In short: ScrollDecoded reads your TikTok, Instagram and YouTube export files inside your browser. Your files are never uploaded, so we never see them, and neither does anyone else. We have no user accounts, no database, no analytics and no advertising trackers. A few companies do handle a small amount of data so that the website can load and so that you can pay. This page lists them.
1. Who is responsible (data controller)
Željko Henezi
Zagreb, Croatia
Email: [email protected]
We have not appointed a data protection officer, because the law does not require one for a service of this size and type.
2. Your export files stay on your device
When you drop a ZIP file into ScrollDecoded, the code already loaded in your browser opens it and works out the results on your device.
- The file and everything in it are not sent to us or to anyone else. That includes your followers and following lists, posts, comments, watch history, searches, ad interests and login history. We cannot see any of it.
- When you close or reload the tab, the file is gone from the page.
- Share cards are drawn in your browser. They leave your device only if you download or share them yourself.
Your export may contain other people's usernames, such as your followers. These are processed only on your device, for your own personal use.
3. What is saved in your browser
ScrollDecoded saves two items in your browser's local storage on this device. We never receive them.
| Item | What it contains | Why | How long |
|---|---|---|---|
sv_unlock | A note that you bought Full Access: the unlock code from your Whop checkout, the tier and the time of unlock | So paid features stay unlocked in this browser | Until you clear this site's data |
sv_snapshots | A short summary of each analysis: platform, date, username, follower and following counts, the list of accounts that don't follow you back, and your health score and grade. Up to 20 per platform | So you can see your history and compare results over time | Until you delete a snapshot or clear this site's data |
To delete them: use the delete (bin) icon next to a snapshot, or clear this site's data in your browser settings. Clearing site data also removes your Full Access unlock. Our Terms explain how to restore it.
If you share this browser with other people, they can see your saved snapshots.
4. Cookies and similar technologies
ScrollDecoded sets no cookies of its own and uses no analytics, advertising or tracking tools.
The local storage described in section 3 is used only for features you use: your paid unlock and your snapshot history. Storage that is strictly necessary for a service you asked for does not need consent under EU rules (Article 5(3) of the ePrivacy Directive), so we do not show a cookie banner.
Cloudflare may set a short-lived, strictly necessary security cookie (for example __cf_bm) to protect the site from bots. It is not used for tracking.
5. Hosting and delivery: Vercel and Cloudflare
To show you any website, your browser has to request it from a server. Every request reveals some technical data: your IP address, the address of the page you asked for, the date and time, your browser and device type, and the page you came from.
| Provider | Role | What they do | Privacy policy |
|---|---|---|---|
| Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA | Our processor | Hosts the website files | vercel.com/legal/privacy-policy |
| Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA | Our processor | Delivers the site quickly and blocks attacks | cloudflare.com/privacypolicy |
- Purpose: to deliver the website, keep it secure and prevent abuse.
- Legal basis: our legitimate interest in running a secure website (GDPR Art. 6(1)(f)).
- Retention: the providers keep these request logs for a limited time under their own retention rules. We do not download, combine or analyse them, and we do not use them to identify you.
- Transfers outside the EU: both providers are US companies certified under the EU-U.S. Data Privacy Framework. Standard contractual clauses apply as a backup.
After you buy, Whop sends you back to ScrollDecoded with an unlock code in the page address. That address, including the code, appears in these request logs.
6. Buying Full Access: Whop
Payments run on a checkout page at whop.com operated by Whop, Inc., 300 Kent Ave #401, Brooklyn, New York 11249, USA.
What Whop does. Whop collects your name, email address, billing details and payment information. It uses them to take your payment, prevent fraud and run your Whop account. Whop does this as an independent controller under its own privacy policy: whop.com/privacy. We never see your full card number.
What Whop shares with us. Whop gives us a confirmation of your purchase, together with your name or username, your email address, and the purchase details (such as the product, amount, date and payment status).
What we use it for:
- to deliver Full Access and restore it if you lose it (GDPR Art. 6(1)(b), performance of our contract with you);
- to handle refunds, withdrawals and complaints (Art. 6(1)(b) and 6(1)(c), legal obligation);
- to keep the accounting and tax records Croatian law requires (Art. 6(1)(c)).
How long we keep it: for as long as Croatian accounting and tax law requires (currently up to 11 years after the end of the year of the sale). After that we delete it.
7. If you email us
If you email us, we receive your email address, your message and any attachments. We use them only to answer you, restore your access or handle a refund (GDPR Art. 6(1)(b) and (f)). We do not sell or share them.
Please do not attach your export ZIP. We never need it. A screenshot of the error message is enough. If you send the file anyway, we delete it as soon as we have looked at the problem.
Our email provider, Proton AG (Switzerland, covered by an EU adequacy decision), stores our mail as our processor. We delete support emails 24 months after the conversation ends, unless the law requires us to keep them longer (for example, emails about a refund that form part of our accounting records).
8. Who receives data: summary
| Recipient | Data | Role |
|---|---|---|
| Nobody | Your export files and results | Processed only on your device |
| Vercel, Cloudflare | Technical request data (IP address, URL, time, browser) | Our processors |
| Whop | Checkout and payment data | Independent controller |
| Proton | Emails you send us | Our processor |
| Tax authorities, courts | Purchase records, when the law requires it | Recipients under the law |
We do not sell personal data, we do not use it for advertising, and we do not profile you.
9. No automated decisions about you
The health score, persona and other results are calculated on your device, for your eyes only. They have no legal or similar effect on you, and we never see them.
10. Children
ScrollDecoded is meant for people aged 16 and over. TikTok and Instagram require their users to be at least 13, and Google sets its own minimum age for each country. To buy Full Access you must be an adult, or have permission from a parent or guardian.
We do not knowingly collect personal data from children under 16. If you are a parent and believe your child bought Full Access, email us. We will refund the purchase and delete what we hold, except records the law requires us to keep.
11. Your rights
You can ask us to:
- give you a copy of the personal data we hold about you (access);
- correct it;
- delete it;
- restrict or object to how we use it (including use based on our legitimate interests);
- give it to you in a portable format.
Email [email protected]. We reply within one month. We may ask you to confirm your purchase email so that we give data only to the right person.
We cannot see or delete the data stored in your own browser (section 3). You control it, and you can delete it at any time.
For data that Whop holds as its own controller, contact Whop as well. We will help if we can.
You can also complain to the Croatian data protection authority, AZOP (Agencija za zaštitu osobnih podataka, Selska cesta 136, 10000 Zagreb, azop.hr), or to the data protection authority in your own country.
Do you have to give us data? No. The free tools need no personal data from you. To buy Full Access, Whop needs your payment details and email address. Without them, the purchase cannot be completed.
12. Changes to this policy
If we change how ScrollDecoded handles data, we will update this page and the "Last updated" date. If a change matters to people who have bought Full Access, we will also say so on the website.