Scribble Works
Browse

Privacy

plain language, no fine print

Effective 2026-09-04

Scribble Works is run by Ray Data LLC (Ray Data Co). This page says what we collect, what we don’t, and what happens to anything you type. If something here isn’t clear, write to hello@scribbleworks.co and we’ll fix the wording.

The short version

  • An account is optional. Browsing and printing never need one. You need one to have the AI customize a game for your kid, and you need one for your playset to follow you between devices.
  • There is no password. We email you a link, you press it, you’re in.
  • Every game on the shelf prints free, signed in or not.
  • No advertising trackers and no third-party analytics on this site.
  • One cookie, and only if you sign in: the one that keeps you signed in. Signed out, there is no cookie at all.
  • Your playset lives in your own browser. It syncs to our server only if you sign in.
  • Two things you type go to an AI company: the note you give the playset planner, and the sentence you type to customize a game. Both are scrubbed, then sent to an outside AI company, Anthropic, which reads them to pick your games or write the page. When a customized game gets a new picture, a second company, xAI, draws it from a short scene description — not from your sentence. Neither company trains its models on what we send, and in the normal course each deletes it within 30 days. The details are below.
  • The name you type in the name box never reaches an AI model: our code strips it out before the sentence is sent, writes it onto the page afterward, and never keeps it. We never send a birthday, last name, or photo to an AI either. A name typed inside your sentence is not detected, so leave names out of the sentence.

What we count

When you print a game or build a playset, the page sends us one number: a tally. We keep running totals — how many games were printed in all, and how many times each game was printed. That’s the whole record. No cookie, no IP address, no browser string, no timestamp, nothing that points back at you. It is how we know which games are worth making more of.

Your playset

The playset you’re building — which games are in the tray, in what order — is stored in your browser’s own storage on your own device.

Signed out, that is the only copy. We never receive it. Clear your browser data and it’s gone; we have no copy to delete for you.

Signed in, a copy is kept on our server against your account so the same tray is there on your phone and on the laptop. It holds the same thing the browser copy holds: which games are in the tray, their order, the name you gave the set, and any pages you customized. Signing out stops the syncing; deleting your account deletes the stored copy.

Accounts

An account is one adult and one email address. It is not required to use the site — it is required to have the AI customize a game, because a generated page costs us real money and an account is how we keep that from being abused.

  • What we store. Your email address, when you verified it, when you last signed in, and your playset. That is the list.
  • No password. There is nothing to steal, because there is nothing to store. You ask for a link, we email it, it works once and expires in fifteen minutes. The email goes out through Resend, a mail-delivery service, which handles your address and the link.
  • The sign-in cookie. Signing in sets one cookie that keeps you signed in for 30 days, and it renews while you keep using the site. It is the only cookie this site sets, and it is never set for a signed-out visitor. Signing out ends it immediately.
  • Kept scrambled. Neither the emailed link nor the cookie is stored as-is: we keep a one-way hash, so someone reading our database could not sign in as you with it.
  • No kid profiles. The account belongs to the grown-up. We hold no profile of a child, and there is no place in the account to make one.
  • Deleting it. Write to hello@scribbleworks.co and we delete the account, the stored playset and the sign-in records. There is no self-serve delete button yet; we do it by hand, and we say so rather than pretending.

When you customize a game

Customizing and the planner are the two places where what you type goes to an AI company. Here is exactly what happens when you customize; the planner is the same story, shorter, at the end of this list.

