Privacy Policy

Information We Collect

SunnyScroll collects the minimum information necessary to operate the service:

• Email address — only if you subscribe to our newsletter. Your email is encrypted before it is stored. We use it solely to send you the daily story email.
• Usage data — standard server logs (IP address, browser type, pages visited, referrer) for security monitoring and aggregate analytics. These logs are retained for 30 days and are not sold or shared.
• Cookies — see the Cookies section below.
• Account information — if you create an account, we store your display name, email address, and an encrypted password. If you make a donation, we record the amount and date. We do not store payment card details.

We do not collect your phone number or share your personal information with third parties except as required by law.

Cookies

SunnyScroll uses a small number of cookies:

• Theme preference — a single cookie stores whether you prefer light or dark mode. It contains no personal information and is never transmitted to a third party.
• Session cookie — if you create an account and log in, an encrypted session cookie keeps you signed in. It is HTTP-only and cannot be read by third-party scripts.
• Third-party advertising cookies — our advertising partners may set cookies to serve personalised ads. You can opt out through your browser settings or your advertising network's opt-out tools (e.g., NAI opt-out at optout.networkadvertising.org).

We do not use tracking pixels, fingerprinting, or any form of cross-site behavioural tracking beyond what advertising partners set.

How We Use Your Information

• To send you the daily newsletter (if subscribed)
• To monitor for security incidents and abuse
• To understand aggregate traffic patterns (no individual profiling)
• To comply with legal obligations

We do not sell your data. We do not share your email address with advertisers or sponsors.

Data Security

All data in transit is protected with HTTPS (TLS 1.2+). Newsletter email addresses are encrypted at rest using AES-256 before storage. Our database server is not publicly accessible; access is restricted to application servers within a private network.

While no system is perfectly secure, we take reasonable technical precautions to protect your information. In the unlikely event of a data breach affecting personal data, we will notify affected users within 72 hours where required by applicable law.

You may request deletion of your email address at any time by unsubscribing from the newsletter (link in every email) or by contacting us directly.

Third-Party Services

SunnyScroll uses third-party advertising networks that have their own privacy policies. We are not responsible for the data practices of these third parties. We encourage you to review their policies directly.

We do not use Google Analytics or other user-profiling analytics platforms.

Contact

If you have questions or requests regarding your personal data, please contact us.

For details on advertising disclosures, see our Disclosure page.