Privacy Policy

TCoops is operated by Tyler Cooper in Calgary, Alberta, Canada. We are responsible for the personal information we collect and process.

• Privacy questions and data requests: [email protected]
• FIM help and account support: [email protected]
• Anything else: [email protected]

FIM uses Google Sign-In as its only login method. When you sign in, Google asks your permission to share your basic profile with us. We receive and store:

• your name,
• your email address, and
• your Google profile picture.

We do not receive or store your Google password, and we do not keep Google access tokens after sign-in completes. We request only the basic openid, email and profile scopes; we do not access Gmail, Drive, Calendar, Contacts or any other Google service.

How we use it

To create and secure your FIM account, to recognise you when you sign back in, to show your name and picture inside the app, and to send you account and service emails (for example, a welcome email, security notices, agreement changes and the notice when the beta ends). Tips, product news and reminders go only to people who agreed to them during signup, and every one has an unsubscribe link.

Who we share it with

Your name and email address go to Brevo (our email provider, servers in the EU) so we can send the emails above. Your email address is also kept in a basic account record in PostHog (servers in the USA) so we can switch FIM features on for you. If you accept analytics, your name is added and your activity is linked to it. We do not share Google user data with anyone else.

What we never do with it

We do not use Google user data for advertising, do not sell it or share it with data brokers, do not use it to assess creditworthiness, and do not use it to train AI or machine-learning models.

How long we keep it, and how to delete it

• If you sign in but do not finish signing up, we delete the account automatically after 14 days.
• Otherwise we keep your Google profile data for as long as your FIM account exists.
• You can delete your account yourself at any time. This erases your data. See section 21.
• You can also revoke FIM's access to your Google data at any time from your Google Account at myaccount.google.com/permissions.

• ✓ Operate and maintain Services
• ✓ Create and manage accounts
• ✓ Process payments (where applicable)
• ✓ Answer support requests and fix bugs
• ✓ Improve user experience
• ✓ Detect and prevent fraud and abuse
• ✓ Send emails you need or agreed to
• ✓ Comply with legal obligations

We share information only with service providers that process it for us, when the law requires it, or to protect our users and Services. Across our sites we use Google Sign-In, Cloudflare, Brevo, PostHog and Google Analytics.

Brevo (brevo.com) sends our emails and manages contacts. It processes your email address, name and email engagement (opens, clicks, unsubscribes). Brevo is our record of whether you agreed to product emails. Brevo servers are in the European Union. Brevo's privacy policy: brevo.com/legal/privacypolicy.

FIM service providers

FIM is not made by or affiliated with Bambu Lab. If you connect Print Automation, Bambu Lab's own terms and privacy policy apply to your Bambu Lab account.

We use cookies and similar technologies to maintain sessions, remember preferences, and provide analytics.

• Analytics: Usage data to improve functionality (consent-based where required)
• Authentication: Secure session cookies for logged-in users
• Preferences: Local storage for UI settings and preferences

Analytics on tcoops.ca. This website (including the portfolio, blog and shop) uses Google Analytics and PostHog (servers in the United States) to understand how visitors use the site.

• Before you choose, or if you reject analytics cookies: PostHog runs in cookieless mode. It sets no cookies and stores nothing in your browser; visits are counted anonymously using a privacy-preserving hash generated on PostHog's servers.
• If you accept analytics cookies: PostHog stores an anonymous identifier in a first-party cookie and local storage so it can recognise return visits, and records sessions (pages viewed, clicks and scrolling) so we can see where the site is confusing. All form fields, including checkout, contact and newsletter forms, are masked in recordings, so what you type is never captured.
• Shop events: we record product views, cart changes and completed orders (order total and item count) without your name, email address, shipping address or payment details.

You can change your choice at any time by clearing this site's data in your browser, which brings back the cookie banner. FIM has its own analytics choice; see section 15.

We are based in Alberta, Canada. Our service providers process information in other countries. FIM's app and database run in the United States (Google Cloud, Iowa), Brevo is in the European Union, and PostHog is in the United States. Information processed outside Canada may be subject to the laws of those countries, including access by their courts and authorities.

We keep personal information only as long as we need it to run the Services, meet legal obligations, resolve disputes and enforce our agreements. When we no longer need it, we delete it or remove what identifies you.

FIM has fixed retention periods. They are listed in section 21.

We protect personal information with encryption in transit (TLS/HTTPS) and encryption at rest on our database provider (MongoDB Atlas). Bambu Lab tokens are stored with an extra layer of encryption. Access to production data is limited to Tyler Cooper. Access to PostHog is protected with two-factor authentication. We never store Google passwords or Google access tokens. No system is completely secure, and you are responsible for keeping your own Google account safe.

Depending on where you live, you may have rights to:

• → Access your data
• → Correct your data
• → Delete your data
• → Export your data
• → Withdraw consent
• → Complain to a regulator

We comply with Alberta's Personal Information Protection Act (PIPA) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). If you are in the European Economic Area or the United Kingdom, you also have rights under the GDPR, including the right to object to processing and to complain to your local data protection authority. In Canada you can complain to the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.

