Scribble Works
Browse

Privacy

plain language, no fine print

Effective 2026-09-04

Scribble Works is run by Ray Data LLC (Ray Data Co). This page says what we collect, what we don’t, and what happens to anything you type. If something here isn’t clear, write to hello@scribbleworks.co and we’ll fix the wording.

The short version

  • An account is optional. Browsing and printing never need one. You need one to have the AI customize a game for your kid, and you need one for your playset to follow you between devices.
  • You can sign in with an emailed link. Where Google sign-in is offered, you can use your Google account instead. We do not collect your Google password.
  • Every game on the shelf prints free, signed in or not.
  • No advertising trackers and no third-party analytics on this site.
  • A cookie keeps you signed in. Google sign-in also uses a temporary security cookie to protect the login attempt.
  • Your playset lives in your own browser. It syncs to our server only if you sign in.
  • Two things you type go to an AI company: the note you give the playset planner, and the sentence you type to customize a game. Both are scrubbed, then sent to an outside AI company, Anthropic, which reads them to pick your games or write the page. When a customized game gets a new picture, a second company, xAI, draws it from a short scene description — not from your sentence. Neither company trains its models on what we send, and in the normal course each deletes it within 30 days. The details are below.
  • The name you type in the name box never reaches an AI model: our code strips it out before the sentence is sent and writes it onto the page afterward. If you save that finished page in your playset, the saved page includes the printed name. We never send a birthday, last name, or photo to an AI either. A name typed inside your sentence is not detected, so leave names out of the sentence.

What we count

When you print a game or build a playset, the page sends us one number: a tally. We keep running totals — how many games were printed in all, and how many times each game was printed. That’s the whole record. No cookie, no IP address, no browser string, no timestamp, nothing that points back at you. It is how we know which games are worth making more of.

Your playset

The playset you’re building — which games are in the tray, in what order — is stored in your browser’s own storage on your own device.

Signed out, that is the only copy. We never receive it. Clear your browser data and it’s gone; we have no copy to delete for you.

Signed in, a copy is kept on our server against your account so the same tray is there on your phone and on the laptop. It holds the same thing the browser copy holds: which games are in the tray, their order, the name you gave the set, and any pages you customized. Signing out stops the syncing; deleting your account deletes the stored copy.

Accounts

An account is one adult and one email address. It is not required to use the site — it is required to have the AI customize a game, because a generated page costs us real money and an account is how we keep that from being abused.

  • What we store. Your email address, household membership, when you verified and last signed in, your playset, and any child information a grown-up adds in the Kids section. For Google sign-in, we also keep the stable account identifier Google supplies. The child fields are described below.
  • Email sign-in. You ask for a link, we email it, it works once and expires in fifteen minutes. The email goes out through Resend, a mail-delivery service, which handles your address and the link.
  • The sign-in cookie. Signing in sets a secure cookie that keeps you signed in for up to 30 days. Signing out revokes that session. A temporary cookie also protects a Google sign-in attempt and is cleared when the attempt finishes or expires.
  • Protected credentials. Emailed link tokens are stored as one-way hashes. Session credentials are protected by a server-held secret, so database records alone cannot sign someone in as you. If you use Google, we request only your account identifier and verified email, not Gmail or Drive access. We do not retain Google access tokens, refresh tokens, or profile photos.
  • What a grown-up can add about a child. In the account’s Kids section, a grown-up can add a child’s first name or nickname, birth date, interests and language, plus optional skill observations. We use that information to size the games and personalize what is printed and emailed. It is visible only inside that household, and a household lead can edit or remove it at any time. We never send it to the AI model when a game is customized. It never includes a photo, and we never use it to generate an image of a real child.
  • Learning history. We keep the games recommended for a saved child and their reasons, dated skill observations, and optional parent check-ins about play, challenge, enjoyment and help. These records are visible within the household and are removed when the child profile is removed. Corrections keep the original entry in that history. Check-ins do not automatically establish mastery.
  • Saved daily playsets. We keep the original PDFs from daily deliveries in private storage so your household can download them again from playset history. Email download links expire after seven days; the saved files remain available when delivery is paused or your plan changes. Removing a child’s profile or requesting account deletion ends access immediately. A background cleanup removes the PDFs and their child details from saved delivery records.
  • Deleting it. Write to hello@scribbleworks.co and we delete the account, the stored playset and the sign-in records. There is no self-serve delete button yet; we do it by hand, and we say so rather than pretending.

When you customize a game

Customizing and the planner are the two places where what you type goes to an AI company. Here is exactly what happens when you customize; the planner is the same story, shorter, at the end of this list.

