Privacy Policy

Learn how we collect, use, and protect your data.

Last updated: August 2, 2026

1. Introduction and Scope

This Privacy Policy explains how Skribido collects, uses, shares and safeguards your personal information, and the rights you have over it.

It covers both the Skribido app for iOS, Android and web (including Skribido Web) and the skribido.com website, including our public information pages, contact forms and invitation pages. Where a section applies to only one of the two, it says so.

It applies to everyone who uses Skribido, wherever you are located, and is written to meet the requirements of the laws that may apply to you: including the EU and UK General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and Telecommunications Digital Services Data Protection Act (TDDDG), the Spanish LOPDGDD, the French Loi Informatique et Libertés, the California Consumer Privacy Act (CCPA/CPRA), Canada's PIPEDA, and the Australian Privacy Act 1988.

2. Who Is Responsible for Your Data

Skribido is operated by Skribido GbR, represented by Manuel Mailaender, Timo Saure and Tobias Ludwig, Eichhornstraße 40, 78464 Konstanz, Germany, which is the data controller responsible for your personal information. We are established in Germany, within the European Economic Area. The controller determines, alone or jointly with others, the purposes and means of processing.

You can reach us at any time about any privacy question or to exercise your rights at mail@skribido.com.

3. Information We Collect in the App

We collect:

• Account information: email address, display name, bio, date of birth (used only to verify you meet the minimum age requirement), and gender (optional, you may choose not to share this)
• Content: stories, scenes, comments, likes, bookmarks, private messages, and any images you upload
• Region/locale: your device's general region (derived from locale settings, not GPS or precise location), used to show locally relevant and trending stories
• Device and usage data: a push-notification token (if you enable notifications), plus app interaction and performance data collected through analytics and crash reporting (see Section 5)
• If you file a DMCA copyright claim: your name, email, phone, and address, as provided in the claim
• If you sign up using Google, Facebook, or Apple: the basic profile information (name, email) that provider shares with us when you authorize the sign-in

4. Information We Collect on the Website

When you visit skribido.com we collect:

• Server log files: your IP address, browser type and version, operating system, referring URL, hostname and the time of your request, recorded automatically by our hosting provider. This is necessary to deliver the site reliably and securely, and we do not combine it with other data.
• Contact enquiries: the details you provide through a contact form, by email or by telephone (for example your name, email address, phone number and the content of your message), so that we can answer you and handle any follow-up questions.
• Cookies and similar technologies: see Section 6.
• Invitation links: if you open an invitation link such as skribido.com/invite, the invitation code is processed so we can attribute the invitation once you create an account. The code is not linked to you until you register.

5. Analytics and Crash Reporting

To understand how the app is used and to fix crashes, we use PostHog (product analytics, hosted in the EU) and Sentry (crash and error monitoring). These tools collect app interaction events and technical diagnostics linked to your account identifier. We do not use this data for advertising, and we do not sell it. Nothing in the app depends on it: you can turn analytics and crash reporting off at any time using the control below. When you turn it off, no usage or crash data is collected or transmitted.

6. Cookies and Similar Technologies (Website)

The website uses cookies, small text files stored on your device. Session cookies are deleted when you close your browser; persistent cookies remain until you delete them or they expire. Some are set by us, others by third-party services.

• Necessary cookies are required for the site to function and are used on the basis of our legitimate interest (Art. 6(1)(f) GDPR).
• Preference, statistics and marketing cookies are only set with your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). You can give, refuse and withdraw this consent at any time through the consent banner on the site.

You can also configure your browser to notify you about cookies, block them, or delete them automatically when closing. Disabling cookies may limit some website functionality.

The Skribido app does not use advertising or tracking cookies. It stores data locally on your device only to keep you signed in and to remember your settings and offline drafts.

7. How We Use Your Information and Our Legal Bases

We use your information to operate and improve Skribido, and we rely on the following legal bases under the GDPR (and equivalent grounds under other laws):

• To provide the service: create your account, publish and display your content, deliver messages, and answer enquiries you send us (performance of our contract with you, Art. 6(1)(b) GDPR)
• To keep Skribido safe and working: security, abuse and content moderation, reliable hosting, and product analytics and crash reporting to fix problems and improve features (our legitimate interests, Art. 6(1)(f) GDPR)
• Optional features: push notifications, optional profile details, social sign-in, and non-essential cookies (your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG, which you can withdraw at any time)
• To meet legal obligations: verifying the minimum age and handling copyright (DMCA) claims (Art. 6(1)(c) GDPR)

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

8. User Content

Content you create remains yours. We store and process it solely to provide Skribido's functionality and improve the service. Because Skribido is a collaborative storytelling platform, stories and scenes are shared works: other users may build on what you publish. Content you publish is visible to other users, so please treat anything you publish as public within the Skribido community.

