Security and encryption
Everything that travels between your devices and Scribblespace is encrypted in transit (TLS). Your scribbles are not end-to-end encrypted: the service can read them, which it needs to sync them and back them up. Keep that in mind before storing very sensitive material.
What that means
- Someone watching your network, such as on public Wi-Fi, can’t read your scribbles as they sync.
- Scribblespace can technically read your notes, drawings and images. Access is limited to what’s needed to run, secure and support the service, for example to investigate a fault or to help you when you ask.
- If you sign in with an email and password, the password is stored only as a one-way hash, never in readable form.
Who can open your scribbles
- A notebook is open only to the people in its workspace, according to their roles.
- A private scribble can be opened only by the person who made it private and the people they add, not even by owners and admins.
- A scribble shared with Anyone with the link can be read by anyone who has the link, without signing in. Share such links with care, and switch the scribble back when you’re done.
- When you remove someone from your workspace, their access ends at once, even on devices they have open.
- Agents and scripts get access only through an API key you create, and you can revoke it at any time.
Your devices
Each device keeps a full copy of the notebooks you open there, so they work offline. That copy is protected by your device, not by Scribblespace, so lock your devices and keep them up to date.
No system is perfectly secure, so export a backup of anything important from time to time. If you think someone has accessed your account, email support@scribblespace.app. The privacy policy has the details.