Privacy Policy

Effective Date: March 8, 2025 (updated July 10, 2026)

Data Controller: Brigid Scrolls PYT LTD (South Africa)

Information Officer (POPIA): Brigid Scrolls, BrigidScrolls@Gmail.com

Last Reviewed: July 10, 2026

Jurisdiction: South Africa

Data Protection: Your privacy matters. Please review our Terms & Conditions for information on how we manage our products and services.

1. Overview

Brigid Scrolls PYT LTD ("we," "us," "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our products and services, including:

• The Scrolls MD mobile application
• The Biohazard Ward video game
• The Patient 447 prequel game
• The Diagnostic Ward standalone 2D game
• Our website (brigidscrolls.github.io)
• Our email newsletter
• Any other products or services we offer

Key Principles:

• We collect minimal personal data — only what you voluntarily provide
• We do not sell, rent, or trade your personal data
• We use your data only for the purposes stated in this policy
• We implement industry-standard security measures to protect your data
• We comply with all applicable privacy laws including POPIA, GDPR, CCPA, and PIPEDA

2. Information We Collect

2.1 Scrolls MD App

Scrolls MD is primarily offline. We do not directly collect, store, or request any personal information through the app.

However, the app requires internet connectivity for:

• Ad delivery (Google AdMob) — if enabled
• In-app purchases (Google Play Billing)

All in-app purchases are processed securely through the Google Play Billing system. We never have access to your billing or payment details.

Google AdMob: AdMob may automatically collect limited, non-personal information including:

• Device identifiers (for ad delivery and fraud prevention)
• Approximate location (for regional ad relevance)
• App usage statistics related to ad impressions or clicks

This data is collected and processed directly by Google, not by Brigid Scrolls. We have no access to this data.

2.2 Biohazard Ward, Patient 447 & Diagnostic Ward

All games are completely offline. They do not connect to the internet except for optional platform features (if you purchase there).

Save files are stored locally on your device. We have no access to your save data. No telemetry, no analytics, no performance monitoring.

Patient 447: Distributed exclusively on Itch.io. Itch.io may collect data according to their Privacy Policy. We do not receive this data.

Biohazard Ward: If purchased on Steam, Steam may collect data according to Valve's Privacy Policy (achievements, playtime, etc.). We do not receive this data.

Diagnostic Ward: This game is offline. No data is collected.

2.3 Website (brigidscrolls.github.io)

We do not use analytics cookies or tracking scripts.

However, GitHub Pages, which hosts our website, may collect standard server logs including:

• IP address
• Timestamp of visit
• Pages visited
• Browser type and version
• Referrer URL

This data is collected and processed by GitHub in accordance with GitHub's Privacy Statement. Brigid Scrolls does not have access to this data and does not use it for any purpose.

2.4 Books (Amazon, IngramSpark & other retailers)

We never receive your personal information from Amazon, IngramSpark, or other book retailers.

If you email us about a book, we will only have the information you provide in that email.

2.5 Email Communications (Support)

If you email us at BrigidScrolls@Gmail.com, we receive:

• Your email address
• The content of your message
• Any attachments you include

We retain emails for as long as needed to resolve your inquiry, typically 90 days after resolution.

We will never share your email address with third parties except as required by law.

2.6 Email Newsletter

Brigid Scrolls operates an email newsletter to provide updates on game launches, book releases, and other company news.

