1. Who is responsible for your data
Innovate Web Development, 1614 Morning Dew Dr., Byron Center, MI 49315, United States, is responsible for the personal data described here. For questions, corrections or deletion requests, email support@innovatewebdevelopment.com.
This policy takes effect September 1, 2026 and covers this website, the licence servers, and the WordPress plugin.
2. The short version
We use Google Analytics to count visits — but only if you say yes: nothing loads and no cookie is set until you accept. We never see your card details. The plugin does not track your website’s visitors and sends us nothing about them. The only personal data we hold is what is needed to issue your licence key, keep it working on the right number of sites, and email you about it.
3. This website
Analytics, and why you get asked first
We use Google Analytics 4 to understand how this website is used — how many people visit, which pages they read, and roughly where in the world they are. We use it to decide what to write and build next. We run no ads, and it is not linked to any advertising product.
It is off until you turn it on. The analytics tag is not loaded and no analytics cookie is set unless you click “Accept” on the banner. Declining, or simply ignoring it, means no tag, no cookies and no data — not a “denied” signal sent to Google. If your browser sends Global Privacy Control or Do Not Track, we treat that as a no and never ask.
Once you accept, Google Analytics sets cookies in your browser (names beginning _ga) to tell a returning visit from a new one, and Google processes the data on our behalf. Google Analytics 4 does not log or store your full IP address.
Changed your mind? — that brings the banner back on this page. You can also install Google’s official opt-out browser add-on. Nothing on this site is withheld from you for declining.
Apart from those analytics cookies we set no cookies of our own. Our web host keeps standard server logs (IP address, page requested, timestamp, browser user agent) for security and troubleshooting, kept for a short period and not used to profile anyone.
Third parties the pages load
- Google Fonts — the site loads the Roboto and Dancing Script typefaces from Google's font servers, which means your browser's IP address is visible to Google when a page loads.
- Google Analytics — only if you accept it. The tag then loads from
googletagmanager.comand sends Google your page address, referrer, browser and approximate location, under Google’s privacy policy. - Paddle — the checkout overlay is Paddle’s. It loads on our pages and may set its own cookies for checkout, fraud prevention and tax localisation, under Paddle’s privacy policy.
4. When you buy a licence
Paddle is our merchant of record. You give your payment details to Paddle, not to us. Card numbers, bank details and billing addresses are handled entirely by Paddle and never reach our servers.
What Paddle passes to us, and what we then store, is:
- your email address, so we can send you your licence key and reach you about it;
- Paddle’s reference IDs for your customer record, subscription, transaction and the price you bought;
- your licence key, its tier (single site or unlimited), its seat count and its current status.
We use this to issue your key, to know whether your licence is active, and to email you about your licence — key delivery, renewal problems, and material changes to the product or these policies. We do not send marketing email to buyers who have not asked for it, and we never sell or rent your data to anyone.
5. What the WordPress plugin sends us
When you activate your licence in the plugin’s settings, and periodically afterwards to re-check that the licence is still valid, the plugin makes a request to our licence server containing exactly two things:
- your licence key;
- a site identifier — your site’s domain and path, normalised.
We record that site identifier against your licence, with the time it was activated and the time it was last seen, so that a single-site licence is used on one site and so you can free the slot when a site moves. Deactivating the licence in the plugin removes that activation record.
The update check sends your site address and the installed plugin version, so the server can tell your site whether a newer release exists.
The plugin collects nothing about your visitors. No analytics, no scroll tracking, no fingerprinting, no third-party requests from the front end. The scroll effects run entirely in the browser, and the recipe files carry motion settings only — never your content.
6. Support email
If you email us, we keep the message and your email address so we can answer and refer back to it if you write again. Please do not send us passwords or admin logins by email; if we need access to diagnose something, we will agree a safer way with you first.
7. How long we keep things
- Licence records — for as long as the licence exists, and for up to two years afterwards, in case you come back or a billing question comes up.
- Activation records — until you deactivate that site, or the licence ends.
- Support email — up to two years.
- Server logs — a short rolling window, typically weeks.
- Analytics data — kept by Google for the retention period set on our Analytics property, which is at most 14 months.
- Payment and tax records — held by Paddle under their own retention rules, which are set by tax law.
8. Where your data is held, and how it is protected
Our licence server runs on hosting in the United States. Licence records are stored as files on that server, outside the public web root, and all requests to it travel over HTTPS. Paddle stores payment data on its own infrastructure under its PCI-compliant arrangements.
No system is perfectly secure, but access to the licence store is limited to the people who need it to run the product.
9. Your rights
Depending on where you live — for example under the GDPR in the UK and EU, or the CCPA/CPRA in California — you have the right to ask us for a copy of the personal data we hold about you, to have it corrected, to have it deleted, to object to or restrict how we use it, and to receive it in a portable form. We do not sell personal information, and we do not share it for cross-context behavioural advertising.
Email support@innovatewebdevelopment.com and we will action it, normally within 30 days. Deleting your licence record ends the licence: updates and support stop, though the MIT-licensed code you have installed keeps working. For data held by Paddle — invoices, billing details — contact Paddle directly, since they are the controller for that.
Where we need a legal basis under the GDPR, ours is: performing our contract with you (issuing and validating your licence, support), and our legitimate interest in running the business securely (fraud prevention, server logs, enforcing seat limits).
10. Children
Scroll Studio is a professional web-development tool and is not directed at children. We do not knowingly collect data from anyone under 16.
11. Changes to this policy
If we change this policy materially, we will update the “last updated” date at the top and email licence holders. Smaller clarifications will just be reflected in the date.
12. Contact
Innovate Web Development
1614 Morning Dew Dr., Byron Center, MI 49315, United States
support@innovatewebdevelopment.com