Privacy Policy
Last updated 18 September 2026
This policy explains what we collect when you use Scroll Sites, why, and what you can do about it. We collect as little as the Service needs to work.
What we collect
Account data. Your email address, and if you sign in with Google, the name and profile picture Google shares. We never see your Google password.
Activity. When you copy a prompt or download a project we record which one, when, and the IP address of the request. We use this to enforce rate limits, detect abuse, and show you your own history. Failed sign-in attempts are recorded to protect your account from guessing attacks.
Payments. If you buy a plan, payment is handled by Stripe. We receive a customer reference and the plan status, never your card number.
Technical data. Standard server logs and privacy-respecting page analytics (no cookies, no cross-site tracking).
What we don’t do
We don’t sell your data, run advertising, or track you across other websites. We don’t read the sites you build.
Cookies
We set one strictly necessary cookie to keep you signed in. It is not readable by scripts and is not used for tracking. There is no cookie banner because there is nothing to consent to.
Live previews
Site previews are loaded from separate hosts inside a frame. Those pages are ours, run no analytics, and cannot read anything from your Scroll Sites session.
Who processes your data
Supabase (database and authentication, hosted in Seoul, South Korea), Vercel (hosting), Google (sign-in, only if you use it), and Stripe (payments, only if you buy a plan). Each processes data only to provide its service to us.
How long we keep it
Account data for as long as you have an account. Activity records for 12 months. When you delete your account, your profile and entitlements are removed immediately and activity records are detached from you.
Your rights
You can view and change your name on the account page, delete your account there, and email us to request a copy of your data or ask a question. If you are in the EU or UK you also have the right to lodge a complaint with your data protection authority.