Personal data

Privacy policy

Last updated: 2026-05-24

1. Controller

SpoolyTracker personal data processing is operated under the responsibility of Guillaume SANCHEZ. Contact: guillaume.sanchez04@gmail.com.

2. Data we process

  • Account data: username, email, profile details, role and organization.
  • Authentication data: session tokens, login events, Google or Apple identifiers when used.
  • Business data: filament inventory, consumption logs, projects, costs, analysis files, printer settings and sync data.
  • Notification data: notification preferences and push tokens when enabled.
  • Payment data: subscription and billing information handled by Stripe. Full card details are not stored by SpoolyTracker.
  • Public API data: token names, scopes, prefixes, usage dates and revocation state. Full token secrets are not stored in clear text.
  • Technical and security data: IP address, logs, errors, browser details, timestamps and security events.

3. Purposes and legal bases

  • Account, organizations, inventory, projects, consumption and public API: contract performance.
  • Payments, subscriptions and invoices: contract performance and legal obligations.
  • Security, abuse prevention and technical logs: legitimate interest.
  • Notifications: contract performance or consent depending on the channel.
  • Service improvement and aggregated statistics: legitimate interest.

4. Processors and recipients

  • OVH SAS: hosting.
  • Stripe: payments, subscriptions and billing.
  • Google and Apple: social login when selected.
  • Expo / Firebase Cloud Messaging: mobile push notifications when enabled.
  • Email provider: transactional emails, account verification and support.

5. Retention

Account and business data are retained while the account is active, then deleted or anonymized after account deletion unless legal obligations require otherwise. Security logs are kept for a limited duration, generally up to 12 months. Billing data is retained according to accounting and tax obligations.

6. Cookies

SpoolyTracker uses strictly necessary cookies only, including access_token, used to maintain secure user sessions for up to 7 days.

7. Your rights

You may request access, rectification, erasure, restriction, objection and portability where applicable. Contact guillaume.sanchez04@gmail.com. You may also lodge a complaint with the CNIL at www.cnil.fr.