Legal
Privacy policy
Effective
This policy explains what Scribblespace collects when you use this website, the web app and the Scribblespace apps, why we collect it, and what you can do about it. We’ve tried to write it the way we would want it explained to us.
What we collect
Your account
Your name and email address. If you sign in with email, we also store your password, but only as a one-way hash, never in readable form. If you sign in with Google, Google tells us your account identifier; from your Google account we use only your name, email address and that identifier.
What you create
The notes, drawings and images you write or add, and the notebooks they belong to. This is the content Scribblespace exists to store and sync for you.
Workspaces
Which workspaces you belong to and your role in each: owner, admin, editor or viewer.
Technical logs
Basic records of requests to our servers, such as your IP address, the time and type of each request and the browser or app making it. We keep them to protect the service from abuse and to find and fix problems.
On your device
The Scribblespace apps keep a full copy of your notes on your device so they work offline. That copy lives in your browser’s or device’s storage. Clearing the site’s data in your browser, or the app’s data on your device, removes it.
How we use it
We use your information only to provide Scribblespace:
- to sign you in and keep your account secure;
- to store your notes and keep them in sync across your devices and with the people you share them with;
- to keep the service secure and reliable, and to investigate problems;
- to answer you when you write to us;
- to tell you about important changes to the service or to this policy.
We don’t sell your personal data, and we don’t show advertising.
Who can see your information
People you work with
Notebooks in a workspace are visible to that workspace’s members, according to their roles. When you are in a shared note, the people in it can see your name and where your cursor is.
Us
Scribblespace is not end-to-end encrypted, so the service can technically read your notes, drawings and images. Access is limited to what is needed to operate, secure and support the service, for example to investigate a fault or to help you when you ask.
Our providers
Our hosting and storage providers run the servers, database and file storage that Scribblespace is built on, and handle data on our behalf only to provide that infrastructure. Google is involved only if you choose to sign in with Google.
We share your information with anyone else only when the law requires it.
Where it is stored
Our servers are in the United States, with hosting, database and file storage from our hosting and storage providers. If you use Scribblespace from outside the United States, your information is transferred to and stored there. The copy of your notes kept on your own devices stays on those devices.
Security
Everything travelling between your devices and our servers is encrypted in transit (TLS). Notes are not end-to-end encrypted: they can be read on our servers. Please keep that in mind before storing very sensitive material.
Email passwords are stored only as one-way hashes. No system is perfectly secure, so we also recommend exporting a backup of anything important from time to time.
Keeping and deleting your data
We keep your account and your content for as long as your account exists. You can export a complete backup from the app at any time. To get a copy of your data, or to delete your account and data, email support@scribblespace.app from the address on your account.
When an account is deleted, copies in our backups may persist for a short time before they are overwritten. Notebooks you shared in a workspace with other people remain with that workspace, so its other members keep access to them. We keep technical logs only as long as they are useful for security and reliability.
Your choices
You can ask us to show you, correct, export or delete the personal information we hold about you by emailing support@scribblespace.app. Depending on where you live, you may have further rights under local law; write to us and we will help.
Children
Scribblespace is not directed at children under 13, and we don’t knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact support@scribblespace.app and we will delete it.
Changes to this policy
If we make material changes to this policy, we will announce them before they take effect and update the effective date at the top of this page.
Contact
Questions about this policy or your data go to support@scribblespace.app. The terms of service explain the rules for using Scribblespace.