Privacy
tbf scrapbook. Last changed 12 October 2026.
What we keep
Your email address, the books you make, the photos, scans, recordings and words in them, who you have invited, and what you have paid for. A book is private to you and the people you invite until you publish it.
Photos keep their full size so they print well. Before a photo leaves your device we remove its location, camera and other hidden details. If a photo had a date or a place, we show it to you and keep it only if you confirm it.
Video links
Links from our videos carry a campaign label. We count new books made through those links during the same visit. The count contains no email address, name or book identifier. We do not save the label in a tracking cookie or browser storage.
Advertising cookies
If you allow advertising cookies, Google measures visits from our ads and paid purchases. We send the payment amount, currency and an order reference, never your email, name or book contents. The Google tag runs on the front page and payment confirmation page only.
Your choice is kept on this browser for six months. Advertising cookies last up to 30 days. Google also keeps ad click details in browser storage until you withdraw consent or your choice expires. You can change your choice and remove these cookies at any time. Declining does not affect your books or payments. Google's processing may take place outside the United Kingdom. See Google's privacy policy.
Usage counting
If you allow usage counting, Amplitude counts books created, assets imported, first pages saved and an edit made on a later day within seven days of signup. These counts use a random identifier on each browser or iOS device. No email, name, book identifier or personal content is sent.
You can turn counting off in Settings. This removes the identifier and unsent events from this account's storage on this device. Deleting your account removes them too. Historical events remain in Amplitude in the United States. Return counts cover the same browser or iOS device only.
Who else handles it
- Amazon Web Services in London stores everything and sends our emails. Content is encrypted in storage and in transit.
- When you press Transcribe, AWS reads that one image or recording in London and gives the words back. Nothing is transcribed unless you ask.
- When the owner of a book turns on help with arranging, OpenAI sees small copies of the photos being compared and picks among them. OpenAI may keep requests for up to 30 days to check for abuse. Leave it off and nothing is sent.
- When you make a new decoration, OpenAI receives the description you chose from our list. Never a photo, a name or your words.
- Stripe takes payments. We never see your card number.
- Prodigi prints books you order. They receive the print file and the delivery address, and delete the print file 30 days after the order.
Nobody at tbf looks at your books. There is no tool that lets us browse them. If you ask for help, we see the state of an upload, an export or an order, never its pages.
Sharing
A named reader signs in to read. A link edition can be read by anybody who has the link, until you take it down; search engines are told not to list it. People you invite to contribute see only what they sent.
Deleting
Deleting a book or your account stops all access at once, then removes every copy we hold and checks each one is gone before it says Deleted. You can save the receipt. Files you or others downloaded, printed books and anything Prodigi is already printing cannot be recalled.
On this device, books are kept in the browser so they open offline. Settings, Remove copies from this device, clears them.
Who we are
tbf scrapbook is made by Comtev Ltd in the United Kingdom. Write to privacy@tobefair.app.