Privacy Policy

1. Introduction

This Privacy Policy describes how information is handled in the mobile application “SCP Docs” (the “App”). Please read this Policy before using the App. If you do not agree with it, please do not use the App.

2. Operator and contact

For privacy-related inquiries about the App, contact:
scpdocs_admin@proton.me
X: @SCPdocs

3. Overview of information we handle

The App retains on-device state so you can browse, organize, resume, and review articles. It also performs network communications where needed for catalogs, source pages, purchases, ads, and app links. You are not required to create an account to use the App.

4. Information stored on your device

The App may store article URLs or normalized keys, browsing history, read status, ratings, favorites, bookmarks, read-later entries, bookmark folders, scroll progress, cached titles or thumbnails, memos, saved search conditions, saved-search match state, reading-session records, reading-stat inputs, offline article HTML snapshots, subscription state, and rewarded-ad premium expiry. This data supports history, resume reading, library views, advanced search, memos, saved searches, reading stats, offline reading, and Premium status.

5. iCloud Drive sync

If you are signed in to iCloud Drive and the feature is available, reading state, memos, saved searches, and bookmark folders may sync through your own iCloud storage. The App operator does not operate a separate server to collect these reading records or memos.

6. Network activity and notifications

Network activity occurs when the App downloads catalog, tag, and list data, displays article bodies from Wikidot or other external sites, checks App Store subscription status, opens external links, or loads Google AdMob ads. Saved-search notifications are generated on device after catalog data is checked; notification delivery depends on iOS notification permission.

7. Advertising (Google AdMob)

The App uses the Google Mobile Ads SDK (AdMob), provided by Google LLC, and may display banner, inline, native, interstitial, rewarded, and similar ads. In the course of delivering ads, identifiers and device or impression information may be transmitted to Google and advertising partners for delivery, measurement, fraud prevention, and related purposes. See Google’s Privacy Policy and Ads & privacy. Depending on iOS settings and your choices, personalization may be limited.

8. Third-party sites

Much of what you access through the App is hosted on websites operated by third parties. Their logging, cookies, analytics scripts, site rules, and privacy policies apply. We do not control how third-party sites handle information.

8a. Optional external integrations and sharing

You choose which article information, memos, and highlights to send and confirm each export. Depending on the method, the App hands the selection to another app, copies it, saves a file, or sends it to your registered destination, such as Notion, OneNote, Obsidian, or Discord. NotebookLM uses a manual sharing, copy, or file workflow rather than a direct synchronization API. Connecting or registering a destination alone does not export your reading records. The receiving service's terms, privacy policy, and retention rules apply to exported information.

Notion authentication uses an App-operator-managed HTTPS relay on Cloudflare Workers. The relay exchanges authorization codes and refreshes tokens; it does not receive article bodies, memos, or highlights and does not create or append Notion pages. The App calls the provider's APIs directly for destination discovery, verification, and exports. OneNote uses Microsoft's authorization flow with PKCE.

The Notion relay temporarily stores the complete OAuth token response. In addition to access and refresh tokens, this response includes workspace and connection identifiers and may include the authorizing user's identifier, name, email address, or other account metadata supplied by Notion. These fields are handled to complete authentication, not to contact users, advertise, or track them. Authentication attempts expire after three minutes; exchanged responses are held in a one-time ticket for up to 90 seconds and deleted from live storage after a successful claim or expiry. Refresh requests and responses are not persisted by the relay. The relay code does not log request bodies, codes, proofs, tickets, token responses, or secrets.

Deletion from live storage is not immediate erasure from every recovery layer. Cloudflare's SQLite-backed Durable Objects provide point-in-time recovery of prior database states for up to 30 days, including stored authentication responses. Cloudflare's own infrastructure data handling also applies; see Cloudflare's Privacy Policy and SQLite recovery documentation.

Notion and OneNote credentials and Discord webhook secrets are stored in the device's Keychain. Disconnecting Notion or OneNote in the App removes that service's locally stored credentials; it does not delete previously exported information or revoke the provider-side authorization. Manage or delete saved information and revoke access through the receiving service as needed. Connection settings and local export results support your selected workflow; no automatic background synchronization is performed merely by connecting.

9. Disclosure to third parties and legal requests

In addition to disclosures described above, such as advertising, payments, content delivery infrastructure, and diagnostics offered by OS or App Store mechanisms, we may disclose information where required by law or in response to lawful requests by courts or public authorities.

10. Security

We endeavor to implement reasonable safeguards for the environments in which the App is built and distributed. However, security cannot be guaranteed absolutely on the Internet or mobile devices.

11. Retention

Data stored on device or in your iCloud Drive may persist until you uninstall the App, delete data using in-app controls, remove related iCloud files, or reset the device or OS, as applicable.

12. Children

The App is intended for general readers. If you allow a minor to use the App, please do so with appropriate parental supervision.

13. Changes to this Policy

We may change this Policy to reflect legal requirements, App changes, or business needs. Updates will be posted on this page and, where appropriate, surfaced in the App.

14. Questions

Questions about this Policy: scpdocs_admin@proton.me or X: @SCPdocs.

Website analytics (Google Analytics)

This website loads Google Analytics 4, provided by Google LLC, only after you choose “Allow analytics.” It measures page views, approximate country or region, device and browser category, referral source, and interactions such as search, theme selection, article links, opening SCP Docs, and App Store links. Search terms are length-limited, and text resembling an email address, URL, or phone number is not sent. Search parameters are removed from recorded page URLs. Google may receive cookies, online identifiers, and device or usage information. SCP Docs does not send app reading history, Library contents, folders, markers, or memos to website analytics. You can decline analytics or change your choice from the footer. The analytics choice is stored in your browser; if allowed, the analytics cookie is configured to expire within one year. See Google’s Privacy Policy and Google Analytics data safeguards.