Overview
At Scribbiter, privacy is central to everything we build. We created our products to protect your creative work, and we hold ourselves to the same standard with your personal information. This policy explains what data we collect, why, and how we handle it.
This Privacy Policy is issued by Scribbiter, Inc ("Scribbiter," "we," "us," or "our"), a company incorporated in the State of Delaware, USA, with a registered address at 1111B S Governors Ave STE 25796 Dover, DE 19904.
This Privacy Policy is incorporated by reference into, and should be read together with, our Terms of Service.
Information We Collect
Newsletter Subscribers: When you sign up for our newsletter, we collect your email address. This is stored securely through our email service provider (Listmonk) and is used solely to send you updates about Scribbiter products, content protection news, and relevant industry developments. You can unsubscribe at any time using the link provided in every email.
Image Processing (ScribShield): ScribShield is designed with a privacy-first architecture. When our tools process your images:
- Processing occurs locally in your browser whenever possible
- Your original images are never stored on our servers
- We do not analyze, train on, or retain any of your creative content
- No copies of your files are made beyond what is necessary for the active processing session
Website Usage: We do not use third-party analytics services, tracking pixels, or advertising cookies. We do not embed third-party scripts that monitor your browsing behavior. Our site uses no cookies beyond what is technically necessary for functionality (such as rate limiting for form submissions via localStorage).
How We Use Your Information
- Email addresses: To send newsletter updates and product announcements. We do not sell, share, or provide your email address to third parties.
- Form submissions: Rate limiting data (stored locally in your browser via localStorage) is used only to prevent abuse. This data never leaves your device.
Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):
- Consent: We process your email address for newsletter purposes based on your explicit consent when you subscribe. You may withdraw this consent at any time by unsubscribing.
- Legitimate interests: We process limited technical data (such as localStorage rate-limiting data) on the basis of our legitimate interest in preventing abuse of our services, which does not override your fundamental rights.
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.
Your Rights
For all users, you have the right to:
- Unsubscribe from our newsletter at any time
- Request a copy of any personal data we hold about you
- Request deletion of your personal data
- Ask questions about how your data is handled
- Non-discrimination for exercising your privacy rights
To exercise any of these rights, contact us at the email below. We will respond within 30 days (or one month, as required by GDPR).
We do not sell or share personal information.
Data Retention
- Newsletter email addresses are retained for as long as you remain subscribed, plus 12 months after unsubscribing for record-keeping and suppression-list purposes, after which they are deleted.
- Image processing data: as stated above, no original files are retained on our servers; any temporary in-session data is discarded immediately after processing completes.
- localStorage rate-limiting data stays on your device and is subject to your browser's own storage and clearing behavior, not retained by us at all.
Data Storage, Security, and International Transfers
Newsletter subscriber data is stored on infrastructure we control, located in Oregon, USA. We use encryption in transit (HTTPS) for all data transmitted to and from our services. We do not store payment information, as we do not currently process payments on this site.
If you are located outside of USA and your data is transferred to and processed in USA, we rely on your explicit consent to that transfer, given at the time you submit your information, as well as the security and contractual safeguards described in this policy.
Data Breach Notification
In the event of a data breach that compromises your personal information, we will notify affected users without undue delay, and in any case within the timeframe required by applicable law (e.g., 72 hours under GDPR, where feasible), via email and/or a notice on this website. The notification will describe the nature of the breach, the data involved, and the steps we are taking in response.
Third-Party Services (Subprocessors)
We use the following third-party services to operate Scribbiter:
| Service | Purpose | Data Shared | Location |
|---|---|---|---|
| Listmonk | Self-hosted email list management for newsletter delivery | Email address | Hosted on Render.com using region Oregon, USA |
| GitHub Pages | Website hosting | Standard web request logs (IP address, user agent) | Github Pages which uses a global CDN |
We do not use Google Analytics, Facebook Pixel, or any other third-party tracking or advertising services. If we add new subprocessors in the future, we will update this table and, where required by law, notify subscribers in advance.
Children's Privacy
Our services are not directed at individuals under the age of 13 (or under 16 in the EEA, where applicable). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal data from a child, we will delete it promptly. Parents or guardians who believe we may have collected information from a child should contact us using the details below.
Changes to This Policy
We may update this privacy policy as our products and services evolve. Significant changes will be communicated via our newsletter and noted on this page with an updated date. For material changes affecting how we use previously collected data, we will seek renewed consent where required by law.
Contact
If you have questions about this privacy policy, want to exercise your data rights, or want to report a security concern, contact us at [email protected], or by mail at 1111B S Governors Ave STE 25796 Dover, DE 19904.