隐私政策

Scrold is a community-built catalog and tracker for webtoons. This Privacy Policy explains what personal information we collect, why we collect it, how it is used and shared, and the choices and rights you have. By using the service you agree to the practices described here.

We aim to collect as little personal information as possible: you can browse the catalog without an account, and an account requires only an email address.

Account information. When you create an account we collect your email address and a securely hashed password. Authentication is handled by Supabase; we never store your password in plain text.

Content you create. When signed in, you can create ratings, reviews, playlists, library entries, follows, title suggestions, and translation requests. This content — and the fact that your account created it — is stored so the service can display it. Reviews, playlist titles, and similar text are stored as you write them and are not translated.

Preferences. Your chosen language and light/dark theme are stored in your browser (local storage) so the site remembers them. These do not identify you.

Technical information. Our hosting and database providers automatically process limited technical data needed to run and secure the service, such as IP address and request logs. We do not use this to build advertising profiles.

To provide the service: authenticate you, save and display your ratings, reviews, playlists, and library, and operate community features such as suggestions and translation requests.

To keep the service secure and working: prevent abuse, debug problems, and maintain the catalog.

To communicate with you about your account or important changes to the service, where necessary.

We do not sell your personal information, and we do not use it for third-party advertising.

Service providers. We use Supabase (database, authentication, and storage) and Vercel (application hosting). They process data on our behalf to run the service and are bound by their own terms and security obligations.

Public content. Content you post — such as reviews, ratings, and public playlists, together with your chosen username — is visible to others by design. Do not include information in this content that you want to keep private.

Legal reasons. We may disclose information if required by law, or to protect the rights, safety, or property of our users, the public, or the service.

We use a small number of strictly necessary cookies and browser local storage: an authentication session cookie to keep you signed in, and local storage for your language and theme preferences. We do not use advertising or cross-site tracking cookies.

We keep your account information and the content you create for as long as your account exists. If you delete your account, we delete or anonymize the associated personal information, except where we must retain it to comply with a legal obligation or to resolve disputes.

You can access, correct, export, or delete your personal information, and you can object to or restrict certain processing. To exercise these rights, contact us using the details below, or use the in-app controls where available.

Korea (PIPA). If you are a user in the Republic of Korea, the Personal Information Protection Act gives you rights to access, correct, delete, and suspend the processing of your personal information, and to withdraw consent. You may also lodge a complaint with the Personal Information Protection Commission (PIPC).

European Economic Area / United Kingdom (GDPR). Where the GDPR applies, our legal bases for processing are: performing our contract with you (operating your account and features you use), our legitimate interests (securing and improving the service), your consent (where requested), and compliance with legal obligations. You have the right to lodge a complaint with your local data protection authority.

Our service providers may process and store data in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

The service is not directed to children under the age required by your local law to consent to online services without parental permission, and we do not knowingly collect their personal information. If you believe a child has provided us with personal information, contact us and we will delete it.

We rely on reputable providers and standard safeguards to protect your information, including encrypted transport and hashed passwords. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. When we do, we will revise the "last updated" date above, and for material changes we will provide a more prominent notice where appropriate.

For privacy questions or to exercise your rights, contact us at the email address shown on this page.