Privacy

Privacy policy

What Spoolyard keeps about you, why, who else sees it, and how to get it back or have it deleted.

Spoolyard is run by C & J Precision (ABN 61 667 096 751) in Chisholm, NSW, Australia. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988, whether or not the Act strictly applies to a business our size.

What we collect

• Your account: your name (if you give one), your email address, and your password, which we keep only as a one-way scrambled hash - we cannot read it.
• Your filament records: the spools, types, brands, locations, usage, settings and scan history you enter or scan. This is your data.
• Your phones: a name for each phone you connect and a revocable access token (kept as a hash), plus when it was last used.
• Billing: your subscription plan and status, and the customer and subscription references from our payment provider. We never see or store your card number; the payment provider holds it.
• Trial limits: to stop the free trial being used over and over, we keep a record of your email address and an anonymous fingerprint the payment provider gives for your card, and how many trials each has had. This record is kept even after an account is deleted, because that is the point of it, and is used for nothing else.
• Technical data: when you use the site our server sees your IP address and browser details. These appear in short-lived server logs used to keep the service running and secure, and to slow down password guessing.

Why we use it

To run your account and show you your inventory; to sign you in and keep it secure; to take payment; to send the emails the service needs (confirming your email, password resets, billing notices); to answer your questions; and to prevent abuse. We do not sell your information, use it for advertising, or profile you.

Cookies and tracking

We set one essential cookie, the sign-in session, so you stay signed in. There are no advertising or analytics cookies and no third-party trackers on Spoolyard, and the fonts are served from our own server.

Who else handles it

We use a small number of providers to run the service. They may only use your information to do that job for us.

• Stripe - payments and billing (United States and other countries).
• Resend - sending our emails, which involves your email address and the message (United States).
• BinaryLane - the Australian server where the service and your data live.
• An encrypted cloud storage provider - holds encrypted backups of the database. The files are encrypted before they leave our server.

Some of these are overseas, so your information can be handled outside Australia. When you scan a barcode we don't recognise, the service may look it up in public filament catalogues; only the barcode or search text is sent, never anything about you. We may also disclose information where the law requires it.

Keeping it safe

Traffic is encrypted (HTTPS). Passwords are hashed. Each customer's records are separated at the database level so one account cannot read another's. Phone access tokens can be revoked at any time in Settings. Backups that leave our server are encrypted. No system is perfectly secure; if a breach is likely to cause you serious harm we will tell you and the Office of the Australian Information Commissioner, as the law requires.

How long we keep it

• Your account and records: until you delete your account.
• After you delete: everything is removed from the live service immediately, and ages out of our backups within about 30 days.
• If a subscription ends, your account becomes read-only and your data is kept so you can still view and export it. Nothing is deleted unless you delete it.
• Payment records are kept by Stripe and by us as long as tax and accounting law requires (generally 5 to 7 years).
• Server logs: kept briefly and then overwritten.

Your choices

• See or take a copy: use the export tools in the app (all your data, in a standard file).
• Correct it: edit it in the app, or ask us.
• Delete it: Settings has a delete-account button that removes your account and all your data, and ends your subscription first.
• Anything else: email spoolyard@outlook.com. We will reply within 30 days, usually much sooner.

Complaints

If you're unhappy with how we've handled your information, email spoolyard@outlook.com and we'll look into it and reply in writing. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Changes

If we change this policy in a way that matters, we'll update the date below and tell account holders by email. Last updated 27 September 2026.