps the invoice, payment and tax records it is required to keep.
• Your account and inventory records, and any beta application linked to your account, are deleted immediately. Print screenshots stored with your prints are removed from our live storage within 30 days.

Your waitlist entry. Email hello@spoolsight.com from the address you joined with and ask to be removed. We delete the entry and all its answers permanently from our live systems within 30 days. Our internal record of the deletion keeps only the entry's number, not your name, email or answers.

Backups. We do not edit backups. Copies of deleted data remain in backups until those backups age out, which happens within 30 days.

7. Security

All traffic to Spoolsight uses HTTPS. Passwords are stored only as one-way hashes. Card details are handled by Stripe and never reach our servers. Only the operator can access the admin area.

8. Questions and requests

To ask what we hold about you, correct it, or have it deleted, email hello@spoolsight.com.

Jonathan Burton, doing business as Spoolsight Address: 1029 Windemere Dr., Gallatin, TN 37066, USA

This policy is governed by the laws of the State of Tennessee, USA.

9. Changes to this policy

We may update this policy as the App changes. Updates take effect when they are posted here, and the "Last updated" date above shows the latest version. If we make a material change, we will tell you by email or in the App. We will not use personal data you have already given us in a materially different way without your consent.

Revision History