Privacy Notice
Controller
Mahir Sümer, Sauerlandstr. 10 45665 Recklinghausen Deutschland. Contact: support@my-filaments.com. This notice explains personal-data processing for My Filaments.
Accounts and private workspace
We process your name, optional surname, email, password hash where applicable, login identifiers, language/currency preferences, legal-notice versions and acceptance timestamps. We also store the filament, purchase, storage, movement, calculation/project information and photos that you save. Passwords are hashed, not stored as readable text. The legal basis for account and workspace functions is Article 6(1)(b) GDPR; protecting accounts and documenting terms acceptance also serves our legitimate interests under Article 6(1)(f).
Optional Google and Facebook sign-in
Email/password registration is available without social sign-in. Only selecting a provider button starts a connection to Google or Meta. We request basic identity information (provider identifier, name and email when supplied) for sign-in/linking and do not request your provider password. We retain the linked provider identifier and email. The providers process the login request under their own privacy notices, potentially outside the EEA. A new social account must accept our terms before using its workspace. Deleting My Filaments does not delete your Google/Facebook account; remove the app connection in that provider’s settings as well.
Hosting, email and technical requests
DreamHost hosts the service. The operator reports Amsterdam for the web server; the database, backups, support access and subprocessors may have different locations. Technical access/security records can contain IP address, timestamp, requested URL, browser/user agent and status code. We use Google Workspace to handle correspondence sent to support@my-filaments.com. Password-reset emails are currently sent through DreamHost SMTP. Account emails are not marketing subscriptions. Hosting, delivery and security rely on Article 6(1)(b) or (f); responses to statutory requests also rely on Article 6(1)(c).
Recipients and international transfers
Necessary recipients are DreamHost, Google Workspace, the sign-in provider you choose, and technical subprocessors. Data may be processed outside the EEA, including the United States, through provider operations and support. The providers’ processing terms describe safeguards such as EU standard contractual clauses; applicable adequacy decisions may also be relevant. Contact us for the safeguards applicable to your request and a copy or information on how to obtain them. Amsterdam hosting alone is not a promise of exclusively EU processing.
Cookies, outside resources and advertising
The application uses a necessary session cookie for login, security and selected language. It does not currently include analytics, advertising, marketing cookies or tracking pixels. Design files are served from this site. Currency conversion requests public reference rates from the server without sending your account data. Social providers are contacted when you select their login option. See the Cookie Notice for details.
Retention and deletion
Workspace data remains while your account exists. Account deletion removes active account/workspace records and queues associated photos for physical deletion, normally during the same request. Failed file deletions are retried by maintenance; contact us if you need an update. Shared standard brands/types remain because they are not your private account records. DreamHost normally retains access logs for seven days; application security logs are limited to 30 days. Operator-managed backups are rotated within 30 days; provider backup cycles depend on the hosting plan. Backup copies are restricted and not used for normal operation; deletion requests must be reapplied after restoration. Expired password-reset tokens are removed by maintenance. Ordinary support correspondence is deleted within six months after resolution unless a legal duty or a specific legal claim justifies longer restricted storage.
Your rights
Depending on the applicable conditions, you may request access, correction, erasure, restriction and data portability. You may object to processing based on legitimate interests; we then assess whether overriding grounds remain. Where processing actually relies on consent, you may withdraw it for the future. No marketing consent is required to open an account. Send requests to support@my-filaments.com; we normally respond within one month, subject to legally permitted extensions. We may ask for proportionate proof of identity. You may complain to a supervisory authority, including LDI Nordrhein-Westfalen (www.ldi.nrw.de), or the authority where you live or work.
Choices and changes
Required account data is needed to provide the requested service; optional surname, social sign-in, photos and notes are not mandatory. We do not use automated decisions producing legal or similarly significant effects. This service is intended for adults aged 18 or over. New advertising, analytics or paid plans will require a fresh assessment and updated information; non-essential tracking will not be enabled merely by changing this notice.