Privacy policy

The short version

• You can try Scopepin without an account.
• With an account we store your email address and the work you save.
• We use no advertising and no third-party tracking. The only cookie is the sign-in session.
• Site analytics count events against a daily-salted hash. No raw IP addresses are stored, and the hash changes every day, so it cannot follow you.
• Payments go through Stripe. We never see your card number.
• Delete your account by emailing us from the account address. Everything you saved goes with it.

What we store, and why

• Email address, for sign-in links and to identify your account. If you sign in with Google we receive the email address and Google's account identifier, nothing else.
• The work you save, visible only to you unless you share it, enforced in the database.
• Subscription state if you pay: your Stripe customer identifier, the plan, its status and the current period end.
• AI usage: a count of AI runs per day, kept against your account (or a daily hash of your IP address when you are signed out) to apply the free daily limit.
• Feedback you send: the message, any screenshot you attach, the page you sent it from and your plan. Screenshots are stored privately.
• Email preferences: whether you want tips and offers by email, and whether emails to you bounce.

Site analytics

We record product events such as a page view or a checkout started. Each event stores the event name, a few properties about the event itself, the page path, the referring site's hostname, the account identifier if you are signed in, and a visitor hash: a one-way hash of your IP address mixed with a salt that changes every day. We do not store the IP address. No cookie is set for analytics.

Who processes it

• Supabase (database and sign-in): accounts, saved work, subscription state, events and feedback.
• Stripe (payments): card details, billing address and invoices. Card numbers never reach our servers.
• Anthropic (AI features): the text you send to an AI feature is sent to Anthropic's API. Your email address and account identifier are not sent. Anthropic does not use API inputs to train its models.
• Resend (email): your email address and the content of the emails we send you.
• Cloudflare (hosting and network): serves the site and keeps short-lived request logs for security, as any host does.
• Google, only if you choose to sign in with Google.

We do not sell personal data and we do not share it with advertisers. We disclose it only to these processors, or if the law requires us to.

Cookies

Signed-in users get a session cookie so the site knows who you are; it is essential to the service and is removed when you sign out. There are no analytics or advertising cookies.

Your rights, and how to delete your account

To delete your account, email hello@scopepin.com from the address on the account. We delete the account, its saved work and its event history within 30 days and confirm by email. Payment records stay with Stripe for as long as tax law requires. If you are in the EEA, the UK or another jurisdiction with data-protection rights, you can also ask for a copy of your data, a correction or a restriction, and you can complain to your local supervisory authority.

Retention

• Accounts and saved work: until you delete them or the account.
• Site events: up to 24 months, then deleted or aggregated.
• AI inputs: not stored by us beyond the request.
• Payment records: as required by law, held by Stripe.

Children

Scopepin is not directed at children under 16 and we do not knowingly collect their data.

Changes

If this policy changes in a way that matters, the date at the top changes and account holders are told by email.

Contact

Tov Studios, LLC, hello@scopepin.com. See also the terms of service and the refunds and cancellation policy.