Last updated: October 17, 2026
This page explains what Scribia collects, why, and what you can do about it. Short version: we collect as little as possible, we never sell your information, and there are no ads.
What we collect
- When you visit: your browser gets an anonymous guest ID so the game can work before you sign up. No name or email is involved.
- When you create an account: your username and password, and the security question you pick. Your password is handled by our login provider (Google Firebase) and we never see it. Your security answer is stored only in a scrambled form that can't be read back, and if you make a recovery code, we store only a scrambled fingerprint of it, never the code itself.
- What you make and do in the game: your cards and drawings, your profile picture and theme color, your unfinished drafts, your cards, coins, matches, wins and leaderboard stats, and whether you're currently online.
- Moderation records: strikes, suspensions or bans on your account, and who made a customized card image, so we can deal with rule-breaking.
- Technical data: like any website, our hosting providers process basic technical information such as your IP address and browser type to deliver the game and protect it from abuse. We don't use it to track you.
We do not collect your real name, email address, phone number, location or payment details.
What's public
Your username, the cards you draw, your profile picture, your theme color, your win and loss record, your leaderboard position and your online status can be seen by other players. Your drafts, password, security answer and recovery code are private.
How we use it
Only to run the game: keeping you signed in, saving your collection, matching battles, dealing weekly packs, showing leaderboards, preventing cheating and spam, and moderating content. We don't sell or rent your information, and we don't show ads.
Services we use
- Google Firebase (Google Cloud, servers in the USA) stores accounts, game data and card images, and runs the game's server code.
- Cloudflare hosts the website and provides privacy-friendly visitor counts (Cloudflare Web Analytics, which doesn't use tracking cookies).
- Google reCAPTCHA may be used to check that requests come from the real Scribia website rather than bots.
These companies process data for us under their own privacy and security terms.
Cookies and storage
Scribia stores a small amount of data in your browser to keep you signed in and remember settings like sound. We don't use advertising or tracking cookies.
How long we keep it
Account and game data stays while your account exists. Finished matches and some temporary records are deleted automatically after a while. Cards you've drawn that were dealt into other players' collections stay in those collections.
Your choices
- You can change your password, security question and profile picture in Settings.
- To delete your account or ask what we hold about you, email rdvnn4@gmail.com from any address and tell us your username. We may ask you to prove the account is yours.
Children
Scribia is for players 13 and older. We don't knowingly collect information from children under 13. If you believe a child under 13 has an account, contact us and we'll delete it.
Changes
If we change this policy in an important way, we'll mention it in the game. The date at the top shows the latest version.
Contact
rdvnn4@gmail.com
See also: Terms of Service