Scroll Siege Privacy Policy
Effective October 28, 2026. Last updated October 28, 2026.
The short version
- Scroll Siege reads which apps you open, and for how long, on your phone. App names and per-app minutes never leave your phone.
- Only daily totals leave your phone: one number for your minutes in the apps you chose, a few counts, your 7-day starting average and your time zone.
- We use your data to run the game, keep scores fair, deliver notifications and keep the app working. There are no ads in the app, and we don't sell your data.
- You can see, correct, download or delete your data. Write to [email protected], or delete your account in the app.
- Scroll Siege is for adults 18 and over.
1. Who we are
Scroll Siege is an Android app made by Legacy Rock LLC, a company in the United States. On Google Play our developer name is Legacy Harbor Apps. The app's package name is com.legacyrock.scrollsiege, and our website is scrollsiege.app.
In this policy, "we", "us" and "our" mean Legacy Rock LLC. "You" means a person who uses the Scroll Siege app or our website.
Legacy Rock LLC decides how and why your personal data is used: we are the "controller", called the "personal information controller" under Philippine law.
Privacy contact and data protection officer: [email protected].
2. What the app reads, and what stays on your phone
To block the apps you choose and count your minutes, Scroll Siege needs two Android permissions that you turn on yourself in Settings:
- Usage access. This lets the app read Android's record of which app is open and for how long. Before you turn it on, the app shows you what it reads and what leaves your phone, and asks you to tap "I agree".
- Display over other apps. This lets the app show its pause screen over an app you chose to block.
The following is read or created on your phone and never leaves it. We don't receive it, and neither does anyone we work with:
- Which apps you open, when, and for how long.
- Your minutes in each app.
- The names of your apps, and the list of apps installed on your phone (used only to build the app picker).
- Which apps you chose to block, and your always-allowed list.
- Which app a pause screen covered, and which app a party unlock request was for.
Signing out wipes the app's usage log from your phone. Uninstalling the app removes everything the app stored on your phone. Android keeps its own usage record, which Android controls.
3. What leaves your phone, and what we collect
The data below is sent over an encrypted connection to our backend (hosted by Supabase), or to the service providers named in section 7.
| Data | Details | Where it comes from |
|---|---|---|
| Account details | Your email address and a user ID we create. When you sign up you confirm that you are 18 or older; we record when you confirmed. If we offer Google sign-in and you use it, Google also tells us your Google account ID, name and profile picture link. | You (or Google, if you use Google sign-in) |
| Hero and party | Your hero name, hero picture and look (colors and gear), your level, XP and streak, your party's name, who is in it and when they joined or left. | You and the game |
| Daily totals | For each day: your total minutes in the apps you chose (one number, never per app), how many pause screens you saw, how many times you closed an app or opened it anyway, emergency passes used and focus sessions finished. Also your 7-day starting average (one number) and your time zone. A running total is sent about once an hour, and a final one shortly after your local midnight. | Your phone |
| Fair-play checks | Sent with daily totals, to tell whether a day's record is complete: minutes when usage access was off, gaps in Android's record, whether the phone's clock was changed by hand, and the phone's clock time at upload. Each upload also carries a Google Play Integrity token, which our server asks Google to check, to confirm the report comes from a genuine copy of our app. | Your phone, and Google |
| Settings | Your daily goal, how many apps you block (the number only, not which ones), whether strict mode is on, your blocking hours, the date each change takes effect, and your rest days. | You |
| Unlock requests | When you ask your party for time: 5, 10 or 15 minutes, a reason you pick (work, school, message or other), and who answered. Never the app's name. | You and your party |
| Device information and push token | An install ID created by the app, the app version, the platform (Android), whether this phone is your scoring phone, and when it was last seen. A push notification token from Google's Firebase Cloud Messaging, so we can send party notifications to this phone. A security key for uploads stays on your phone; we keep only a scrambled (hashed) copy. | Your phone |
| Subscription details | Which Pro plan you have, its status (trial, active, payment issue, ended, refunded) and its dates. Google Play handles payment; we never receive your card or bank details. | Google Play, through RevenueCat |
| Google Play billing country | Only when the app checks whether you can join a founders program: the two-letter country code of your Google Play billing account. If you become a founder, we keep that country with your founder status. We never use your IP address or SIM card for this. | Google Play |
| Crash reports | When the app crashes or hits an error: the error, the screen it happened on, the app version, and technical details about the phone (such as model and Android version). We don't attach your email or name. | Your phone, sent to Sentry |
| Install referrer | If you installed from a friend's invite link, Google Play passes the invite code to the app, which uses it to open the right party. It stays on your phone. | Google Play |
| Reports of names | If you report a hero or party name: the name you reported, the reason you picked, your user ID, and the party. | You |
| Waitlist (website) | If you join the iPhone waitlist on our website: your email address and the invite code from the link. | You |
| Messages to us | If you write to us: your email address and what you send. | You |
| Technical logs | Like most online services, the servers of our providers (Supabase, Cloudflare and others) keep short-lived logs of requests, which can include your IP address and the time. We don't use your IP address to locate you. | Your phone or browser |
We don't collect your contacts, photos, location, messages or browsing history, and we don't collect sensitive personal information such as health data or government ID numbers. You send invites and share cards yourself, through Android's share menu, to whoever you choose.
