Scroll Feet measures how far you scroll and keeps that on your device. It never reads what is on your screen. Only two things ever leave your device, and only if you choose them: the ranking (a random id, a date, distances and times) and, if you sign in, your daily totals saved to your account so they follow you to other devices. No ads, no analytics, no tracking.
On Android, Scroll Feet uses the Accessibility service, because it is the only way Android lets an app see scrolling in other apps. It listens for two kinds of events: a view scrolled (how far the screen moved) and a window changed (which app is in front, so time is counted only in apps you actually scroll). The service is configured so it cannot read window content — no text, no images, nothing you type, nothing on your screen. You switch it on yourself in Android's Accessibility settings, after the app explains this, and you can switch it off there at any time.
Today's distance and time, a history of past days (date, feet, minutes), the names of apps you have scrolled in, your settings and chosen look, and a premium code if you have one. This lives in the app's private storage (or the browser extension's storage) and is deleted when you uninstall.
If you switch on the ranking, the app sends our server: a random id your device made up for itself, the date, today's distance and time, this month's distance and time so far, and your running total and time. Nothing else — no email, no device details, no IP address stored. Other people on the board see distances and times, never who they belong to. If you share your rank while signed in, your devices are combined into one place on the board, so our server knows that place belongs to your account; others still see it as anonymous unless you choose a name. If you are not signed in, your ranking id is not linked to anything. Our server also notes which kind of app each random id came from — Android, Firefox or Chrome, read from the request itself — and when it was last seen, so we can count how many people use each one. Stop sharing deletes that too.
Board name and symbol (optional, Premium): if you choose a name to show on the board, it is sent with your premium code so the server can check you have Premium; Premium installs also show their meter's symbol (a shape and colour name, such as "heart:peach"). The code is checked and not stored; only the name and symbol are kept, linked to your random id. Clear the name, or stop sharing, and they are deleted. The server keeps one row per id per day for up to 45 days, one total per id per month for about 13 months, and one running total per id until it has not been updated for about six months. You can switch the ranking off at any time, which deletes your rows straight away (see below). On Firefox, the add-on's "share data with developer" switch also stops it.
Signing in is optional. You give your email address and we email you a six-digit code (through our email provider, Resend); there is no password. The code is stored only as a scrambled hash, works for 15 minutes and is deleted once used. Signing in gives your device a random token, which our server also stores only as a hash.
While signed in, each of your devices sends its daily totals — a date, a distance and a time per day — under a random device id. We keep your email address and those daily totals so every device you sign in on shows your whole history. Nothing else: never what you scrolled through or where.
Sign out at any time. To delete your account and every day saved to it, press Delete account — in the Android app's Settings, or beside your email at the top of the extension's stats page — or email us from the address you signed in with.
Everything on your device is deleted when you uninstall Scroll Feet (or remove the extension). To delete what the ranking holds on our server: in the Android app, tap Stop sharing my rank in "Where you land"; in the Firefox or Chrome extension, open your stats and press Stop sharing. That immediately deletes every daily row and the running total stored for your device's random id, and nothing more is sent. Nothing is kept after that. If you no longer have the app, rows stop being updated and are deleted automatically: daily rows after 45 days, the running total after about six months.
Premium is bought on Stripe's checkout page. Stripe handles your payment details under its own privacy policy; we never see your card. We receive the email address you give Stripe and use it only to email you your premium code (sent through our email provider, Resend) and renewal codes. The code itself is checked on your device, offline.
No ads, no analytics or tracking SDKs, no selling or sharing of data, no location, microphone, camera or contacts access, no reading of screen content.
Scroll Feet is not directed at children under 13.
If what we collect ever changes, this page is updated before the change ships. Questions or deletion requests: mail@setmind.net. Ranking rows carry no name or email, so we cannot find yours from an email; use Stop sharing in the app, which deletes them by your device's id. An account can be deleted on request from the email it belongs to.