Privacy

What we collect, and what we don’t.

Last updated: 2026-04-25

Privacy at Scrollchart is structurally simple: we collect the minimum needed to run the service, and nothing else.

What we collect from your visitors (when they load an embedded diagram)

The embed makes a single non-blocking analytics ping with these pieces of data:

• The diagram slug being displayed (e.g. bell-curve).
• The instance ID of the embed, when present (e.g. iv-49345).
• The URL of the page hosting the embed. We use this to show authors where their diagrams are used and to verify the embed is still live on that page.
• A timestamp.

That’s it. No IP address is stored long-term. No cookies are set. No fingerprints, no tracking pixels, no third-party iframes. We do not capture user agent strings, screen resolutions, or session IDs.

What we don’t do

• We don’t serve ads.
• We don’t sell data to anyone.
• We don’t share with third-party analytics services.
• We don’t set cookies on your readers’ browsers.
• We don’t fingerprint visitors.
• We don’t track readers across sites.

What we collect from you (the embedder)

If you fill in the request form or email us:

• Your email address (only if you provide it).
• The text of your message or request.
• Your IP address, kept for 30 days for abuse prevention.

What we collect from prompt generations

When you use the AI generator, your prompt is sent to a third-party language-model provider for processing under their commercial-use terms. We store the prompt and the resulting diagram config in our database, keyed by the diagram ID, so the embed can render forever. We do not associate prompts with any personal identifier. The list of sub-processors we use is available on request via [email protected].

WordPress plugin specifics

The Scrollchart WordPress plugin connects to Scrollchart for diagram data. The connections are:

• Diagram metadata fetch. When a page containing a diagram is built or its cache expires, the plugin requests scrollchart.com/api/diagram to retrieve the title, prose, and rendering options for that diagram. The request includes your site’s domain so per-host display options apply correctly. The response is cached on your server (default: 6 hours), so this call does not happen on every page view.
• Interactive diagram view. The rendered post loads the live diagram in an iframe from scrollchart.com/embed-frame/, and the bundled loader (embed.js, shipped inside the plugin) sends the single non-blocking view ping described above to scrollchart.com/api/ping: the diagram slug plus the URL of the page the diagram is embedded on, used for usage stats and to verify the embed is live. No cookies, no visitor-identifying data.
• Catalogue list (editor screens only). When an editor opens the diagram picker, the plugin loads the list of available diagrams from scrollchart.com/api/catalog.json. This is a read-only request that sends no data about you, your site, or your content, and the result is cached on your server.
• AI generator (optional, editors only). When a logged-in editor clicks Generate with AI, the prompt they type, and an email address only if they choose to enter one, are sent from your server to scrollchart.com/api/generate.php to create a custom diagram. This runs only on that explicit action, never for site visitors and never on the front end. The prompt is processed as described under “What we collect from prompt generations” above. If you do not use the generator, no prompt data is ever sent.
• Site registration. On activation, on plugin update, and the first time the editor loads if no key is stored yet, the plugin sends your site's home URL and the installed plugin version to scrollchart.com/api/site-register, and receives a per-site key stored locally. This lets saved diagrams be linked to your site so only your site can edit them, and lets us know which plugin features your site can use. When the plugin is deleted, a one-time notice (your home URL only) is sent to scrollchart.com/api/site-deactivate; this does not delete any diagrams you created.
• Attribution placement (optional). If enabled (default on; switch off at Settings → Scrollchart → Advanced), your server fetches the negotiated attribution config from scrollchart.com/api/site-footer, sending only your site host, and renders a small on-brand credit line — either on your home page, or on a single page agreed with you, never both unless specifically configured. When the option is off, no request is made and nothing is rendered.

The plugin does not require an API key from you (a key is issued automatically on registration, as above), does not transmit your WordPress user accounts or post content, and does not register WordPress hooks that read visitor data. Disabling the plugin stops these calls immediately.

Data retention

• Analytics pings: aggregated weekly; raw pings discarded after 30 days.
• Instance configs: kept until you request deletion.
• Email correspondence: kept for as long as needed to resolve your request.

Right to be forgotten

Email [email protected] with the instance ID(s) you want deleted. We process within 7 days and the embed self-disables gracefully.

Where data lives

Our infrastructure runs on Cloudflare’s global edge network. Specific data residency depends on which Cloudflare region serves you, but no data is transferred outside Cloudflare’s control.

Contact

Privacy questions or deletion requests: [email protected]. We answer every email.