Your data on Spoolroom

Your inventory is yours

This Spoolroom instance has its own private database used only by you. Your filament, prints, supplies, photos, and history are never shared with other instances or anyone else, and are never used to train anything. You can download a complete copy at any time — “Export my data (JSON)” at the bottom of your home screen — and take it with you.

If you ask us for help with something in your workshop, we may need to see it the way you do. That is read-only, expires within the hour, and each time is logged.

Sign-in

Spoolroom uses passkeys (Face ID / fingerprint), and there is no password — nothing to reuse, leak or have stolen from us.

You can also sign in with a one-time link emailed to you. That link expires in 15 minutes, works once, and is the same route back in if you lose every device you had a passkey on. We store your address so we can send it; we do not use it for anything else.

One session cookie keeps you signed in on this device; it identifies your session and nothing else. Asking for a sign-in link also sets a second cookie for 15 minutes, holding a random value, so the link can tell it is being opened in the browser that asked for it. No advertising or cross-site tracking cookies exist here.

AI features

Filo, photo-to-spool and receipt import send only what's needed for the request (the photo you take, or your chat message and the inventory facts needed to answer) to an AI provider. By default that is Anthropic's Claude, through the Claude API, and an instance may be set to OpenAI instead. If you've added your own key in Settings, it goes to that key's provider instead: Anthropic for a Claude key, OpenAI for an OpenAI key, under your own account with them. The disclosure you see before first use names the one that applies. Nothing is stored on their side for reuse. These features are optional; everything else works without them. To let Filo resume across pages and devices, a sanitized copy of your conversation is stored in this private instance for 30 days after the latest message. Chat photo previews and approval tokens are never stored in that transcript. Choosing “New conversation” deletes it immediately.

Error & performance reporting

To catch bugs and slowness proactively, this instance reports errors and page-speed measurements to a monitoring service: what went wrong, on which page, on what kind of device/browser, and how fast pages load. It never includes your inventory data, photos, chat messages, or what you clicked — no behavioral or session tracking. The server side keeps similar operational counters (request rates, speeds, AI token totals) with the same rule: counts, never content. Ask whoever runs your instance to turn this off if you'd prefer — it's one setting.

The iPhone and Android apps

If the app itself crashes, or cannot load Spoolroom, it keeps a short note on your phone and sends it to us the next time it opens with a connection: what failed, the app and system version, and whether it is a phone or a tablet. It never includes your inventory, photos or messages, the address of the page you were on, or anything that identifies the phone, and it is not tied to your account. Notes older than a week are discarded unsent. No crash-reporting company is involved — the notes come straight to us.

Counting who comes back

When you're signed in, Spoolroom notes the date — not the time — and whether you used the website, the iPhone or iPad app, or the Android app— at most one note a day for each of the website, the iPhone or iPad app and the Android app. That is the whole note: no pages, no clicks, no IP address and nothing from your workshop. We use it only to count how many people use Spoolroom each day, week and month, and how many come back, and we only ever look at the totals; the totals are also charted on our monitoring dashboard. The notes themselves are kept for about 400 days, deleted with your account, and never shared or sold.

Your account also records which of those three you signed up on, so we can count signups the same way. That is all it records about your signup — never which site or link brought you here — and it is deleted with your account.

Counting visits

The public pages — the home page, sign-in, the demo and these legal pages — count visits, so we know whether anyone is finding us and from where. Each visit adds one to a tally of which page, which site sent you (its name only, like reddit.com — never the link itself), your country and whether you're on a phone or a computer. Nothing is stored on your device and no identifier is attached, so a visit cannot be tied to you or to any other visit. Once you're signed in, your page visits are not counted at all — only which days you used Spoolroom, below.

Backups

Your database is backed up nightly, encrypted, to off-site storage so your data survives accidents. Backups follow the same rule as everything above: they exist to protect your data, not to look at it.