Not in the app yet: we plan to add product analytics (PostHog) and install measurement for our ads (Meta's software kit). Neither is in the current version, and no data goes to PostHog or Meta today. Before a version with either is released, we will update this policy and our Google Play data safety information (see section 7).
4. What your party sees
Scroll Siege is a co-op game, so some of your data is shown to the people in your party (2 to 5 people you invited or joined):
- Your hero name, hero picture and look, level and streak.
- Your status for today (no report yet, on track, over today's goal, resting or unverified) and your damage to this week's boss.
- A "Founder" badge, if you have one.
- Your unlock requests: the minutes and the reason you picked.
Your party doesn't see your minutes, and nobody sees app names, because they never leave your phone. Anyone who opens a party's invite link on an iPhone or computer sees the party's name on the waitlist page. Share cards show your party, hero and boss; you decide whether and where to share them.
5. Why we use your data
| Purpose | Data used |
|---|---|
| Run the app: sign-in, your hero, your party, the weekly boss, unlock requests | Account details, hero and party, settings, daily totals, unlock requests, device information |
| Score each day fairly on our server (the phone measures, the server decides) | Daily totals, fair-play checks, settings, Play Integrity token, device information |
| Send party notifications to your phone | Push token, device information, hero and party names |
| Prevent cheating, fraud and abuse, and keep the service secure | Fair-play checks, Play Integrity token, device information, account details, invite-code attempts, technical logs |
| Provide Pro, trials and the founders program | Subscription details, user ID, Google Play billing country |
| Fix crashes and errors | Crash reports |
| Handle reports of rude names | Reports, hero and party names |
| Understand whether the app works and helps people scroll less, using counts and averages across users | Daily totals and settings |
| Tell iPhone friends when Scroll Siege comes to iPhone | Waitlist email and invite code |
| Answer your messages and requests about your data | Messages to us, account details |
| Meet legal obligations and handle legal claims | Any of the above, as needed |
We don't use your data for automated decisions that have legal or similarly significant effects on you. Scoring decides game results only.
6. Legal bases and consent
Where the law asks us to name a legal basis (for example, under the Philippine Data Privacy Act), we rely on:
- Contract: to provide the app and Pro to you as described in our Terms.
- Consent: for reading app usage on your phone (you tap "I agree" after the app explains what it reads and what leaves your phone, then turn on usage access yourself), for notifications (Android asks you), and for the waitlist.
- Legitimate interests: to keep scores fair, prevent fraud and abuse, keep the service secure and fix crashes, where your rights don't outweigh these interests.
- Legal obligation: to keep records the law requires and to respond to lawful requests.
Withdrawing consent: you can turn off usage access, display over other apps or notifications in Android Settings at any time, leave the waitlist by writing to us, or delete your account. Withdrawing consent doesn't affect what we did before, but blocking and counting stop without usage access.
