Privacy Policy

Last updated: May 16, 2026

ScrollJail is built to fight manipulation, not practice it. This policy explains what data we collect, why, and what we do with it.

What we collect

When you set up ScrollJail:

• Email address - to verify your account.
• First name - so the AI can address you personally.

Each time the Shortcut runs:

• App name - which app triggered the Shortcut.
• Your reason - what you typed when asked why you're opening the app.
• Device time - the timestamp from your device.
• AI decision and response - the decision (allow/deny/challenge), message, and timing metadata.

Additionally, our infrastructure collects:

• IP address - used for rate limiting to prevent abuse. Cloudflare processes your IP as part of routing requests. We do not store IP addresses in our database, but Cloudflare may retain them in server logs subject to Cloudflare's privacy policy.

How we use your data

• Email - account verification, essential service emails, and occasional product updates (new features, important changes). We don't sell your email or send marketing. You can opt out of product updates at any time.
• Attempt data (app, reason, decision) - to power the AI's context-aware responses. The AI uses your recent attempts to adjust its behavior (e.g., getting stricter if you keep coming back).
• IP address - rate limiting only. Not linked to your account or attempt data.

Third-party services

ScrollJail relies on the following services to function:

• Cloudflare - hosts the backend. Processes your IP address and request metadata. See their privacy policy.
• Neon - database hosting. Stores your account and attempt data. See their privacy policy.
• Anthropic, Google (Gemini), OpenAI - AI processing. Your reason may be sent to one of these providers' APIs to generate a response, depending on which model is active. See their respective privacy policies: Anthropic, Google, OpenAI.
• Resend - sends emails. Receives your email address for delivery. See their privacy policy.

What we don't do

• We don't sell or share your personal data with advertisers
• We don't use cookies or cross-site tracking
• We don't access your contacts, photos, or browsing history
• We don't collect data from apps you haven't blocked

Analytics

We use Cloudflare Web Analytics to understand how people use this website (page views, referrers, device types). It does not use cookies, does not track you across sites, and does not collect personal data. See Cloudflare Web Analytics.

Data retention

Your account and attempt history are retained as long as you use ScrollJail. If you want your data deleted, email privacy@scrolljail.com and we'll wipe everything within 7 days.

Your rights

You can request a copy of all data we hold about you, ask us to correct it, or ask us to delete it entirely. Email privacy@scrolljail.com.

Children

We do not knowingly collect data from anyone under 16.

Changes

If we change this policy, we'll update the date at the top. For significant changes, we'll notify you by email.

Contact

Questions? Email privacy@scrolljail.com.