Privacy Policy
Last updated: August 2026
stopscroll.ing is a personal project, run from Australia, that picks something for you to do instead of scrolling. It keeps very little, and deletes most of that once you stop coming back. This page says what it holds and for how long. The law it is written against is the Australian Privacy Act 1988 (Cth).
What we collect
- Your activities. Whatever you type into the list, so it is still there next time.
- A session. The site sets a signed, HTTP-only cookie holding a session id. Against that session it records the user agent your browser sent, the IP address the request came from, and when you were last seen. The cookie also carries which activities you have already been shown, so that you are not given the same one twice in a row.
- An email address and password, if you sign up. The password is hashed. We do not hold the password itself and cannot recover it for you.
Signing up is optional. Without an account, the only thing your list is attached to is the browser holding the cookie.
How we use it
- To show you your list and pick from it.
- To keep you signed in.
- To send you a verification or password reset email.
- To catch abuse and slow it down. That is what the IP address and user agent are there for.
Nothing here is sold or advertised against, and we will not email you about anything other than your own account.
How long we keep it
- A session expires two weeks after you were last seen. Expired ones get deleted.
- If you never signed up, your list goes when the session does. Once nothing can reach the record, it is deleted.
- Sign up and never verify the address, and the account and its list are deleted after seven days.
- A verified account is kept until you ask for it to go.
Analytics
Page views are counted by a self-hosted copy of Plausible, served from this domain. It sets no cookies and does not follow you off the site. What it records is a count of pages and where the visit came from, with nothing attached to you or your list.
Who else sees it
- Hetzner runs the server the app and its database sit on. That server is in Nuremberg, so your data is held in Germany rather than Australia, and German and European Union law applies to it alongside Australian law.
- Resend delivers the verification and password reset emails, so it handles your email address.
No one else sees any of it, and your activities go nowhere.
Security
The site is served over HTTPS. Session cookies are signed and HTTP-only, so a script running in your browser can neither read one nor forge one, and passwords are hashed. That amounts to reasonable care. It is not a guarantee, and we are not going to claim otherwise.
Your rights
Ask us for a copy of what we hold, a correction to it, or its deletion, at privacy@stopscroll.ing. With no account there is a faster route: clear this site's cookies, and the list they pointed at is deleted the next time we clear out records nobody can reach.
Changes
When this changes, the new version goes up here with a new date on it.
Complaints
Email privacy@stopscroll.ing first. If that gets you nowhere, the Office of the Australian Information Commissioner takes complaints.