Legal

Privacy Policy

Last updated: 21 October 2026

Spoolfield runs on your own device. We don’t keep a record of what you download, and we keep only what we need to sell and unlock Spoolfield.

1. Who is responsible

The personal data described here is the responsibility of the developer of Spoolfield, based in Thailand. You can reach us at [email protected].

Payments are handled by our online reseller, which is the Merchant of Record and is responsible for your payment details under its own privacy notice. We never see your card number.

2. What the Spoolfield app sends us

The app talks to our license server to start your free trial, unlock your plan and count usage. It sends:

• A device ID. This is a one-way scramble (hash) of your computer’s system ID. It is not the ID itself, and it contains no name or hardware details.
• Trial records. For each device, when the trial started and how many clips it has used.
• Usage counts. When a clip counts toward your trial, or a file counts toward your AI allowance, the app sends a random job number. It never sends the link, the title or the file.
• Your email address, if you buy Spoolfield or sign in. We use it to find your plan and to email you 6-digit sign-in codes. We store only a scrambled copy of each code, and codes expire after a few minutes.

For people who buy Spoolfield, we also keep:

• Your plan, its status and renewal date.
• The order and subscription numbers from our payment reseller. They link your purchase to your account.
• Which devices are signed in, and when each was first and last seen.
• Your AI file counts per month, and your AI credit balance and history.

Like every web server, ours also sees your IP address and the time of each request. We use it to keep the service secure and to stop abuse.

3. What we never collect

• The links you paste, the titles of clips, and the files you save or convert. If you use AI apps on the web, links and replies pass through our relay without being stored (see section 6).
• Your browser cookies. If you turn on browser cookies in Spoolfield, they are read on your device and sent only to the site the clip comes from.
• Spoolfield’s log files. They stay on your device unless you choose to send one to us when you ask for help.
• What you type into an AI app. On your device, Spoolfield’s MCP server and local API send us only the usage counts described above. With AI apps on the web, our relay sees only the requests your AI app sends to Spoolfield, not your conversation. Your AI app’s provider handles your conversations under its own privacy policy.

4. Our website

• The website has no ads, analytics or tracking scripts.
• If you choose a language, your browser remembers the choice in its local storage. Nothing is sent to us.
• The demo sets one cookie, spool_demo, for 30 days. It remembers that you’ve already tried a clip.
• To allow one demo clip per day, we also keep a scrambled copy (hash) of your IP address for 24 hours.
• The demo uses the link you enter only to download that clip. We delete the file within 30 minutes.

5. Other services Spoolfield connects to

• The sites you download from. They see your IP address, just as when you watch in a browser.
• GitHub, to download updates to Spoolfield’s open-source parts (yt-dlp, FFmpeg and QuickJS-ng).
• Our service providers. Our hosting provider runs the license server, the relay for AI apps on the web, and the website, and an email delivery service sends sign-in codes. They process data only on our instructions.

6. AI apps on the web

If you turn on “Allow AI apps on the web” in Spoolfield and connect an AI app such as claude.ai, our relay server passes requests between that AI app and Spoolfield on your device. Files are still downloaded and saved on your device. They never pass through our servers.

• What passes through the relay. The requests your AI app sends to Spoolfield, including the links it asks Spoolfield to save, and Spoolfield’s replies, such as job progress, clip titles, file names and where they were saved on your device. The relay holds them in memory only while the request runs. We don’t store or log them.
• What we keep. The AI apps you’ve connected (the name and return address each app registered), their access tokens in scrambled (hashed) form, and which of your devices receives requests.
• Signing in. To connect an AI app, you sign in on our page with your email address and a 6-digit code, as described in section 2.
• Your AI app’s provider sees what you ask it and what Spoolfield replies, under its own privacy policy.

You can stop this at any time. Turn the switch off in Spoolfield, or remove Spoolfield from your AI app.

7. Why we use your data

• To provide what you bought. This covers unlocking Spoolfield, signing in your devices and counting AI files. It is necessary to perform our contract with you.
• To prevent abuse and fraud. This covers trial limits, device limits and security logs. It is our legitimate interest in keeping Spoolfield working and fair.
• To meet legal duties. This covers tax records and responding to lawful requests.

We don’t use your data for advertising or profiling, and we don’t sell or rent it to anyone.

8. How long we keep it

• Account data: while your account exists, so your plan and AI credits stay with you. After that, only as long as the law requires.
• Trial records: kept per device so the free trial can’t be repeated. They are linked to the device ID only, not to your name or email.
• Sign-in codes: deleted once they are used or expire.
• AI apps on the web: access tokens expire after 1 hour, and refresh tokens after 30 days without use. They stop working as soon as you remove Spoolfield from the AI app (if the app tells us) or your plan ends. Unfinished sign-ins are deleted within a few hours. Requests passing through the relay are not kept at all.
• Demo data: the IP hash for 24 hours, the cookie for 30 days and the file for 30 minutes.
• Security logs: kept for a limited time only.

9. Where your data is processed

Our servers and service providers may be outside your country. When we move personal data across borders, we use the safeguards that data protection law requires.

10. Your rights

You can ask us to:

• See the data we hold about you, or get a copy of it.
• Correct it.
• Delete it.
• Stop or limit using it.

Email [email protected] with “Privacy request” in the subject, from the email address on your account. We reply within 30 days.

Deleting your account removes your email address, signed-in devices and connected AI apps, and ends any remaining plan time and AI credits. If you’re unhappy with our answer, you can complain to the data protection authority where you live.

11. Security

We keep your data safe in these ways:

• All connections use HTTPS.
• Device secrets, sign-in codes and the access tokens of AI apps on the web are stored only in scrambled (hashed) form.
• Your license is a signed token, which can’t be faked or edited.

12. Children

Spoolfield is not meant for children under 13. To buy Spoolfield, you must be old enough to make purchases where you live, or have a parent’s permission.

13. Changes

When we change this policy, we post the new version here and update the date at the top. If a change is significant, we also tell people with a paid plan before it applies.