Privacy
What ScrollSci stores
ScrollSci stores your account, the fields you chose, and the cards you liked, saved or flagged — because those are what make the feed and your library work. It runs no ad network, no third-party analytics and no tracking pixels, and it does not sell or share your data.
This website versus the app
This marketing site is a set of static pages. It sets no cookies, runs no analytics and has no forms — visiting it leaves nothing on our side beyond the ordinary server request logs your browser generates anywhere. Everything below describes the ScrollSci app itself, which you have to sign in to use.
What the app collects
| Data | Why it exists |
|---|---|
| Email address | Identifies your account and is where a password reset goes |
| Password | Stored only as a one-way hash — the plain password is never written down. Accounts created with Google have no usable password |
| Fields you picked | Filters your feed |
| Likes, saves and flags | Powers your library and, for flags, the report you sent with it |
| Sign-in and last-seen timestamps | A first-party count of how many accounts are active. Not linked to advertising and not shared |
| Daily card count | Only used if a free daily limit is in effect. Resets each day |
| Billing identifiers | Only if you subscribe: a customer reference and subscription status. Card details are handled by the payment provider and never reach ScrollSci |
What it does not collect
- No advertising identifiers, ad networks or ad SDKs
- No third-party analytics and no tracking pixels
- No location, contacts, camera, microphone or device sensors
- No cross-site or cross-app tracking, and no data brokers
- No profile used to decide what appears in your feed — the card pool is shared, so only your own field selection filters it
Cookies
One cookie: a signed session cookie that keeps you logged in for about two weeks. It is strictly necessary for the app to work and is not used for advertising or measurement. Because there are no non-essential cookies, there is no consent banner to click through.
Other companies involved
ScrollSci is small and uses a few outside services. Only the ones below can touch anything connected to you:
| Who | What they get | Where |
|---|---|---|
| Google (Sign-In) | Only if you choose “Sign in with Google” — it confirms your email address to us. Google's own terms apply to that sign-in | Global |
| Google Cloud | Runs the application and stores the generated card images. Keeps short-lived request logs, as any web host does | Singapore (app) · Mumbai, India (images) |
| Neon | Hosts the database — your account row and everything attached to it | Singapore |
| Resend | Your email address, only at the moment a password-reset message is sent to you | Japan |
| Razorpay | Only if you pay. Handles the payment page and your card details directly — ScrollSci never receives a card number | India |
| Cloudflare | DNS and the public website. Routes mail sent to [email protected] | Global |
Pollinations.ai generates the card illustrations and Google's Gemini models write the summaries. Neither receives anything about you — see the note below.
The models that write the card summaries never receive anything about you. They only ever see text fetched from a public source feed, and generation happens ahead of time, not when you open the app.
Where your data is processed
ScrollSci is operated from India and serves users in India. Some of the services above process data outside India — the application and database run in Singapore, and password-reset email is sent through a provider in Japan. Card illustrations are stored in Mumbai. This is disclosed here so you know it, and each provider is bound by its own contract with us.
How long it is kept
Account data is kept while your account exists, and no longer. Delete your account and the account row, your field preferences, and every like, save, seen-record and report attached to it are removed immediately — not queued, not soft-deleted.
Two things are deliberately kept, and you should know about both. If you bought somebody a gift, the record of that payment survives as a financial record, with your account unlinked from it — we are required to keep records of money received. And an unredeemed gift stays claimable by the person you bought it for, because the access has been paid for and is owed to them rather than to you.
Server logs are short-lived and rotate automatically. Cards themselves are not personal data and stay in the shared pool.
Your rights, and how to use them
Under India's Digital Personal Data Protection Act, 2023 you have the rights below. Two of them you can exercise yourself, right now, without asking us or waiting for a reply — which is how it should be.
| Right | How |
|---|---|
| Get a copy of your data | Settings → Download my data. Returns everything held about you as a JSON file, immediately |
| Erase your account | Settings → Delete my account. Immediate and irreversible. If you have an active subscription it is cancelled first so you are not billed after leaving |
| Correct your data | Field preferences are editable in Settings. To correct your email address, write to us and we will change it once we can confirm you control the new address |
| Withdraw consent | Deleting your account withdraws it entirely. There is no separate marketing consent to withdraw, because we send no marketing |
| Nominate someone | You may nominate a person to exercise these rights on your behalf if you die or become incapacitated. Write to the Grievance Officer with their name and contact details |
| Complain | To the Grievance Officer below, and after that to the Data Protection Board of India |
Children
Indian law treats anyone under 18 as a child, and requires a parent or guardian's verifiable consent before their data is processed. ScrollSci is not directed at under-18s and accounts should not be created for them without that consent.
We do not profile children, do not run behavioural advertising to anyone, and do not track anyone across other sites or apps. The only per-account history kept is which cards you have already seen, and it exists for one reason: so the feed does not show you the same card twice. If you believe a child's account has been created, write to the Grievance Officer below and it will be removed.
Changes
If this notice changes in a way that affects what is collected or who receives it, the date below changes and the change is described here rather than made quietly.
Grievance Officer
In line with the Digital Personal Data Protection Act, 2023 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021:
The Grievance Officer, ScrollSci
Email: [email protected]
The role is held by the proprietor, who is resident in India. Their name is given on request to anyone raising a complaint, and to any authority entitled to it.
Write from the address on your account where you can. Complaints are acknowledged within 48 hours and resolved within 30 days. If you are not satisfied with the outcome, you may complain to the Data Protection Board of India.
Who operates ScrollSci
ScrollSci is operated as a sole proprietorship registered in India under the Udyam
scheme.
Contact: [email protected]
ScrollSci is run by one person and operates entirely online, so the registered address is a private residence rather than an office. It is not published here for that reason. The proprietor's name, address and registration particulars are provided in full on request — to a customer with a complaint, to a payment provider, or to any authority entitled to ask. Email is the fastest way to reach a real person, and it is answered by the person who built the thing.
Last updated .