Privacy Policy for ScrollBoy website

1. Who we are

This is what ScrollBoy knows about you, why, and what you can do about it. ScrollBoy is run by ScriptWeavers (www.scriptweavers.com), which is the controller of the data described here. You reach us through the contact form at www.scrollboy.com/contact/. The rules for using the site are the Terms and Conditions; by creating an account you agree to them and to this policy.

2. What we collect, and why

Without an account, nothing that identifies you is kept. The site counts lookups and visits in totals: how many came, which site sent them and how long they stayed, from your browser's report, never who you are. To count a visit once, the site keeps for the day a scrambled form of your connection that cannot be turned back into you and means nothing the next day. Your lists, your saved posts and your settings live in your own browser and leave it only if you create an account and sign in, which copies them to the account so you find them on another device.

With an account, we keep your email address, your password as a one-way hash that cannot be turned back into the password, the address and country you signed up from and the times you signed in, and whatever you save on the account: subreddits, posts, users and categories. This is what the account is for (the agreement between us), and the sign-up address is kept to spot abuse (our legitimate interest).

The contact form keeps your name, your address, your message and the address it came from, until the matter is handled.

Email: your address is used for the account's own mail, and for news from ScrollBoy and the occasional sponsor message as described in section 8 of the terms, which you agreed to when you created the account and can stop at any time with the unsubscribe link in any such mail. A news mail carries a one-pixel picture that lets ScrollBoy count how many opened it; that your account did is kept with that mail's figures and used for nothing else. Whether you receive the news is kept on your account.

Server logs at our hosting provider record the address, the page asked for and the time of every request, as every web server does, and are kept for a short while for security.

We never ask for and never hold payment details: there is nothing to pay for on ScrollBoy.

3. Cookies and local storage

ScrollBoy sets a session cookie when you sign in, so the site knows it is you until you sign out or the session runs out, and a cookie that remembers your switches on the subreddit list for a year. Everything else the site remembers for you, such as your lists, your saved posts, your layout and your settings, is kept in your browser's local storage, on your device alone. There are no advertising cookies and no third-party tracking on ScrollBoy. You can clear the cookies and the local storage in your browser at any time; the site then starts over for you.

4. Where it is processed, and who sees it

ScrollBoy is hosted on servers in the United States, so the data above is stored and processed there, whatever country you use the site from. If you are in the EU, the EEA, the United Kingdom or Switzerland, this is a transfer of your data abroad, which you accept by creating an account. Pictures and videos are loaded by your browser straight from Reddit's picture hosts, and the archives of Reddit that the site reads see the request your browser or our server makes; they do not learn your account. We do not sell data and do not hand your address to sponsors or to anyone else. The companies that host the site and deliver its email process data on our behalf and under our instructions, and only as far as that takes. We hand data to anyone else only where the law obliges us to.

5. Security

The site is served over HTTPS, so what passes between your browser and ScrollBoy is encrypted. Passwords are stored only as one-way hashes. The databases live outside the web root and are reachable only by the site itself and its operator, and the admin area is protected by a password and limited sign-in attempts. No measure is perfect; if we learn of a breach that puts your data at risk, we tell the people it concerns and, where the law requires it, the authorities.

6. How long

An unconfirmed sign-up is deleted after 24 hours. An account and what is kept on it stay until you delete the account, which removes all of it at once, or until we close it as described in the terms. Contact messages are kept until handled and then deleted. The visit totals hold no personal data and are kept. Server logs and backups of the site are kept for a short while and then overwritten.

7. Your rights

Under the data protection law of the EU and EEA, and similar laws elsewhere, you can:

• see what we hold about you (your account page shows it), and get a copy of it in a usable form;
• correct what is wrong, such as a changed email address;
• have it deleted, by deleting your account from the account page or by asking us;
• object to a use of your data, or ask us to limit it while a question is sorted out;
• withdraw your choice to receive news at any time, with the unsubscribe link in any such mail, without it affecting the account itself.

To use any of these, write to us through the contact form. We answer within 30 days. If you think we handle your data wrongly, you can complain to your data protection authority; in Norway that is Datatilsynet. Ask us first and we will sort it out.

8. Children

ScrollBoy is not for children. You must be at least 18 to use it and to create an account. We do not knowingly keep data about anyone younger; if you believe we do, tell us and it will be deleted.

9. Changes and contact

Changes to this policy are posted here with their date; for a change that matters to you we try to say so on the site or by email. For any question about your data, write to us through the contact form at www.scrollboy.com/contact/.

This privacy policy was last updated on 19 October 2026.