Privacy Notice

Last updated: August 2026

Scribble Semester is operated by Jack Ledoux, who is the data controller for the personal data described here. This notice explains what we collect, why, and what rights you have.

What we collect

Account data — your email address and login credentials (passwords are stored hashed by our authentication provider), or your Google account identifiers if you sign in with Google.
Your course content — the syllabus files you upload, class names and colors, and the tasks and dates generated from them.
Technical data — IP address, device and browser information, and basic usage or error logs.
Support messages — anything you send us when asking for help.

Why we use it, and our legal basis

To create and secure your account and provide the planner (performance of our contract with you). To prevent fraud and abuse and keep the Service reliable (legitimate interests). To fix bugs and improve the product (legitimate interests). To answer support requests (contract and legitimate interests). To send marketing email only if you ask for it (consent). To meet legal or tax obligations (legal obligation).

Who we share it with

Service providers — hosting, database, and authentication infrastructure that runs the app on our behalf.
Paddle.com — our Merchant of Record, for the sale of the subscription, subscription management, payments, tax compliance, and invoicing.
Professional advisers — legal or accounting advisers where needed.
Authorities — where required by law.

We do not sell your personal data.

International transfers

Our providers may process data in the United States and other countries. Where data leaves the UK or EEA we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

Retention

We keep your account and course data while your account is active, and delete or anonymise it within a reasonable period after you close your account or ask us to. Technical logs are kept for a short period; records we must keep for tax or legal reasons are retained for the required time.

Your rights

Depending on where you live, you may ask us to access, correct, delete, restrict, or port your data, object to processing based on legitimate interests, or withdraw consent. Contact us and we will respond within one month. If you are in the UK or EEA you may also complain to your local supervisory authority.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, and per-user database rules so only you can read your own plans. No system is perfectly secure, so please use a strong, unique password.

Cookies

We use essential cookies and local browser storage to keep you signed in and to remember your plan. We do not use advertising cookies. You can clear or block cookies in your browser settings, though signing in may then stop working.

Children

The Service is intended for students of legal age to hold an account. We do not knowingly collect data from children below that age.

Contact

Jack Ledoux — for privacy requests or questions, contact us through Paddle at paddle.net and your request will be routed to us.