7. Who receives your data
We use these companies to run Scroll Siege. They process data on our behalf, under their terms for business customers. We don't sell your personal information, and we don't share it for advertising.
| Recipient | What it does for us | Data it receives |
|---|---|---|
| Supabase | Our database, sign-in and server functions | The data in section 3, except what goes only to Google Play, Sentry and RevenueCat |
| Resend | Sends the sign-in code emails | Your email address and the code |
| Google (Google Play) | App distribution, subscription billing, Play Integrity checks, the install referrer, and Google sign-in if offered | Purchase and billing data (Google handles payment), Play Integrity requests, sign-in data |
| Google (Firebase Cloud Messaging) | Delivers push notifications | Your phone's push token and the notification text |
| RevenueCat | Manages Pro subscriptions | Your user ID, purchase events from Google Play, and technical details its software needs (such as app version and store country) |
| Sentry | Crash and error reports | Crash reports |
| Cloudflare | Hosts our website and our email address | Technical logs of website visits, and emails you send to [email protected] |
| Meta Platforms (planned; not in the current app) | Would measure whether our ads on Meta lead to installs | When added: your phone's advertising ID and other device identifiers, and the fact that the app was installed and opened. We'll update this policy before that version is released, including whether this counts as "sharing" under any law and how to opt out |
| PostHog (planned; not in the current app) | Would provide product analytics | When added: screen views and feature use linked to a random analytics ID, never app names or per-app usage |
We may also share data:
- if the law requires it, or to protect the rights, safety or property of our users, the public or us;
- with a buyer or successor if Legacy Rock LLC is part of a merger, sale or similar transaction, who must keep this policy's protections;
- with anyone else, when you ask us to.
8. International transfers
Legacy Rock LLC is a US company, and our service providers process data in the United States and other countries where they operate. If you use Scroll Siege outside the United States (for example, in the Philippines), your data is transferred to and processed in those countries, whose laws may differ from yours. We choose providers that protect data under their terms, and we remain responsible for your data when they process it for us.
9. How long we keep your data
| Data | How long |
|---|---|
| Account, hero, party, settings, daily totals, scores, unlock requests, devices and push tokens | While your account exists. Deleted when you delete your account. A phone's push token is replaced when it changes, and deleted with the phone's record. |
| Damage you already dealt to a party boss | Stays with the party after you leave or delete your account, shown as a "former member" with no name, so your friends' results don't change. |
| Subscription records we hold | While your account exists. Google and RevenueCat keep their own purchase records under their policies; we ask RevenueCat to delete yours when you delete your account. |
| Crash reports | Up to 90 days at Sentry. |
| Reports of names | Until we've reviewed them, and then up to 12 months, to deal with repeated abuse. |
| Waitlist email | Until we tell you Scroll Siege is on iPhone, or until you ask us to delete it, whichever comes first. |
| Messages to us | As long as needed to answer, and up to 2 years. |
| Technical logs | Short periods set by our providers, typically days to a few weeks. |
| Backups | Deleted data rolls off our backups within 30 days. |
| Record that an account was deleted | 3 years: the date, whether it was made in the app or on the web, and a one-way scrambled (hashed) form of the old account ID, for fraud prevention and legal reasons. No email, name or game data. |
When we no longer need data, we delete it from our systems. Data in backups is overwritten as the backups roll off.
10. Security and data breaches
- Data sent between the app, our website, our backend and our providers is encrypted in transit (HTTPS/TLS).
- Every database table has row-level security: you can read only your own data and your party's shared data, and phones can't write scores, XP, damage, level or Pro status. These rules have automated tests.
- Daily reports go through one server function that checks a per-phone upload key and a Google Play Integrity token. We store only a hashed copy of each upload key.
- Only people who need access to our systems have it.
No system is perfectly secure. If a personal data breach affects you, we will investigate it, contain it, and notify you and the authorities as the law requires. For people in the Philippines, where the Data Privacy Act and the National Privacy Commission's rules require notification, we will notify the National Privacy Commission and affected people within 72 hours of becoming aware of the breach. Our notice will say what happened, what data was involved, what we're doing about it, and what you can do.
11. Deleting your account
You can delete your Scroll Siege account and its data at any time:
- In the app: Settings > Delete account. Type DELETE to confirm.
- On the web: at scrollsiege.app/delete, sign in with a code sent to your email, then confirm. You don't need the app installed. Until that page is available, use the email option below.
- By email: write to [email protected] from the email address on your account.
If you have a Pro subscription that renews, cancel it in Google Play first (Google Play > Profile > Payments & subscriptions > Subscriptions). Deleting your account doesn't cancel a Google Play subscription, and the app asks you to cancel first.
What happens when you delete:
- You leave your party. If you were the leader, the longest-standing member becomes leader.
- Damage you already dealt stays with the party, shown as a "former member" with no name.
