Privacy

Artwork stays on your device

Drawings, local recovery snapshots and studio preferences are saved in this browser on this device. The studio does not upload artwork or create a cloud art backup. Signing in or restoring purchases does not bring drawings to another browser or device.

Editable backups, exported pictures and print files are saved wherever you choose. Keep editable backups outside the browser. Clearing browser data, browser storage removal or losing a device can cause artwork loss.

Parent accounts

Google sign-in requests the openid identity scope. ScribbleScout stores Google's account identifier to connect your parent account, but does not request Google's email or profile scopes or store your Google email address or name in its account records.

Our account records include a parent account identifier, sign-in and session records, security and rate-limit records, and a protected recovery-code reference if you create one. Essential cookies keep your parent session and sign-in flow working. These records are separate from artwork.

Purchases and billing

Stripe hosts checkout and the subscription-management portal, and handles card information and billing contact details you provide there. ScribbleScout's purchase records include parent, customer, order, payment and subscription references, payment status, paid periods and purchase-access verification. Our application does not store your full card number.

Purchase activation saves signed access information in this browser, separately from artwork. Pack and lifetime access can remain available offline without a reconnect deadline. Membership access ends at its verified paid-through time. An offline device cannot learn about a refund or account change until it reconnects and successfully checks access.

Hosting, logs and outside services

Cloudflare hosts the website and parent-account and purchase records. Website requests disclose technical information such as IP address and browser request information to the hosting provider. Google and Stripe receive information when you use their sign-in or payment services.

ScribbleScout keeps bounded, sanitized operational logs to diagnose failures. The studio does not include advertising, tracking analytics or a remote art-reporting service. It does not request access to the camera, microphone, location or contacts.

For those providers' handling, see Cloudflare's privacy policy, Google's privacy policy and Stripe's privacy policy.

Questions and account-data requests

Email contact@buildsbythor.com to ask about privacy or request access, correction or deletion of parent-account data. We review requests and verify account ownership before changing account or purchase records. An email address or screenshot alone does not establish ownership.

Account and purchase records support sign-in, access restoration, payment reconciliation, security and financial recordkeeping. A deletion request is reviewed for information that must be retained for those purposes or applicable legal obligations. It does not itself cancel a Stripe subscription or erase artwork in a browser. Use Manage subscription to stop renewals.

Do not email children's artwork, passwords, cookies, account recovery codes, purchase-access tokens or full card details. If you believe personal information about a child has been sent to us, contact us so we can review it.