Effective September 18, 2026
Privacy Notice
Scribblesaur uses Google sign-in to identify the adult account that owns a private story library. That account belongs to a grown-up, and we use it to make picture books a child can enjoy. We do not offer child logins.
What Scribblesaur stores
Scribblesaur stores the Google account ID, name, email address, optional profile image, login sessions, records of stories you start, story inputs, generated stories, illustrations, and narration needed to provide the service. Story inputs include typed ideas, spoken ideas, and any drawings you add. When you create an account, we also note roughly where you signed up from, worked out from your device's time zone rather than your IP address: your country, or only UK or Europe if you are there. We do not keep the time zone itself. Scribblesaur does not offer passwords or local browser-only accounts.
How information is used
Account information provides login and keeps each library private. Story text, voice, drawings, and generated media are processed to create and play the books requested by the account holder.
To make a book, we send the text, voice, or images needed for that step to generation vendors such as OpenAI or Google. They receive only what that step needs.
Usage statistics
When usage statistics are on, Scribblesaur collects privacy-minimised statistics about screens, feature use, sign-up, story generation, and reading so we can understand whether the service works as intended. These statistics use a durable anonymous analytics identifier in a first-party cookie and, after sign-in, an opaque account analytics identifier that is not your Google account ID. They do not include names, email, story identifiers, story ideas, drawings, book text, media, full URLs, or referrers. We do not use session replay.
Usage statistics start off unless you are in the United States, where they start on. You can change your choice below or in Settings. Scribblesaur also respects the Global Privacy Control browser signal. Turning them off does not disable content-free operational records needed to measure generation reliability and provider costs.
We also keep daily totals of signups, books read, distinct books read, and story creation successes and failures for everyone. These totals contain no account or visitor identity. Temporary read and book keys are removed after the day closes, and only daily totals are copied to PostHog. These counts continue when optional usage statistics are off or Global Privacy Control is enabled.
Advertising cookies
When advertising cookies are on, Scribblesaur uses Meta's Pixel to send page visits, completed account registration, and confirmed subscription events to Meta. Meta's browser Pixel also receives the page URL, referrer, IP address, and browser or device information as part of its normal operation.
Our server sends those same two conversion events — completing registration and subscribing — to Meta as well, so ad measurement still works when a browser blocks the Pixel. Each pair is matched by a shared event identifier and counted once. With them we send a scrambled (one-way hashed) form of your email address that Meta cannot read back, an advertising identifier that means nothing outside Meta, Meta's own advertising cookies, your IP address, your browser's user-agent, the page address without its query, and for a subscription the plan price and name. We do not send your name, your stories, your Google or account identifiers, or your card details.
You can change this choice below. Turning advertising cookies off deletes what we stored for Meta advertising and anything not yet sent, though it cannot recall what was already sent. A Global Privacy Control signal keeps Meta advertising measurement off. Outside the United States, usage statistics and advertising both stay off until you allow them. Reject all and Allow all are offered together, and you can choose each one separately below. In the United States both start on and we do not ask; you can turn either off below, and your choice replaces that starting point. We tell where you are from your device's time zone, not your IP address, and ask whenever we cannot tell.
Subscription payments
If you subscribe, we send your account name, email address, and account identifier to Stripe to handle checkout and billing. You enter payment details on Stripe's hosted pages. Scribblesaur stores your Stripe customer and subscription identifiers, plan, billing dates, and subscription status to provide your story allowance. We do not store your card details.
Support messages
When you use Help & feedback, we email your reply address, topic, subject, message, and any screenshot you choose to our support team through Google Workspace Gmail. Signed-in users use their Google account email; guests provide an email address. We do not automatically attach your stories or other page content. Support operators delete resolved conversations and attachments after 90 days, subject to applicable retention holds. Scribblesaur keeps only short-lived delivery and abuse-control metadata, not a separate copy of your message or screenshot.
Sharing and access
Stories and their media are available only to their signed-in owner unless the owner shares one. Scribblesaur does not sell personal information.
Shared story links
When you share a finished story, Scribblesaur makes a link that anyone who has it can open without an account. It shows the book's title, cover, pages, words, and narration. It never shows your idea, your drawings, your name, or your other stories. Shared pages are kept out of search engines.
Shared pages use the same cookies, usage statistics, and Meta advertising measurement as the rest of the site, under the same choices described above. We also count how often a shared link is opened, read to the end, and used to start an account, without cookies and without identifying the reader.
To stop sharing, choose Stop sharing on the book in your library, or on the shared page while signed in. The link stops working straight away, though someone who already opened it may keep a copy of its pictures and sound in their browser for up to an hour. Sharing again makes a new link, and deleting the story removes its links too.
Choices
Account holders can delete individual published stories from their library, stop sharing any of them, and sign out at any time. We keep each story until you delete it. You can also turn usage statistics on or off in Settings.
If you want to delete your account, or have any other concerns, just reach out to info@scribblesaur.com and we'll solve it.