- We delete your account and personal data right away: profile and hero, settings, daily totals, scores, devices and push tokens, notifications, unlock requests, subscription records we hold, founder status and your waitlist entry.
- We ask RevenueCat to delete your customer record.
- Copies in our backups roll off within 30 days.
What we keep: the deletion record described in section 9. Purchase records kept by Google Play are Google's, under Google's policies.
12. Your rights, and how to use them
Wherever you live, you can ask us to:
- Access your personal data: tell you what we hold and how we use it, and give you a copy.
- Correct it if it's wrong or incomplete.
- Delete it (see section 11).
- Object to how we use it, or ask us to restrict it, including any use based on legitimate interests.
- Give you a copy in a portable format (portability): we send your account data as a file in a common, machine-readable format (JSON).
- Withdraw consent (see section 6).
How: email [email protected] from the email address on your Scroll Siege account, and say what you'd like. To protect your account, we only act on requests we can match to the account's email (we may send a sign-in code to confirm it's you). You can also delete your account yourself in the app or on the web.
We reply within 30 days. It's free, unless a request is clearly unfounded or excessive. If we can't do what you ask, we'll tell you why, and you can ask us to look again.
13. Adults only
Scroll Siege is only for people aged 18 and over. You confirm you are 18 or older when you sign up. The app is not directed to children, and we don't knowingly collect personal data from anyone under 18. If you believe someone under 18 has an account, write to [email protected] and we will delete it.
14. United States residents
Depending on the state you live in, you may have the right to know what personal information we collect, use and disclose; get a copy of it; correct it; delete it; opt out of its "sale", "sharing" or use for targeted advertising; not be treated differently for using these rights; and appeal if we turn down a request. Use them as described in section 12. Where your state allows it, an authorized agent can make a request for you; we'll ask for proof that you authorized them.
Categories we collect, in the terms some state laws use:
- identifiers (email, user ID, install ID, push token);
- commercial information (subscription status);
- internet or other electronic network activity (daily totals and in-app activity);
- inferences limited to game results (goal met, damage).
We collect these from the sources and for the purposes in sections 3 and 5, and give them to the recipients in section 7. We don't collect precise geolocation, biometric data, or the contents of your messages.
Sale and sharing: we don't sell your personal information, and we don't share it for cross-context behavioral advertising or targeted advertising. If that changes (for example, when we add Meta's software kit), we'll update this section first and offer any opt-out your state's law requires.
15. Philippines residents: privacy notice under the Data Privacy Act of 2012
This section is our privacy notice for people in the Philippines under the Data Privacy Act of 2012 (Republic Act No. 10173) and the rules of the National Privacy Commission (NPC).
- Personal information controller: Legacy Rock LLC, United States (Legacy Harbor Apps on Google Play).
- Data protection officer: reachable at [email protected].
- What we collect and how: sections 2 and 3. We don't collect sensitive personal information as defined in the Act.
- Why we collect it, and on what basis: sections 5 and 6.
- Consent: before the app reads your app usage, it explains what it reads and what leaves your phone, and asks you to tap "I agree" and then turn on usage access yourself. Android asks for your consent to notifications. You can withdraw consent at any time (section 6).
- Who receives it: your party (section 4) and our service providers (section 7).
- Transfers outside the Philippines: section 8.
- How long we keep it, and how we dispose of it: sections 9 and 11.
- How we protect it, and breach notification: section 10.
Your rights as a data subject
- To be informed that your personal data is collected and processed, and how (this policy).
- To access your personal data and how it is processed.
- To object to processing.
- To erasure or blocking of your personal data.
- To rectification of inaccurate or incomplete data.
- To data portability: a copy of your data in a common electronic format.
- To damages for harm caused by inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of your personal data.
- To file a complaint with the National Privacy Commission (privacy.gov.ph).
To use these rights, write to our data protection officer at [email protected] as described in section 12. We reply within 30 days.
16. Changes to this policy
We'll update this policy as the app changes, for example before we add product analytics or install measurement. We'll change the date at the top, and for important changes we'll tell you in the app or by email before they take effect. Where the law requires your consent to a change, we'll ask for it.
17. Contact us
Legacy Rock LLC (Legacy Harbor Apps on Google Play)
Privacy and data protection officer: [email protected]
This policy: https://scrollsiege.app/privacy/