Privacy Policy
scrapcode.network is a personal side project run by one person. It is not a company, it sells nothing, and it has no advertising, no analytics and no tracking of any kind. This page describes everything it stores about you and how to get rid of it.
Who runs this
scrapcode.network and its apps are operated by an individual. Contact: tjmatteo@gmail.com.
What is collected
The landing page at scrapcode.network collects nothing. It has no cookies, no scripts and no third-party embeds.
The apps hosted here require you to sign in with Google, and only store what they need to work:
From your Google account
When you sign in, Google gives the app the following, and only this —
the requested scopes are openid, email and
profile, which do not include your contacts, your Drive,
your calendar or anything else:
- your Google account identifier
- your email address, and whether Google considers it verified
- your display name
- the URL of your Google profile picture
Your Google password is never seen by this site. Sign-in happens on Google's own pages.
From using the app
- maps you create: the image you upload, its name and dimensions
- your edits to a map, stored as an append-only history — each entry records what changed, who changed it and when
- your chosen cursor colour
- which maps you can open, who invited you, and any invite links you create
- a session record so you stay signed in, and the time you were last seen
Server logs
The server keeps short-lived operational logs of the requests it receives, which can include IP addresses, in order to debug problems and notice abuse. They are not used to build a profile of you and are not shared.
Cookies
One cookie, and it exists only to keep you signed in. It holds a random session identifier — nothing about you is encoded in it. It is scoped to the single app you signed in to, so it is never sent to another site or another app on this domain. There are no advertising or analytics cookies.
Who it is shared with
Your data is never sold, rented or traded.
Three parties are unavoidably involved in running the site:
- Google, because sign-in happens there. Google knows you signed in to this app; see Google's Privacy Policy.
- DigitalOcean, which hosts the single server the site runs on, in the United States.
- Other people on a map with you. If you are a member of a map, the others on it can see your display name, your profile picture, your colour, your cursor while you are looking at it, and the edits you make. That is the point of a shared map, but it is worth stating plainly.
How long it is kept
Your account and your maps are kept until you ask for them to be deleted. Sessions expire on their own. Server logs are rotated by the operating system within a few weeks.
Your choices
- Get a copy, or get it deleted. Email the address above and it will be done by hand — this is a small site, so there is a person reading it rather than a form. Deleting your account removes your profile, your sessions and your map memberships.
- A caveat about shared history, stated up front. A map's edit history is append-only and other members depend on it, so entries you made are not erased from a map you shared with others; they are disconnected from your account instead. If you need a map itself deleted and you own it, say so and it will be deleted outright.
- Revoke access at any time from your Google account permissions, which stops future sign-ins immediately.
Security, honestly
Traffic is encrypted over HTTPS, sign-in is handled by Google, and sessions are stored on the server rather than in a cookie you could tamper with. It is still one small server run by one person as a hobby: it is not audited, and it carries no guarantee. Please do not put anything on it you could not stand to lose or to have exposed.
Children
This site is not intended for children under 13, and no account is knowingly created for one.
Changes
If this policy changes, the date at the top changes with it. If a change materially affects what is collected, notice will go to the email address on your account.