Privacy Policy

Updated October 19, 2026

Scaffold Me is an online research question tool operated from Maryland, United States. This policy explains how information is handled when you visit the site, view a sample, create an account, purchase access, or contact us.

Information we collect and why

• Sample access: your email address lets you open the sample walkthrough. A separate, optional checkbox records marketing consent.
• Your account: your first name, email address, sign-in information, and access records support account creation and paid access. Passwords are handled by Supabase Auth.
• Your research work: study details and saved question drafts allow you to continue your work. Your account keeps your latest saved work; edits replace earlier wording.
• Payments: Stripe processes checkout information and payment-card details. We use payment identifiers, payment status, and access dates to manage access. Stripe sends payment receipts; this website does not send a separate receipt.
• Support: the Contact Us form collects your name, email address, subject, and message so we can respond. Contact messages do not sign you up for marketing.
• Technical information: hosting and service providers may process IP addresses, request logs, and similar information to deliver and secure the service.

Service providers and disclosures

Information is transmitted to service providers through the website’s forms and service connections. Supabase processes account information, sample requests, marketing consent, access records, and saved workspace entries. Stripe processes payments. FormSubmit processes contact messages and delivers them to our support Gmail inbox. The hosting provider processes information needed to deliver and secure the website. These providers handle information under their own applicable terms and privacy policies.

See Supabase’s privacy policy, Stripe’s privacy policy, FormSubmit’s privacy policy, and Google’s privacy policy.

Cookies and tracking

Session cookies keep you signed in. No advertising or analytics scripts have been added to the website. The website does not currently change its behavior in response to browser Do Not Track signals. Service providers may process technical information as described above; their own policies explain their practices.

Saved work and retention

Paid access expiring does not automatically delete your account or saved work. Download your saved questions after each session to keep a copy. You can request deletion of your account information, saved research entries, sample request, or support messages through Contact Us. Some records may need to be retained for payment disputes, security, or legal obligations. Service providers may retain records or backups under their own policies.

Security and research information

The website uses HTTPS, account authentication, and access controls to protect account information and saved work. No online service can guarantee complete security. Do not enter confidential participant information, identifying research data, or payment-card details in research fields or support messages.

Your choices and requests

Use Contact Us to ask about your information or request access, corrections, or deletion. We may need to verify that the request concerns your account. Rights and exceptions depend on applicable law. Marketing emails, if sent to people who opt in, will include an unsubscribe option. No marketing campaign is currently being sent.

International use

The service is operated from the United States. Information may be processed in other countries by our service providers. This policy does not limit rights you have under applicable law.

Policy changes and contact

Changes will be posted on this page with an updated date. Material changes may also be communicated through the website or account email when required. For privacy questions or requests, use Contact Us.