Privacy Policy

We collect what we need to run the product. We do not sell data. You can email us to access, export, or delete anything we have on you.

When you sign up and use Scrollable, we collect:

• Your email address (for sign-in and product communication).
• Profile data you give us during onboarding — your experience level, the path you choose, and how much time you can commit.
• Learning progress: which cards you complete, your XP, your streak, your quiz answers, and any code you submit through Build cards.
• Card-level events: views, completions, hints used, and shares — used to improve the curriculum.
• Your IP address and request metadata, kept short-term for security and abuse prevention.
• Optional analytics events (only if you accept cookies — see Cookies below).

• Running the product — auth, progress, and recovering your account.
• Improving the curriculum — knowing which cards land and which get abandoned tells us what to fix.
• Cohort and leaderboard features when you opt in to a cohort code.
• Detecting abuse, spam, and security issues.

We use a small set of vendors to run the product. We do not sell your data to anyone, and we do not share it for advertising.

• Supabase — stores your profile, progress, and events.
• Anthropic — powers the AI assistant. Your messages to the assistant are sent to Anthropic to generate responses.
• Vercel — hosts the application and processes inbound requests.

Two kinds of cookies are at play:

• Strictly necessary— auth session cookies and your local UI preferences. These are set regardless of consent because the app cannot function without them. This falls under GDPR’s “strictly necessary” exception.
• Analytics — used to understand what users do in the product so we can improve it. These are set only if you click Accept on the cookie banner. You can decline at any time and non-essential events will not be recorded.

You can ask us to:

• Show you the data we have on you.
• Export it as JSON.
• Delete your account and all associated data.
• Correct anything that’s wrong.

Email support@scrollable.ai and we’ll respond within 30 days.

Scrollable is not directed at children under 13, and we do not knowingly collect data from anyone under 13. If you believe a child has signed up, email us and we will delete the account. We aim to comply with COPPA.

We use industry-standard encryption in transit (HTTPS) and at rest. No system is perfect, but we keep our attack surface small, and we will notify affected users without delay if we detect a breach involving personal data.

If we change anything material, we will update the “Last updated” date at the top and email registered users when the change affects them.

Questions, requests, or complaints: support@scrollable.ai.