  • Your sentence. Before it goes anywhere, our code strips anything shaped like an email address, a web address, an @handle, a street address, or a run of seven or more digits. The stripped sentence, plus the language you picked, is what the AI model sees.
  • Your kid’s name. The name comes to our server so we can print it on the page, and it stops there: we strip it out before the sentence goes to the AI model, we never store it, and we never put it in a profile. There are no profiles. Being straight with you about the limit: that stripping only covers the name box. If you type a name inside your sentence — “Mae is 4 and loves horses” — our code does not spot it, so that name goes to the model with the rest of the sentence and is kept with the row below for 90 days. Write “she” or “my daughter” in the sentence and put the name in the name box, where it is handled properly.
  • Who sees it. Your scrubbed sentence goes to Anthropic, whose Claude model writes the words. That is a hand-off to an outside company, and we would rather say so than talk around it. If your ask changes the picture, Claude also writes a short description of the new scene — “a friendly stegosaurus, a volcano behind it” — and that description, not your sentence, goes to xAI, whose Grok model draws it. (If Grok is down, a picture model hosted by Cloudflare can draw it instead.) Claude then checks the picture before it reaches you. All of this runs through the relay we use to reach them (Cloudflare’s AI Gateway), and on these requests we tell the relay not to keep a log.
  • What those companies do with it. Under the terms we use them on, Anthropic and xAI do not train their models on what we send, and in the normal course each deletes it within 30 days. Cloudflare says the same about training. We check those terms, and if they change, this page changes.
  • The planner. The note you type into the playset planner on the home page is scrubbed too (email addresses and phone numbers come out; nothing else is checked) and goes to Anthropic so Ray can pick your games. We don’t store it ourselves, and we tell the relay we use to reach them not to keep a log of the request.

What we keep from a customized game

We keep what the models make: the words and numbers that landed on the page, the settings used to make them, and the id of any generated picture, together with the stripped sentence that produced them. We read this to see what is working. A nightly pass sends each stripped row to Claude once, to sort asks about a theme (dinosaurs, Spanish, a harder maze) from asks about one particular child; the ones about one child are marked and go no further. A theme that keeps producing good pages may become a ready-made game on the shelf, always as a theme, never with anyone’s name attached. Individual rows are deleted after 90 days.

Generated pictures are held for seven days so the page you just made keeps working, then the link stops resolving.

Fair use of the customizer

So one visitor can’t run the bill up for everyone, we count how many customized games come from a connection. To do that we take your IP address, mix it with a secret and the day’s date, and hash it — the result is a meaningless string of characters that expires the next day. Your actual IP address is never written down.

Separately, each stored customization row carries a salted hash of your connection so we can tell how many different households a pattern came from. That one does not rotate daily: it stays with the row for the same 90 days the row does. It cannot be reversed without our secret, and it is never joined to your email address or your account.

When you send us feedback

You can write to us about a game by email or by text. That message arrives at a small service of ours, and here is what it keeps.

  • The message and any photos. We keep what you wrote and any picture you attach. Testers often send a photo of the finished sheet, which means it may show a child’s handwriting or drawing — send it only if you are comfortable with that, and crop out anything you would rather we did not have.
  • How to reply to you. Your email address or phone number is stored on its own, keyed to a hash, for one purpose: answering you. The feedback itself carries only the hash, so the message and the person are held apart.
  • How long. 180 days, then the row is due for deletion. Ask us sooner and we delete it — message, photos and reply address — by hand.
  • Today, nothing is screened. Until feedback is tied to a verified account, anything sent to us is simply stored as it arrives. Don’t send anything you would not want kept.

Hosting and fonts

The site is hosted on Cloudflare, which keeps its own standard server logs the way every web host does. Typefaces are loaded from Google Fonts, so your browser fetches those files from Google. We add nothing on top: no analytics product and no ad pixel. The only cookie on this site is the sign-in cookie described under Accounts, and only if you signed in. Cloudflare’s Turnstile check on the sign-in form is a bot check, not a tracker; it does not follow you around the web.

Children

Scribble Works is made for parents, guardians and teachers — the grown-up doing the printing. It is not directed at children, and we do not knowingly collect personal information from a child. We hold no child profiles of any kind. If you believe a child sent us something, write to hello@scribbleworks.co and we’ll delete it.

Changes

If what we do changes, this page changes with it and the effective date at the top moves. Anything that would meaningfully widen what we collect gets said plainly on the site, not slipped in here.

Contact

Ray Data LLC — hello@scribbleworks.co. See also our Terms and the FAQ.

Hi, it’s Ray — the honest summary is that if you never sign in, we know how many pages got printed and nothing about who printed them. If you do sign in, we know your email address and what’s in your tray. If you customize a page, we also keep the scrubbed sentence behind it for 90 days, never tied to your email, and Anthropic, which makes the page, holds it for up to 30 days. That’s the whole list, on purpose.