In FIM you can export your data and delete your account yourself from Settings. For anything else, email [email protected]. We aim to reply within 30 days.

Our Services are not intended for children under 13. If we learn that a child has provided personal information, we will take reasonable steps to delete it.

We may update this Privacy Policy from time to time. The "Updated" date at the top shows the latest change. Continued use of our Services after changes means you accept the updated policy.

If we materially change how we use Google user data or FIM analytics, we will tell FIM users by email or in the app before the change takes effect.

FIM (Filament Inventory Manager) uses PostHog (servers in the USA) for product analytics, session recordings and occasional in-app surveys, but only if you say yes. Analytics are not required and are separate from the FIM Public Beta Agreement: accepting the agreement does not turn them on. FIM works the same either way.

You choose in the banner and can change your mind any time in Settings → Privacy. Choices made under the old closed-beta agreement did not carry over, so everyone was asked again.

• • Recordings are made only if you accept analytics.
• • A recording shows what is on your screen, including your inventory, projects and supplies. It includes mouse movements, clicks, scrolling and drawn (canvas) elements.
• • Anything you type into a form is hidden.
• • Recordings are kept for 90 days.

PostHog's AI tools

When Tyler uses PostHog's AI tools (for example, to summarise a recording or search events), PostHog sends the data needed for that request to third-party AI model providers it uses as subprocessors. As of PostHog's list dated October 14, 2026, these are OpenAI, Google, Anthropic, Microsoft, Modal, Baseten, Cloudflare, Fireworks.ai and Runpod, mostly in the USA. They process the data for PostHog under PostHog's data processing terms, and only because we have turned PostHog's AI features on. The current list is at posthog.com/subprocessors.

Whether or not you accept analytics:

• • Activity data. FIM's own database keeps the date and time of your last active session, and which weeks you used FIM (just the week, not what you did). To decide whether you were active in a week, FIM looks at its own records of what you did: stock changes, usage logs, spools, filaments, supplies and projects you added, and prints you approved or rejected. We use this for activity reminders and to check the "active tester" rule in the Public Beta Agreement. It is never sent to PostHog or Google, and it is deleted with your account.
• • Anonymous server counts. FIM's server sends PostHog a few counts, such as sign-ups, agreement acceptances, feature requests and errors. They are sent under a shared ID ("server"), carry no name, email or account ID, and don't build a profile of you.
• • IP addresses. PostHog is set to discard IP addresses, so yours is never stored with analytics.
• • Bot protection. When you sign up, Cloudflare Turnstile checks that you are not a bot. Cloudflare sees your IP address and browser signals for that check.
• • Account record in PostHog. Your account ID, email, account status, which beta features you can use and your analytics choice. Used only to run feature access. Deleted with your account.

What the FIM admin can see

Your name, email, sign-up and last sign-in dates, your signup answers, and how many filaments, spools, projects and supplies you have. If you allow it in Settings → Privacy (on unless you switch it off), the admin can also view your account read-only to help with support, but can't change anything.

FIM loads Google Tag Manager on every page so we can measure our ads. It uses Google Consent Mode, and every consent signal starts as "denied".

• • In the app: ad and Google analytics cookies stay switched off. Accepting FIM analytics does not turn them on.
• • On the public FIM pages (like the home page): if you click "Accept All" in the cookie banner, Google may set ad and measurement cookies. "Decline" keeps them off.
• • Even with cookies off, Google may receive anonymous, cookie-free signals (for example, that a page was visited) with no name, email or account ID. Google sees your IP address when the script loads, as with any web request.

Google's use of this data is covered by Google's partner-sites policy.

• • Bug reports and ideas you send from Support & Updates are stored in FIM and copied to a private GitHub project so we can track them. The copy holds your text (personal details such as emails and phone numbers are removed first), the page, browser and app version. It does not include your name or email.
• • Screenshots you attach are stored in Google Cloud Storage.
• • If we accept an idea or bug, an edited summary may appear on the in-app board that other users see. It never shows who sent it.
• • FIM has no live chat. The "Send feedback" survey appears only if you accept analytics; otherwise you can email [email protected].

• → Turn analytics on or off any time in Settings → Privacy.
• → Unsubscribe from product emails with the link in any of them.
• → Export your data from Settings at any time.
• → To have your past analytics data deleted without deleting your account, email [email protected].
• → Delete your account (section 21).

Delete your account yourself in Settings → Danger Zone (you can export first), or email [email protected]. Deleting your account erases your FIM data. It cannot be undone.

After you delete your account we send one confirmation email. Accounts suspended for abuse cannot be deleted from Settings; email [email protected] instead.

Categories of information we collect for FIM:

• • Identifiers: name, email address and account ID
• • Account content: inventory, projects, supplies and print records you enter
• • Activity data: last active session and active weeks
• • Only if you accept analytics: device and browser information, clicks and page views, heatmaps, session recordings, console logs and network timings, survey answers