Privacy Policy

Version 2026-09-25. Effective date: 24 September 2026. ScrollLit operates the scrolllit.com reading and study service. This policy applies to our website, account and checkout flows.

This policy explains how ScrollLit collects, uses, stores, protects, retains and discloses personal information when you visit scrolllit.com, create an account, use the service or buy a book. We give existing users email and in-app notice before a material privacy-policy change takes effect. Some changes may require a separate, explicit consent; simply acknowledging a notice is not consent.

We collect the name or display name and email address associated with your account. If you use Google Sign in, the email must be verified by Google before we create or match your ScrollLit account. We also keep information needed to provide the service: book-access and purchase records, referral and trial records, and reader activity such as saves or reactions. ScrollLit does not currently collect student submissions, comments or classwork through the consumer service.

We collect limited technical information automatically, including security and session information, IP-address-related logs, browser and device information, and the pages or features requested. We use this information to keep the service secure, prevent misuse and diagnose faults.

We use personal information to create and secure accounts, provide and personalise book access, process purchases, respond to support requests, administer trials and referrals, improve ScrollLit, prevent fraud or abuse, and comply with legal obligations. We do not sell personal information or use it to target advertising.

If you choose Sign in with Google, ScrollLit requests only the basic OpenID Connect scopes: openid, email and profile. During that sign-in, Google may provide an identity token containing an account identifier, verified email address and basic profile claims. ScrollLit uses only the verified email address to create or match your ScrollLit account. ScrollLit does not request or access Gmail, Google Drive, Google Calendar, contacts, photos, files, or any other Google content.

ScrollLit uses the verified Google email address only to create or match an account, sign you in securely, prevent account misuse, and support the reader who signed in. We do not use Google user data for advertising, marketing audiences, personalised ads, retargeting, sale, credit decisions, data brokerage, or to train artificial-intelligence or machine-learning models. Google user data is used only to provide and improve the account sign-in feature you request.

ScrollLit stores the verified email address with the relevant ScrollLit account while the account is active. We do not store Google access tokens, refresh tokens, Gmail data, or unused Google profile claims after the sign-in callback. The identity token is used transiently to verify the sign-in and is not retained as an account record.

ScrollLit does not sell, rent, license, transfer, or disclose Google user data to third parties for their own purposes. Our hosting, security and support providers may process the account email only as our service providers where necessary to operate and secure ScrollLit, subject to appropriate safeguards and instructions. We may disclose limited information if required by law or to protect ScrollLit, its readers or others from fraud, security threats or harm. Payments are processed by Stripe. For a checkout customer record, Stripe receives the account email, display name and internal user or organisation identifier; ScrollLit does not send Google identity tokens to Stripe and does not receive or store full card numbers.

ScrollLit uses HTTPS encryption in transit, access controls, secure account sessions, and technical and organisational safeguards designed to protect Google user data and other personal information from unauthorised access, loss, misuse or disclosure. No online service can guarantee absolute security, but we review and improve these safeguards as the service develops.

ScrollLit handles Google user data in accordance with the Google API Services User Data Policy, including the Limited Use requirements. Our use and transfer of Google user data are limited to the practices described in this policy and to providing or improving the user-facing ScrollLit feature that requested the data.

ScrollLit may use service-account access to its own Google Ads account and Google Search Console property to plan and measure ScrollLit marketing. Those business integrations access ScrollLit's advertiser or website-performance data, not a reader's Google Account, Gmail, Drive, Calendar, contacts, or other personal Google content. They do not add permissions to Google Sign in or give ScrollLit access to a sign-in user's Google Ads account.

If you accept analytics, ScrollLit uses Google Analytics to understand aggregate use of the service, such as book, chapter, audio, save, share and purchase activity. Analytics uses a pseudonymous browser identifier and event information. We do not send names, email addresses, account identifiers, student work, comments or search text to Google Analytics. You can reject or withdraw analytics in your Profile at any time.

We retain account, access and transaction records for as long as needed to provide ScrollLit, meet legal and accounting obligations, resolve disputes and enforce our agreements. We then delete or de-identify information where reasonably practicable. The verified Google email stored with a ScrollLit account is retained only while needed for that account or for a lawful record-retention purpose. Protected operational backups may retain data temporarily until routinely replaced and are not used to restore a deleted account.

In Profile, you can change your display name, request a verified email change, update privacy choices or delete your account. Deletion revokes sessions, removes personal profile settings, preferences, requests, saves and reactions, and de-identifies the account. Purchase, Stripe and limited anti-fraud records may be retained only where needed for accounting, disputes, fraud prevention or legal obligations. You may also ask to access, correct or delete personal information by emailing steven.quinn@scrolllit.com.

For privacy questions or requests, email steven.quinn@scrolllit.com. We will respond as soon as reasonably practicable. This policy is governed by Australian privacy law where applicable.