Who is responsible
The controller for this site is , , , email . See the imprint.
Your documents
Documents you write, open or export in Scissor Office are processed in your browser and are not uploaded to our servers. They reach Google only if you choose to use your own Google Drive, as described below. Drafts are kept in your browser's storage on your device (IndexedDB), where only you can reach them; we cannot see, store or recover them. You can delete a draft in the app, or all of them by clearing this site's data in your browser. If you let the app show the fonts on your device, the list stays in your browser: it is not stored, and it is never sent to us or anyone else.
Google Drive
If you choose Open from Google Drive or Save to Google Drive, your browser loads Google's sign-in and file picker from Google and asks you to allow Scissor Office to see and save only the files you open or save with it (Google's drive.file permission). Files then go directly between your browser and your own Google Drive; they never pass through our servers. The access Google gives your browser is kept in the tab's memory only and is forgotten when you close the tab. We do not receive your Google account details, your files or a list of them. Google's own privacy policy applies to your use of Google Drive. You can remove Scissor Office's access at any time in your Google Account, under Security, Third-party apps.
Scissor Office's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
AI models
If you download a model in the AI panel, the model files come from this site and are stored on your device in a space that the Scissor tools share (ai.scissor.studio). That space holds only model files: it never receives your documents or what you ask the AI, sets no cookies and contacts no server. Deleting a model deletes it from every Scissor tool. In Safari, and on iPhone and iPad, each tool keeps its own copy.
What our server sees
Like any website, our server and content delivery network receive standard request information when your browser downloads the site's pages and files: IP address, requested address, time, and browser user agent. This is used only to operate and secure the service and to count aggregate traffic, and is not combined with other data or sold. Legal basis: our legitimate interest in delivering and securing the site (Art. 6(1)(f) GDPR).
Usage statistics
To see which parts are used and fix what breaks, the site counts page views and a few events: whether a document was started, opened, exported or saved to Drive, in which format, and how long an action took. Each count records the page address, the site that referred you (on your first page), your browser's language, the window width, your browser, operating system and device type, and your country, which our network provider Cloudflare derives from your IP address. To count visitors without a cookie, our customer care service uses your IP address and browser identifier to make a short code that changes every day. The IP address itself is not stored. No document titles, contents or file names are included. The counts carry no identifier that follows you from day to day unless you accept the cookie described below. They go to our own customer care service on this domain, never to an analytics company. Legal basis: our legitimate interest in knowing which features are used and in fixing errors (Art. 6(1)(f) GDPR).
Error reports
When the app runs into an unexpected error, the page sends our own customer care service a short technical report: the kind of error, where in our code it happened, the page, your browser and the version of the site, and your country and the same short code. It never contains the error message itself, which could hold part of a document, nor any document contents. Legal basis: our legitimate interest in fixing errors (Art. 6(1)(f) GDPR).
Feedback, bug reports and contact messages
If you choose to rate the app, report a problem or send us a message, we receive what you type, the page you were on, the name of your browser and operating system and, if you add them, your email address and a screenshot. Your documents are never attached. We use this only to answer you and improve Scissor Office, and never share or sell it. Legal basis: answering your request (Art. 6(1)(b) GDPR) and our legitimate interest in improving the service (Art. 6(1)(f) GDPR).
Cookies and storage
If you accept, Scissor Office sets one cookie of its own, logsure_id, to count returning visitors for up to 13 months. A second cookie, logsure_consent, remembers your choice for the same time, whether you accept or reject, so you are not asked on every page. If you reject, or are not asked, no visitor cookie is set. If you reject after accepting, the visitor cookie is deleted, and so are the visits counted with it. Neither cookie contains your documents or is shared with anyone, and you can change your choice at any time with Cookie settings in the footer. The app works the same whatever you choose. We also count how many visitors accept or reject, with their country but without storing an address or any identifier, to keep a record of consent choices. Scissor Office uses no advertising or third-party trackers.
Legal basis for logsure_id: your consent (Art. 6(1)(a) GDPR, §25(1) TDDDG). You can withdraw it at any time under Cookie settings.
Your browser also keeps the site's own files so the app works offline, your drafts (IndexedDB, as described above), and in local storage whether you dismissed the language suggestion or the app's privacy note and your light or dark choice. This storage and the logsure_consent cookie are strictly necessary for functions you asked for (§25(2) No. 2 TDDDG).
Service providers
The site is delivered through Cloudflare, Inc. (content delivery and protection against attacks). Cloudflare may process your IP address in the USA; it is certified under the EU-US Data Privacy Framework. Our customer care service, and a copy of the site, run on servers of Hetzner Online GmbH in Nuremberg, Germany. If you use Open from Google Drive or Save to Google Drive, your browser connects to Google directly, as described above.
How long we keep data
Usage counts and error reports: about 25 months. Feedback, bug reports and messages: until two years after they are resolved. Screenshots: 6 months. Spam: 30 days. Cookies: 13 months. Server and network logs: only as long as needed to deliver and secure the site. Your drafts stay in your browser until you delete them.
Your rights
You can ask for access to your data, and for it to be corrected, deleted, restricted or handed over in a portable format. You can withdraw consent at any time. This does not affect processing before you withdraw it.
Right to object: where we rely on legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).
To use these rights, or with any question about privacy, write to or contact us. You can also complain to a data protection authority, in particular the one where you live or work, or the one responsible for us: the Berliner Beauftragte für Datenschutz und Informationsfreiheit.