Privacy Policy
This document describes how Scrimba AS (org.no. 918 111 573) ("Scrimba", "we" or "us") processes personal data as a data controller. It's written with clarity in mind, so it should be easy to follow. Scrimba is dedicated to keeping your personal data safe.
If you have any other questions which aren't answered in this privacy notice, don't hesitate to reach out via email ([email protected]), and we'll get back to you as soon as possible.
What personal data is being collected and what do we use it for?
The below table sets out the purpose for which Scrimba processes your personal data, the categories of personal data that Scrimba processes for each purpose and the legal bases Scrimba relies on:
- Signup: To provide you with a user account and our services we process email address and profile information provided by you during signup. The processing is necessary for the performance of the contract we have with you for the provision of our services (GDPR article 6 (1)(b)). If your account is created based on an agreement with your employer, the processing is based on our legitimate interest in fulfilling such agreement (GDPR article 6 (1)(f)).
- Enhanced user experience: If you log in to our services through Github, we process information from your GitHub account including bio, location, website, and other publicly shared information from your GitHub profile, to provide enhanced user experience through social platform integration and automatic profile enrichment. The processing is based on our legitimate interest in providing enhanced user experience (GDPR article 6 (1)(f)).
- Payment: To process payments and manage subscription services we process your name, email address and billing information you provide through Stripe. The processing is necessary for the performance of the contract we have with you for the provision of our services (GDPR article 6 (1)(b)). If your account is made based on an agreement with your employer, the processing is based on our legitimate interest in the fulfilment of such agreement (GDPR article 6 (1)(f)).
- Send relevant information: To send you updates, course information, and other relevant communication related to our services, we process your name, email address and the courses you take. The processing is based on our legitimate interest in communicating relevant information to you to ensure that your use of our service is as seamless as possible (GDPR article 6 (1)(f)).
- Improvement: To provide and improve our educational platform services, analyse user engagement, and develop content recommendations we process your interaction, including screencasts/courses watched, viewing duration and usage patterns. The processing is based on our legitimate interest in improving services and user experience (GDPR article 6 (1)(f)).
Scrimba may also collect or receive other types of personal data if required to fulfil the purposes listed above. On a case-by-case basis, Scrimba may also use your personal data for certain purposes that are not incompatible with the purpose for which the data was originally collected or received, such as audits, analytics, reporting, innovation, dispute resolution and mergers and acquisitions.
Cookies
We use a session cookie to keep you signed in between page loads and sessions. Session cookies are temporary cookies that are stored on your device while you browse our website and are automatically deleted when you close your browser. We process information about your IP address and session duration in relation to these cookies. The processing is based on our legitimate interest in ensuring that our website works (GDPR article 6 (1)(f)).
Will the personal data be shared with any third parties?
We use third-party vendors that will process the personal data as data processors on our behalf. We use the following third-party vendors to deliver our service:
OVH
Our app data is stored on a dedicated server operated by OVH SAS, which undertakes to abide by its obligations in accordance with the aforementioned regulations, particularly the GDPR.
Google Cloud Storage
Compressed backups of our app data is stored in Google Cloud Storage.
Stripe
The Stripe data is stored and handled by Stripe Payments Europe, Limited ("SPEL"), an Irish company operating under Irish law, the data controller responsible for Personal Data collected and processed in relation to Stripe Services.
Stripe subprocessors: Lovat & Sphere
For tax-compliance purposes, we use Lovat and Sphere, which act as subprocessors of Stripe. Both handle indirect tax compliance, including VAT / sales-tax calculations, filings, registrations, and cross-border remittance. They may receive a limited subset of data from the checkout and billing workflow (for example, billing address, purchase amount, and country of sale) as required to perform these services.
ChartMogul
We use ChartMogul for subscription analytics. This means that certain billing and subscription events (for example, when a subscription is started, renewed, or cancelled) are shared with ChartMogul to help us understand how Scrimba is performing as a business.
Kit
We use Kit for email communication. This means that when you sign up to Scrimba, your email address is stored in Kit so that we can send you updates, course information, and other relevant communication.
Resend
We use Resend for transactional emails.
Hetzner Online
Used as a server provider. Data is handled under the Hetzner Privacy Policy.
HelpScout
Used for customer support interactions. Data is handled under the Help Scout Privacy Policy.
Supabase
Used for data storage. Data is handled under the Supabase Privacy Policy.
OpenAI
We use OpenAI for AI-assisted support processing. Support interactions may be processed by OpenAI's systems as part of this service.
Anthropic
We use Anthropic for AI-assisted support processing. Support interactions may be processed by Anthropic's systems as part of this service.
Scrimba may also share your personal data with advisors, owners and other business partners to the extent required to operate Scrimba's business in a manner common in our industry, which may also include third parties in connection with possible mergers or acquisitions of Scrimba's business. Such sharing is based on our legitimate interest in proper and professional operation of the business and ensure Scrimba's continued development and sustainability (GDPR article 6 (1)(f)).
Will the personal data be transferred outside the EEA?
Scrimba may transfer your personal data outside the EEA in certain situations, as some of Scrimba's suppliers and business partners are located in such countries. Scrimba will ensure that your personal data is secured by adopting appropriate safeguards to protect the privacy (such as EU's Standard Contractual Clauses). Scrimba will provide you with further details about such international data transfers upon request. If you want to obtain a copy of the safeguards, please use the contact details below.
How long will the data be stored for?
Your personal data will be stored until you ask us to delete it, unless longer retention is required under legal obligations or for the establishment, exercise or defence of legal claims. Please note that we will not be able to provide you with our services if your personal data is deleted. Your account at Scrimba will be deleted and you will have to create a new account to use our services.
What rights does the data subject have?
You have several rights in relation to Scrimba's processing of your personal data. Such rights include:
- Information: To receive further information on how Scrimba processes your personal data.
- Access: To receive a copy of the personal data Scrimba has on you.
- Rectification: To request rectification and completion of the personal data Scrimba holds about you.
- Erasure: To request erasure of personal data if there are no applicable legal grounds for processing such personal data.
- Restriction: To ask that Scrimba restrict the processing of your personal data.
- Data portability: To ask that your personal data is transferred to you in a structured, commonly used, and machine-readable format and have the right to transmit those personal data to another controller without hindrance from Scrimba.
- Objection: To object to Scrimba's processing of your personal data. You also have the right to object to being subject to a decision based solely on automated processing (if relevant).
- Withdraw your consent: Where the processing of your personal data is based on consent, you have the right to withdraw your consent at any time.
Please note that these rights are subject to conditions and limitations by law. If you would like to exercise your rights or would like more information about the conditions/limitations, please contact Scrimba using the contact details below. If you find that Scrimba uses your personal data in violation of applicable law, you may file a complaint to the relevant data protection authority in your country. Scrimba encourages you to contact us prior to making such complaint, so that we may consider your objection and clarify any misunderstandings.
How can the data subject raise a question, requests or complaint to us?
If you have any questions or requests regarding our processing of personal data or about this privacy notice, you may contact [email protected].
Changes to this privacy notice
Scrimba may change this privacy notice from time to time, when deemed necessary or appropriate to ensure Scrimba's compliance with the GDPR and applicable data protection law. Scrimba notifies you of changes if required under applicable data protection law.
