Privacy policy
Effective date: 2026-08-11
Operator
Operator: OpenFilament by Raymond Davelaar
Privacy contact: info@openfilament.nl
Hosting: Self-hosted VPS (IONOS), application and SQLite on-server (EU (Germany))
Accounts — what we store
Creating an account only requires an email address and a password. We store that email so you can sign in, receive payment receipts and reset your password. We do not ask for your real name; an internal username is generated automatically. Passwords are stored as scrypt hashes — never in plain text.
We do not use your email for marketing. Account recovery and essential service messages (for example payment or security notices) are the intended uses.
Payments (Stripe)
Optional My Spools Cloud purchases are paid through Stripe Checkout. You enter card or wallet details on Stripe’s hosted payment pages. Stripe is the payment processor: OpenFilament never receives or stores your full card number, CVC or equivalent wallet secrets.
On our side we keep only what is needed to deliver Cloud access and accounting: amount, currency, payment status, Stripe session/payment identifiers, timestamps and your Cloud entitlement period. Stripe processes payment data under Stripe’s own terms and privacy policy.
Cloud access is a one-time prepaid period (currently 12 months). There is no automatic renewal and no off-session charge unless you start a new Checkout yourself.
What else we process
- Authentication sessions (httpOnly cookies) and security logs.
- My Spools Cloud inventory, private notes and QR/RFID identities only when you explicitly sync to Cloud.
- Local My Spools stays in your browser until you sync or export it — signing in does not upload local spools by itself.
- Public community contributions you choose to publish (calibrations, catalog tips).
- Consent preferences and optional Google Analytics 4 only after you opt in.
Legal bases
- Contract / requested service for accounts, Cloud, exports and downloads.
- Legitimate interest for security, abuse prevention and service integrity.
- Consent for analytics cookies/storage — withdrawable via Cookie settings on this site.
- Legal obligation where security or accounting records must be retained.
My Spools
Local My Spools is free and stays on your device. Clearing site data, losing the device or switching browsers can remove it.
My Spools Cloud is optional paid hosting for inventory sync and backup. Public QR resolution does not expose private notes, locations or account identifiers.
Your rights and retention
You can request access, correction, deletion, restriction, portability and objection, and withdraw consent. Use Account export/delete, Cookie settings or email the privacy contact. You may complain to the supervisory authority listed for this site.
Soft-deleted Cloud spools are purged on a schedule. Payment and security records may be kept longer where required for accounting or fraud prevention. Backups may retain deleted data until backup expiry.
International transfers and changes
Hosting for the application and database is on our EU VPS as shown above. If you enable analytics, Google may process analytics data outside the EEA under its safeguards. Stripe may process payment data in regions where Stripe operates. Material policy changes update the consent version and may re-prompt for consent.
Cookie policy
You can change analytics and preference cookies any time with Cookie settings. Consent version: 2026-08-11
Necessary storage
Required for the site to work: language (of_locale), consent choice (of_consent), signed-in session (of_session, httpOnly), CSRF protection (of_csrf), and local My Spools data in IndexedDB. A service worker / Cache Storage may keep the PWA shell offline-capable. These are not used for advertising.
Optional analytics
Only if you accept analytics we load privacy-conscious Google Analytics 4, which may set first-party cookies such as _ga. Rejecting analytics leaves search, My Spools, accounts, QR, RFID and downloads fully usable. Marketing cookies are not used.
Change your choice
Open Cookie settings from the footer or the privacy policy page any time. Changing your mind updates storage immediately and turns analytics off when you withdraw consent.
of_locale, of_consent, of_session, of_csrf, IndexedDB (openfilament-spools), Cache Storage / service worker, optional _ga after analytics consent.