Privacy Policy

Last updated: July 26, 2026

Template, pending legal review. This document is a good-faith template covering how the SCALES services work today. It has not yet been reviewed by counsel. We are getting it reviewed and will update it. Until then, do not treat it as final legal advice.

This Privacy Policy explains what information SCALES collects, why we collect it, and the choices you have. It covers the SCALES website at scales.baby, the Nest service at nest.scales.baby, and the Protect drain-protection service at protect.scales.baby(together, the “Services”).

1. Information we collect

We collect only what we need to run the Services.

  • Account and sign-in data. When you sign in with Discord (or, on some SCALES services, Google or X), we receive your basic profile information from that provider (for example, your display name, account ID, and email address where the provider shares it). We do not receive your social password.
  • Wallet data. If you sign in with a crypto wallet, we collect your public wallet address and the signed message used to prove you control that wallet. We never ask for and never receive your seed phrase or private keys.
  • Content and submissions. We collect the information you enter into the Services, such as form responses, application details for Protect, and any content you create or store.
  • Campaign proof. If you choose the Hoard path in Tools of the Keep, we collect the cropped screenshot you upload as proof of use. We re-encode the image to remove file metadata, keep it in a private Vercel Blob object without a public link, and schedule it for automatic deletion 30 days after upload. You should remove amounts, merchant names, account names, notifications, and other personal details before uploading.
  • Technical data. Like most websites, we automatically receive basic technical information such as IP address, browser type, and timestamps, used for security and to keep the Services running.

2. How we use information

  • To authenticate you and keep your account secure.
  • To provide, maintain, and improve the Services.
  • To assess and administer Protect applications and claims, where you choose to use Protect.
  • To communicate with you about the Services, including service notices and responses to your requests.
  • To detect, prevent, and respond to fraud, abuse, and security issues.

3. We do not sell your data

We do not sell your personal information, and we do not share it with third parties for their own advertising. We use a small number of service providers (for example, hosting, authentication, and database providers) that process data on our behalf and only to operate the Services.

4. Nest is end-to-end encrypted

Content you store in Nest (nest.scales.baby) is end-to-end encrypted. That means it is encrypted on your device with keys we do not hold, so we cannot read your Nest content and we do not have access to its plaintext. We strongly recommend you keep your own backup of any encryption keys or recovery material, because if those are lost we cannot recover your Nest content for you.

5. Cookies and sessions

We use cookies and similar local storage to keep you signed in and to remember your session. These are functional and security cookies needed for the Services to work. We do not use third-party advertising or cross-site tracking cookies.

6. Data retention and deletion

We keep your information for as long as your account is active or as needed to provide the Services, and longer where we must to meet legal, security, or fraud-prevention obligations. You can ask us to delete your account and associated personal data at any time by contacting us at the address below. Some records tied to Protect applications or claims may be retained for a reasonable period to handle disputes and prevent abuse. Hoard screenshots uploaded for Tools of the Keep are automatically deleted 30 days after upload.

7. Security

We take reasonable technical and organizational measures to protect your information. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your data and to respond quickly if an issue arises.

8. Children

The Services are not directed to children, and you must be old enough to form a binding contract in your jurisdiction to use them.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the “Last updated” date above, and for material changes we will provide additional notice where appropriate.

10. Contact

Questions or requests (including data deletion) can be sent to hello@scales.baby.