Privacy

What the extension sees

It reads one number: how far down the page you have scrolled. That number decides where the pet is and how fast its legs move. It is never sent anywhere and never written down.

It runs on every page you visit, because that is the whole idea. It does not read the page's text, its address, its title, or anything you type into it.

If the pet is set to react to music, the extension asks Chrome which tabs are currently making a sound. Chrome answers with tab numbers and nothing else — ScrollDog deliberately does not hold the permission that would let it see those tabs' addresses or titles, so it cannot know what you are listening to, only that something is playing.

It uses one Chrome permission, storage, to remember your settings: pet, edge, size, and which behaviours are switched on. Those live in your browser profile, and Chrome syncs them across your signed-in browsers the same way it syncs bookmarks.

The first time it runs, it generates a random identifier for that installation and keeps it alongside the settings. It identifies an installation, not a person: nothing about you, your browser, or your machine goes into it.

The only address the extension ever contacts is api.scroll.dog, and it asks one question: has this installation paid?

When you buy the other pets

The payment runs through Stripe. Stripe takes the card details and an email address for the receipt; ScrollDog never sees the card. What Stripe does with them is governed by Stripe's own privacy policy.

Afterwards the ScrollDog server keeps one record for your installation: the installation identifier, the email address Stripe reported, Stripe's session and payment identifiers, the date you paid, and — if it ever happens — the date the payment was refunded or reversed. That is the entire record. There is no account, no password, and no profile.

The unlock itself is a signed token your browser checks on its own. That is why the server can be unreachable for a week without locking you out, and why it never needs to hear from you again.

This website

No analytics, no tracking pixels, no advertising, and no third-party scripts of any kind. The fonts are served from this site rather than from a font provider, so reading this page tells nobody anything.

One cookie, sd_lang, remembering the language you chose so the site opens in it next time. Your light-or-dark preference is kept in your browser's local storage and never leaves it.

The site is hosted on Vercel, which keeps ordinary server logs of the requests it serves, as any web host does.

The support form

What you write on the support page is delivered to a private channel that only the maintainer reads. An email address, if you give one, is used to reply to you and for nothing else — leave it out and the message still arrives.

To keep bots from flooding it, the server looks at the network address a submission arrives from and counts how many have arrived from it recently. That address is not stored and is not passed on with your message.

Keeping and deleting

The payment record is kept for as long as the purchase stands, because it is the thing that proves it. Stripe keeps its own transaction records for as long as tax and accounting rules require, independently of ScrollDog.

Support messages stay in that private channel until they have been dealt with, and are deleted afterwards.

You can ask what is held about you, ask for it to be corrected, or ask for it to be deleted. Use the support form and choose “Privacy request”. Deleting a payment record also removes the proof of purchase it carries, so you will be asked to confirm that before it happens.

Who is responsible

ScrollDog. The support page is the way to reach us about anything on this page, data requests included.

Changes

If what ScrollDog does with data changes, this page changes in the same release, and the date at the top changes with it.