Privacy

What this site collects

Ordinary browsing produces two aggregate counts: page views anddownloads. They use no cookie or advertising identifier and do not follow you elsewhere. License management is the narrow exception described below: after you use an emailed link, it sets one secure 30-minute session cookie.

Page views are counted by Cloudflare Web Analytics, which is a small script this site loads from Cloudflare — the only third-party file on any page. It reports which page was opened, roughly where in the world from, and how fast it loaded. It is cookieless by design: it has no way to recognise you on your next visit, and no way to see any other site you visit.

• Recorded: the page, the referring link, your country, your browser and operating system, and page-speed timings. All of it aggregate.
• Not recorded by analytics: your IP address, any cookie, any session, any advertising or cross-site identifier, and anything you type. Analytics is not joined to purchase or license-management records.
• It is a beacon, so it needs JavaScript. Block it — with any content blocker, or by turning JavaScript off — and the site works exactly the same. Nothing here depends on it.

Downloads are counted at the edge, on the request your browser was already making, and set nothing. When you download an installer, a number goes up: one count for the day, the platform, the version and the country. That is the entire record — there is no row anywhere that describes a person.

• Not stored: your IP address, your browser's user-agent string, any cookie, any session, and any identifier.
• The country comes from a header Cloudflare adds at the edge. Your IP is never written down. Countries with only a handful of downloads are pooled into "Other" so a small number can never point at one person.
• The user-agent is read for a moment to ignore bots and link previews, then discarded. It is used to decide whether to add 1, never recorded.

This is here so we know whether anyone reads the guide and whether Linux builds are worth maintaining. It is not here to learn anything about you, and it is not capable of it.

Purchase email and license management

Checkout is not live yet. When it is, each purchase will keep its own order reference, product grant, three-seat allowance, full recovery key, and the email supplied at checkout. Purchases at the same email remain separate; their seats are never pooled. Postmark delivers the receipt, key, and any recovery link.

There is no password, sign-up, or profile. If you ask for a management link, Turnstile is verified by Cloudflare to resist automated abuse. Requests are rate-limited per email and IP; the IP bucket is stored only as a secret-keyed HMAC and expires within 24 hours. Magic links expire after 15 minutes, work once, and are stored only as hashes.

A verified link creates a Secure, HttpOnly,SameSite=Lax cookie for 30 minutes. The server stores only its hash plus a CSRF token; sign-out clears it. This session can list that email's separate purchases, show their recoverable keys and devices, release one device, or activate a 32-character offline device code. Postmark and Cloudflare process the email delivery and abuse check respectively.

What the app collects

Scramps runs entirely on your machine. There is no profile to create and no server holding your Scramp — if this site vanished tomorrow, your Scramp and every activated unlock would carry on.

The app never makes a network call on its own. Every one is something you started, aimed at a machine you chose: the model calls you configure with your own API key; a single activation request per computer, if you buy the unlock; your own storage bucket, if you connect one; another computer on your own network, if you use the LAN tools; a radio station's own server and a public station directory, if you tune the live radio; and our release list, if you press Check for updates. There is no server of ours holding your files, and none of it sends anything about your Scramp.

• The files you feed it are read locally and never uploaded.
• Your Scramp, its stats and its history live in a local database on your disk.
• Audio is synthesized on your machine — the radio generates every note, which is why it works offline. The same player can also tune live internet radio, which is off until you tune a station: that audio streams from the station's own server, and searching for one asks a public station directory.
• If you connect your own storage bucket, backups and shared files go toyour bucket — a service you chose and pay for, not ours. We never see the files, the keys, or the traffic.
• Every sense the app has is blindfolded by default and stays off until you switch it on — and the permissions only tighten, never loosen on their own.

Your own API key

Some features talk to a model provider. Those use your key, entered by you, and they talk to that provider — not to us. We never see the key or the traffic.

Unlocking: one call, once per computer

If you buy the unlock, the app contacts us exactly once on each computer — at the moment you enter your key — and never again. No check-ins, no expiry, no re-checks. That single request sends your purchase key, a scrambled fingerprint of the computer, and the name you give it in your device list. It sends nothing about your Scramps, your files, or how you use the app.

The fingerprint is a one-way hash of an id your operating system already generated when it was installed. The id itself never leaves your machine, and the hash cannot be turned back into it or matched against anything outside this app. It exists so one purchase can cover three computers instead of unlimited ones.

What comes back is a small signed file that your computer checks by itself from then on — soif this site disappeared tomorrow, your unlock would keep working. If a machine has no internet at all, it never has to make that call: it will show you a code to bring to the activation page from any other device.

The free tier needs no account or email and never activates. If you do not buy and do not configure a networked tool, the app makes no request to Scramps services — with one exception you drive yourself: Check for updates, in the feedback panel, asks our release list which version is current. It is a button. It runs when you press it and at no other time — no timer, no check at startup, no setting that turns it into one — and it sends nothing but the request itself.

No dark patterns

No subscription, no password or profile, no per-character purchases, and no real-money trading. Free use needs no account or email. A purchase email exists only for its receipt, key recovery, and optional seat management; the signed unlock works offline afterward.

If something here turns out to be wrong, that is a bug and it will be fixed — the claims on this page are meant to be checkable against the app's behaviour.