Your data in Scope
Updated 4 October 2026
Scope uses your data to provide your account, personal discoveries and family profiles. This notice describes how the current service at scope.toolstack.nl handles data.
What we store
We store your email address, account details, profile name, optional profile photo, language and interests. We also store saved ideas, reading progress, quiz answers, XP and badges. Family profiles include a nickname, age range, reading level, settings and learning activity. Child profiles belong to their parent's account and have no separate login.
Why
These records support login, saved progress and preferences, relevant content and parent-managed child profiles. Security and technical records help investigate abuse and failures. Scope does not sell your data and has no advertising or external advertising trackers.
Private sources and imports
When you import sources, we process the URL, metadata, document content, excerpts and processing jobs. Uploaded documents and derived private concepts remain scoped to your account. Other users, including operators, cannot access your private graph. A public editorial story is a separately reviewed package and does not make your original upload public. Model APIs and embeddings are currently disabled.
Service providers and storage
Vercel hosts the website. Supabase provides authentication, the database and private files; Scope's database is in Ireland. Resend delivers account emails and processes your address and email content for that purpose. Source searches are sent to the selected metadata providers. Infrastructure and email delivery may process data outside the EU under those providers' applicable terms. The import worker runs on the administrator's computer.
Cookies and your device
Scope uses necessary session cookies for login. The selected profile is linked to your session in the database. The installed web app may store public interface files on your device; private content is not cached for offline use. You can sign out and clear local website data in your browser.
Retention
Account, profile and learning records remain while your account exists. Bounded cleanup is currently disabled. If enabled, unreferenced source snapshots and unused untrusted sources become eligible after 30 days, read notifications after 90 days and anonymized audit records after 180 days. Referenced sources, citations, stories and active jobs are excluded. Backups and authentication, hosting and email logs have separate provider retention periods.
Your controls
Profile and settings lets you update details, download a JSON copy of your data and delete your account. Export requires recent Adult password confirmation. Account deletion requires your password and typing DELETE. Private files are removed before deleting the account; a cleanup failure blocks deletion. Child profiles can be deleted separately through Parent Lock.
What deletion means
Deleting an account removes its authentication identity and related private data from active Scope storage. Separate shared editorial stories, source citations, provider logs and existing backups are not automatically erased. Independent source publications are not removed.