  • Your sentence. Before it goes anywhere, our code strips anything shaped like an email address, a web address, an @handle, a street address, or a run of seven or more digits. The stripped sentence, plus the language you picked, is what the AI model sees.
  • Your kid’s name. The name comes to our server so we can print it on the page, and it stops there: we strip it out before the sentence goes to the AI model, we do not add that name-box value to a child profile, and our own code writes it onto the page only after the AI is done. A saved customized page can contain the printed name, as described under Your playset. Being straight with you about the limit: that stripping only covers the name box. If you type a name inside your sentence — “Mae is 4 and loves horses” — our code does not spot it, so that name goes to the model with the rest of the sentence and is kept with the row below for 90 days. Write “she” or “my daughter” in the sentence and put the name in the name box, where it is handled properly.
  • Who sees it. Your scrubbed sentence goes to Anthropic, whose Claude model writes the words. That is a hand-off to an outside company, and we would rather say so than talk around it. If your ask changes the picture, Claude also writes a short description of the new scene — “a friendly stegosaurus, a volcano behind it” — and that description, not your sentence, goes to xAI, whose Grok model draws it. (If Grok is down, a picture model hosted by Cloudflare can draw it instead.) Claude then checks the picture before it reaches you. All of this runs through the relay we use to reach them (Cloudflare’s AI Gateway), and on these requests we tell the relay not to keep a log.
  • What those companies do with it. Under the terms we use them on, Anthropic and xAI do not train their models on what we send, and in the normal course each deletes it within 30 days. Cloudflare says the same about training. We check those terms, and if they change, this page changes.
  • The planner. The note you type into the playset planner on the home page is scrubbed too (email addresses and phone numbers come out; nothing else is checked) and goes to Anthropic so Ray can pick your games. We don’t store it ourselves, and we tell the relay we use to reach them not to keep a log of the request. In Learning together, you can choose to use that picker with an eligible game list selected from saved capabilities. Anthropic receives the brief and eligible game descriptions, not the saved observations, check-in notes, profile name or birthday. We retain the resulting game recommendations and reasons in household learning history, but not your brief.

What we keep from a customized game

We keep what the models make: the words and numbers that landed on the page, the settings used to make them, and the id of any generated picture, together with the stripped sentence that produced them. We read this to see what is working. A nightly pass sends each stripped row to Claude once, to sort asks about a theme (dinosaurs, Spanish, a harder maze) from asks about one particular child; the ones about one child are marked and go no further. A theme that keeps producing good pages may become a ready-made game on the shelf, always as a theme, never with anyone’s name attached. Individual rows are deleted after 90 days.

Generated pictures are held for seven days so the page you just made keeps working, then the link stops resolving.

Fair use of the customizer

So one visitor can’t run the bill up for everyone, we count how many customized games come from a connection. To do that we take your IP address, mix it with a secret and the day’s date, and hash it — the result is a meaningless string of characters that expires the next day. Your actual IP address is never written down.

Separately, each stored customization row carries a salted hash of your connection so we can tell how many different households a pattern came from. That one does not rotate daily: it stays with the row for the same 90 days the row does. It cannot be reversed without our secret, and it is never joined to your email address or your account.

When you send us feedback

You can write to us about a game by email or by text. That message arrives at a small service of ours, and here is what it keeps.

  • The message and any photos. We keep what you wrote and any picture you attach. Testers often send a photo of the finished sheet, which means it may show a child’s handwriting or drawing — send it only if you are comfortable with that, and crop out anything you would rather we did not have.
  • How to reply to you. Your email address or phone number is stored on its own, keyed to a hash, for one purpose: answering you. The feedback itself carries only the hash, so the message and the person are held apart.
  • How long. 180 days, then the row is due for deletion. Ask us sooner and we delete it — message, photos and reply address — by hand.
  • Today, nothing is screened. Until feedback is tied to a verified account, anything sent to us is simply stored as it arrives. Don’t send anything you would not want kept.

Hosting and fonts

The site is hosted on Cloudflare, which keeps its own standard server logs the way every web host does. Typefaces are loaded from Google Fonts, so your browser fetches those files from Google. We add nothing on top: no analytics product and no ad pixel. Our sign-in and temporary security cookies are described under Accounts. Cloudflare’s Turnstile check on the sign-in form is a bot check, not a tracker; it does not follow you around the web.

Children

Scribble Works is made for parents, guardians and teachers — the grown-up doing the printing. The account and sign-in belong to a grown-up: a child never creates an account, signs in, or interacts with the site’s data-collection surfaces themselves. A grown-up may add the basic information about a child described above. We do not knowingly collect personal information directly from a child, because there is no path for a child to submit anything to us directly. If you believe a child sent us something, write to hello@scribbleworks.co and we’ll delete it.

Changes

If what we do changes, this page changes with it and the effective date at the top moves. Anything that would meaningfully widen what we collect gets said plainly on the site, not slipped in here.

Contact

Ray Data LLC — hello@scribbleworks.co. See also our Terms and the FAQ.

Hi, it’s Ray — the honest summary is that if you never sign in, we know how many pages got printed and nothing about who printed them. If you do sign in, we know your email address, what’s in your tray, and any child information a grown-up added in the Kids section. If you customize a page, we also keep the scrubbed sentence behind it for 90 days, never tied to your email, and Anthropic, which makes the page, holds it for up to 30 days. That’s the whole list, on purpose.