Privacy
Privacy
The short version is that Scaffold does not collect anything about you. Here is the longer version.
Last updated 4 November 2026 (version 0.2.0).
The app
- No accounts. You do not sign up or sign in. Scaffold has no user database. Optional sync between your devices is coming in a later update; it is not in the current version.
- No telemetry or analytics. The app does not report usage, crashes or errors to anyone.
- No advertising and no third-party software development kits.
- Your notes stay on your device. They leave it only if you copy them somewhere, run a sync tool over the folder, or publish an export yourself. Scaffold does none of those on its own.
- No network unless you allow it. Fonts and everything else are bundled. The only automatic request is the optional daily update check, which you choose on first launch. Otherwise the app goes online only when you act: you click to load a web embed, open a link (it goes to your browser), or grant a plugin the
networkpermission. - The update check sends no personal data. If you said yes to "Check for updates automatically?", Scaffold asks this website once a day whether a newer version exists. If you said no, it only checks when you press Check for updates now in Settings. The request carries no account, no notes, no device identifier and no usage data; the host sees it like any other web request (see Hosting below).
- Reminders stay on your device. They are worked out from the
remind:lines in your notes and shown by your operating system or inside the app. No push server is involved. Which reminders already fired is kept in your vault's.scaffoldfolder on that device.
Android permissions
From 0.2.0 the Android app asks for four permissions, each for one job:
- Internet: the optional update check (and, later, optional sync). Nothing else uses it.
- Notifications: to show reminders. Android asks only when you turn reminders on in Settings, never at first launch.
- Run at startup: to set your reminders up again after the phone restarts.
- Install apps: to install Scaffold updates. Android shows its own prompt before installing.
No storage, camera, microphone, contacts or location access. Vaults live in the app's own storage and are left out of Android's cloud backup.
This website
- It sets no cookies.
- It runs no analytics, tag managers, pixels or social widgets.
- It makes no requests to other domains. Fonts, scripts and images are all served from the site itself.
- There are no forms, sign-ups or comment boxes, so the site does not receive anything you type.
What your browser stores
Two small items, both in your own browser and never sent anywhere:
scaffold-themein local storage: your light or dark choice, if you use the theme switch.scaffold-docs-collapsedin session storage: which documentation sections you collapsed, for the current tab only.
Hosting
The site is plain static files. Whoever hosts them (at the time of writing, a static hosting provider) can see the standard details every web server sees, such as your IP address, the page requested and your browser's user-agent, and may keep ordinary operational logs. Scaffold's makers do not run analytics on top of that and do not use those logs to build profiles.
Downloads
Downloading a build is an ordinary file request to the host. There is no download tracking or registration. The checksums on the download page let you confirm the file you received.
Contact
There is no public contact address yet; see the contact page. When one exists, we will use messages and addresses only to reply.
Changes
If this policy ever changes, the date at the top of this page changes with it. This page is a plain-language description of how Scaffold behaves, not legal advice.