Code signing policy — Printventory

Free code signing provided by SignPath.io, certificate by SignPath Foundation.

What gets signed

Windows installer (Printventory-Setup-<version>.exe): built from the public source code on GitLab.com CI, a mirror of the GitHub repository, then signed through SignPath. Only builds produced by that pipeline from Printventory's own source are submitted for signing.
Microsoft Store builds are signed by Microsoft as part of Store distribution.
macOS, Linux and Docker builds are not covered by this signing program yet.

Printventory is free and open source under the MIT License. Every release is approved by hand before it is signed.

Committers and reviewers: Cody Dean (TechJeeper). Changes from outside contributors, such as pull requests, are reviewed by a committer before they are merged.
Approvers: Cody Dean (TechJeeper). Each signing request is approved by hand before a release is signed.

Printventory keeps your library, settings and model files on your own computer or server. It only contacts other systems in these cases:

Update check: at startup Printventory downloads a small version file from printventory.com to see whether a newer release is available. No library data is sent.
Usage reporting: Printventory sends anonymous usage counts to GoatCounter: that the app was opened, the app version, your operating system, and how many models are in your library. File names, file contents and personal information are never sent. Usage reporting is on by default; turn it off any time under About → Enable Usage Reporting.
AI tagging: only when you use it, the model details needed for tag suggestions are sent to the AI service you choose in settings (by default Puter). Their privacy policy applies to that data.
Services you connect: printers, Spoolman, slicers and other integrations are contacted only at the addresses you configure.

Printventory does not sell or share your data. For questions, open an issue on GitHub or ask on Discord.