Device storage, cookies & sync
Scribble does not use behavioural advertising, third-party analytics pixels or social tracking cookies. It uses device storage to deliver the offline-first app you request.
1. Storage technologies
| Technology | What it holds | Why / duration |
|---|---|---|
| IndexedDB or native SQLite/app storage | Notes, blocks, drawings, attachments, indexes and app records | Core offline service; until you delete data or uninstall/clear the app. |
| Local settings storage | Theme, onboarding, provider configuration without secret values, sync state and legal acceptance | Remember choices requested by you; until cleared. |
| Credential storage | AI keys, GitHub token, cloud OAuth tokens | Optional authenticated features; web browser storage or native secure storage until disconnected/cleared/revoked. |
| Cache Storage / service worker | App shell, scripts, styles, icons and local preview responses | Installability and offline use; replaced on app updates or cleared by you/browser. |
| Session/in-memory data | Streaming responses, temporary recordings and unsaved UI state | Complete an active task; discarded when the task/page closes, except content you save. |
2. Consent and necessity
These first-party stores are used to provide the local/offline service, remember user-requested settings, secure the application or maintain the current session. They are not used for cross-site tracking. Where the applicable storage law treats a technology as strictly necessary for the requested service, separate cookie consent is not required; we still explain it here. If Scribble later adds non-essential analytics or advertising storage, it must remain off until an appropriate opt-in is obtained.
3. Optional sync and publishing
Google Drive sync uses the application-specific data area selected through Google. OneDrive is shown only in a build with the required Microsoft application registration and then uses its configured app folder. GitHub sync/publishing writes to the owner/repository/branch you configure. Nothing syncs merely because you accepted the Terms: you must connect a service and start the action. Provider logs, versions, recycle bins and retention are controlled by that service.
4. Control and deletion
Use Settings → Your data to export or erase Scribble records and Settings provider controls to disconnect optional services. Browser users can also clear site data; installed-app users can clear application storage or uninstall. Revoke Google/Microsoft/GitHub/provider access in the relevant account if a device is lost. Clearing Scribble does not remove remote files or revoke every token automatically unless the provider confirms revocation.