9. Service Providers We Use

We do not sell your personal information. We share data with the following trusted service providers, solely to operate Skribido, and only under a data processing agreement where one is required:

• Supabase: authentication, database, and file storage (app)
• Sentry: crash and error monitoring (app)
• PostHog: product analytics, hosted in the EU (app)
• Expo: push notification delivery (app)
• Resend: delivery of transactional emails such as confirmation codes and password resets, hosted in the EU
• IONOS SE, Elgendorfer Str. 57, 56410 Montabaur: website hosting and server log files
• Google, Facebook, and Apple: only if you choose to sign in using one of these providers

The website loads Google Fonts to display type consistently. When it does, your browser contacts Google and Google receives your IP address. This happens on the basis of our legitimate interest in a consistent presentation (Art. 6(1)(f) GDPR), or on your consent where consent is required (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Font Awesome icons are served locally from our own servers, so no connection to external servers is made for them.

10. International Data Transfers

We operate globally, and your information may be processed in countries other than your own, including the United States, which may not provide the same level of data protection as your home country. When we transfer personal data out of the EEA, the UK, or other regions with transfer restrictions, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum) to protect it. You can request more information about these safeguards at mail@skribido.com.

11. How Long We Keep Your Data

We retain your data only as long as necessary to provide the service or to comply with legal obligations. Server log files are kept only as long as needed for security and reliability. Enquiries you send us are kept until your request is resolved, unless legal retention periods require otherwise.

12. Account Deletion

You can delete your account at any time from the app's settings. When you delete your account:

• Your account first enters a 30-day recovery period. During this time your push notifications stop and your Skribido Web sessions are revoked, but your data is kept so you can change your mind: you can restore your account by simply logging in again. Your profile and published content remain visible during this period.
• After the 30 days, deletion is completed automatically and irreversibly:
• Your profile is anonymized: your display name is changed to "Deleted user", and your bio, profile picture, date of birth and gender are cleared.
• We permanently delete your private messages and conversations, your uploaded chat images, your drafts, bookmarks, follows, achievements, in-app notifications, and any feedback you submitted. Free-text notes on content reports you filed are removed.
• Stories, scenes and comments you published are kept and re-attributed to "Deleted user", so the collaborative works remain intact for everyone who contributed to them.
• We may retain limited information where the law requires it (for example, records of DMCA copyright claims) or to resolve disputes and enforce our terms.

If you would like your data erased without waiting for the 30-day recovery period, contact us at mail@skribido.com and we will complete the deletion without undue delay.

13. Your Privacy Rights

Subject to your local law, you have the right to access your data, correct it, delete it, restrict or object to how we use it, withdraw consent, and receive a portable copy in a common machine-readable format. You can download a copy of your data at any time using the "Download a Copy of Your Data" section below, and you can delete your account from the account settings. To exercise any other right, contact us at mail@skribido.com. We will not discriminate against you for exercising these rights.

14. Right to Object

Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation. This also applies to profiling based on those provisions. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

15. EEA and UK Rights

If you are in the EEA or the UK, you have all the rights in Section 13 under the GDPR and UK GDPR. You also have the right to lodge a complaint with your local data protection authority: for example, your state authority or the BfDI in Germany, the AEPD in Spain, the CNIL in France, or the Information Commissioner's Office (ICO) in the United Kingdom.

16. United States Rights

Depending on your US state of residence, for example California, Virginia, Colorado, Connecticut, Utah, Texas and other states with comprehensive privacy laws, you may have the right to know what personal information we collect (see Sections 3 and 4), to access it, to request its deletion, to correct inaccurate information, and to appeal a decision about your request. We do not sell your personal information, and we do not share it for cross-context behavioral (targeted) advertising. To exercise these rights, contact us at mail@skribido.com.

17. Canada and Australia Rights

If you are in Canada, you have rights under PIPEDA to access and correct your personal information and may complain to the Office of the Privacy Commissioner of Canada. If you are in Australia, you have rights under the Privacy Act 1988 and the Australian Privacy Principles and may complain to the Office of the Australian Information Commissioner (OAIC).

18. Security

We implement reasonable technical and organizational measures to protect your information, including access controls and encryption in transit. The website and app use SSL/TLS encryption, which you can recognize by the "https://" prefix and the lock symbol in your browser. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

19. Children's Privacy

You must meet the minimum age to use Skribido in your country: the "digital age of consent," which ranges from 13 to 16 depending on where you live. We ask for your date of birth during registration and do not create an account for, or knowingly collect personal information from, anyone below that age. If you believe a child below the applicable age has provided us information, contact us at mail@skribido.com and we will delete it.

20. Changes to This Policy

We may update this Privacy Policy from time to time when legal, technical or business developments require it. If we make material changes, we will take reasonable steps to let you know. The current version is always available on this page and in the app. Continued use of Skribido after an update means you accept the revised policy.

21. Contact

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Skribido GbR, represented by Manuel Mailaender, Timo Saure and Tobias Ludwig
Eichhornstraße 40, 78464 Konstanz, Germany
mail@skribido.com