1. Who is responsible for your data
Innovate Web Development, 1614 Morning Dew Dr., Byron Center, MI 49315, United States, is responsible for the personal data described here. For questions, corrections or deletion requests, email support@innovatewebdevelopment.com.
This policy takes effect August 9, 2026 and covers this website, the licence servers, and the WordPress plugin.
2. The short version
We do not run analytics on this website. We never see your card details. The plugin does not track your website’s visitors and sends us nothing about them. The only personal data we hold is what is needed to issue your licence key, keep it working on the right number of sites, and email you about it.
3. This website
No analytics, no tracking cookies from us
We do not use Google Analytics or any other analytics or advertising tracker, and we set no cookies of our own. Our web host keeps standard server logs (IP address, page requested, timestamp, browser user agent) for security and troubleshooting, kept for a short period and not used to profile anyone.
Third parties the pages load
- Google Fonts — the site loads the Roboto and Dancing Script typefaces from Google's font servers, which means your browser's IP address is visible to Google when a page loads.
- Paddle — the checkout overlay is Paddle’s. It loads on our pages and may set its own cookies for checkout, fraud prevention and tax localisation, under Paddle’s privacy policy.
4. When you buy a licence
Paddle is our merchant of record. You give your payment details to Paddle, not to us. Card numbers, bank details and billing addresses are handled entirely by Paddle and never reach our servers.
What Paddle passes to us, and what we then store, is:
- your email address, so we can send you your licence key and reach you about it;
- Paddle’s reference IDs for your customer record, subscription, transaction and the price you bought;
- your licence key, its tier (single site or unlimited), its seat count and its current status.
We use this to issue your key, to know whether your licence is active, and to email you about your licence — key delivery, renewal problems, and material changes to the product or these policies. We do not send marketing email to buyers who have not asked for it, and we never sell or rent your data to anyone.
5. What the WordPress plugin sends us
When you activate your licence in the plugin’s settings, and periodically afterwards to re-check that the licence is still valid, the plugin makes a request to our licence server containing exactly two things:
- your licence key;
- a site identifier — your site’s domain and path, normalised.
We record that site identifier against your licence, with the time it was activated and the time it was last seen, so that a single-site licence is used on one site and so you can free the slot when a site moves. Deactivating the licence in the plugin removes that activation record.
The update check sends your site address and the installed plugin version, so the server can tell your site whether a newer release exists.
The plugin collects nothing about your visitors. No analytics, no scroll tracking, no fingerprinting, no third-party requests from the front end. The scroll effects run entirely in the browser, and the recipe files carry motion settings only — never your content.
6. Support email
If you email us, we keep the message and your email address so we can answer and refer back to it if you write again. Please do not send us passwords or admin logins by email; if we need access to diagnose something, we will agree a safer way with you first.
7. How long we keep things
- Licence records — for as long as the licence exists, and for up to two years afterwards, in case you come back or a billing question comes up.
- Activation records — until you deactivate that site, or the licence ends.
- Support email — up to two years.
- Server logs — a short rolling window, typically weeks.
- Payment and tax records — held by Paddle under their own retention rules, which are set by tax law.
8. Where your data is held, and how it is protected
Our licence server runs on hosting in the United States. Licence records are stored as files on that server, outside the public web root, and all requests to it travel over HTTPS. Paddle stores payment data on its own infrastructure under its PCI-compliant arrangements.
No system is perfectly secure, but access to the licence store is limited to the people who need it to run the product.
9. Your rights
Depending on where you live — for example under the GDPR in the UK and EU, or the CCPA/CPRA in California — you have the right to ask us for a copy of the personal data we hold about you, to have it corrected, to have it deleted, to object to or restrict how we use it, and to receive it in a portable form. We do not sell personal information, and we do not share it for cross-context behavioural advertising.
Email support@innovatewebdevelopment.com and we will action it, normally within 30 days. Deleting your licence record ends the licence: updates and support stop, though the MIT-licensed code you have installed keeps working. For data held by Paddle — invoices, billing details — contact Paddle directly, since they are the controller for that.
Where we need a legal basis under the GDPR, ours is: performing our contract with you (issuing and validating your licence, support), and our legitimate interest in running the business securely (fraud prevention, server logs, enforcing seat limits).
10. Children
Scroll Studio is a professional web-development tool and is not directed at children. We do not knowingly collect data from anyone under 16.
11. Changes to this policy
If we change this policy materially, we will update the “last updated” date at the top and email licence holders. Smaller clarifications will just be reflected in the date.
12. Contact
Innovate Web Development
1614 Morning Dew Dr., Byron Center, MI 49315, United States
support@innovatewebdevelopment.com