Privacy Policy

Waitlist. If you join the waitlist we store your email address, the platforms you selected, the referral code in the link you used (for example ?ref=ig) and the time you signed up.

Website events. When you use the install page we record anonymous events such as which assistant tab you opened and whether you copied the MCP link, together with the page path, the referring page and a one-way hash of your IP address. The hash cannot be reversed into your IP.

MCP server events. When an AI assistant connects to our MCP server it announces its name and version (for example "claude-ai 1.0"). We record that, the tool that was called and a one-way hash of the connecting IP. We do not receive or store your prompts, your conversation, or the content your assistant creates.

Server logs. Our hosting provider (Vercel) keeps standard request logs, including IP addresses, for a short period to run and secure the service.

We do not use advertising trackers, third-party analytics scripts or cookies for tracking.

• to email you once when Scrollsmith launches (waitlist);
• to understand how many people connect the MCP server and from which assistants, so we can prioritise what to build;
• to rate-limit abuse and keep the service running.

Where the law requires a legal basis, we rely on your consent (waitlist) and our legitimate interest in operating and improving a free service (anonymous usage counts and security).

Only service providers that store or process data on our behalf:

• Supabase — database that holds the waitlist and event tables.
• Vercel — hosts the website and MCP server.

We do not sell personal data and we do not share it with advertisers. We may disclose data if required by law.

Claude, ChatGPT, Gemini, Cursor and any other assistant you connect are separate services with their own privacy policies. What you type to them, and anything they generate, stays between you and that provider; it never passes through Scrollsmith.

Waitlist emails are kept until you ask us to remove them or until we close the waitlist and have sent the launch email. Event rows are kept for up to 24 months, then deleted or aggregated.

You can ask us to show, correct or delete the data we hold about you, or to remove you from the waitlist, at any time by emailing hello@scroll-smith.com. Residents of the EU/UK, California and other regions may have additional rights under local law; we will honour them.

The Service is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has given us data, email us and we will delete it.

Data is stored with access-controlled providers over encrypted connections. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as required by law.

We will post any changes here and update the date at the top. Material changes to how we use waitlist emails will be announced by email.

Scrollsmith AI · hello@scroll-smith.com