What We Collect:

• Email address (provided by you when you sign up)
• Signup date and source (which page you signed up from)
• We do not collect your name unless you voluntarily include it in the form

How We Collect It:

• Through a Google Form embedded on our website (brigidscrolls.github.io)
• You provide this information voluntarily
• We do not use any automated signup or confirmation systems

How We Use It:

• To send you occasional updates about Brigid Scrolls products
• To notify you of new game releases (Biohazard Ward, Patient 447)
• To notify you of new book publications
• We do not sell, rent, or share your email with third parties
• We do not use your email for any automated marketing

How We Store It:

• Emails are collected and stored in Google Forms and Google Sheets
• We manually export the email list from Google Sheets to send updates
• We do not use any third-party email marketing platforms (e.g., Mailchimp, SendGrid)
• Google's Privacy Policy applies to data stored on their servers: https://policies.google.com/privacy

How to Unsubscribe:

• Email BrigidScrolls@Gmail.com with "UNSUBSCRIBE" in the subject line
• We will remove you from our manual email list within 5 business days
• We will not email you again after removal

Data Retention:

• We retain your email address for as long as you remain subscribed to our newsletter
• If you unsubscribe, we will delete your email address from our manual list within 5 business days
• We may retain a record of your unsubscribe request for compliance purposes

3. Third-Party Services

Google AdMob (Scrolls MD only):

• May collect limited information automatically to serve relevant ads and prevent fraudulent activity
• For details on how Google handles this data, review Google's Privacy Policy
• You can manage or opt out of personalized ads on your device:
  • Android: Settings → Google → Ads → Opt out of Ads Personalization
  • iOS: Settings → Privacy → Tracking → Allow Apps to Request to Track
• Brigid Scrolls has no access to or control over any data collected by AdMob

Google Play Billing (Scrolls MD only):

• Processes all purchases securely
• We never see your payment information

Google Forms & Google Sheets (Newsletter):

• We use Google Forms to collect email addresses and Google Sheets to store them
• This data is stored on Google's servers and is subject to Google's Privacy Policy
• Brigid Scrolls manually exports this data for sending updates
• We do not use any automated email marketing platforms

Steam / Itch.io (Biohazard Ward, Patient 447):

• If purchased there, these platforms have their own privacy policies
• Brigid Scrolls is not responsible for their data practices
• We do not receive any data from these platforms

Amazon / IngramSpark (Books):

• These platforms have their own privacy policies
• Brigid Scrolls is not responsible for their data practices
• We do not receive any customer data from these platforms

GitHub (Website):

• GitHub Pages hosts our website
• GitHub may collect server logs as described in GitHub's Privacy Statement
• Brigid Scrolls does not have access to this data

4. How We Use Information

Since Scrolls MD, Biohazard Ward, Patient 447, and Diagnostic Ward do not collect personal information, we do not use your data for analytics, marketing, or tracking.

Any limited information collected by AdMob is used exclusively by Google for:

• Ad-serving
• Performance measurement
• Fraud prevention

Newsletter: Your email address is used only to send you the updates you have requested. We do not use it for any other purpose.

Support Emails: Your email address and message content are used only to respond to your inquiry.

5. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process personal data under the following legal bases:

Google AdMob:

• Consent — for personalized ads
• Legitimate interest — for basic ad delivery and fraud detection

Users may withdraw consent for personalized ads at any time using their device's privacy settings.

Newsletter:

• Consent — you voluntarily signed up via Google Form
• You may withdraw consent at any time by emailing BrigidScrolls@Gmail.com with "UNSUBSCRIBE" in the subject line

Support Emails:

• Legitimate interest — to respond to your inquiry
• You may request deletion of your email at any time

6. POPIA Compliance (South Africa)

Brigid Scrolls adheres to the principles of the Protection of Personal Information Act (POPIA). Our compliance includes:

• Data Minimization: We collect only the minimum data necessary (email addresses for the newsletter)
• Purpose Limitation: Data is used solely for the purpose for which it was collected
• Transparency: We clearly identify our third-party services (Google AdMob, Google Forms, Google Sheets)
• Accountability: We manually manage the email list and respond to unsubscribe requests within 5 business days
• Security: We implement appropriate technical and organizational measures to protect your data
• Information Officer: We have designated an Information Officer as required by POPIA

Information Officer Contact: Brigid Scrolls, BrigidScrolls@Gmail.com

7. Your Rights

Under POPIA, GDPR, CCPA, and other applicable privacy laws, you may have the following rights:

Right	Description	How to Exercise
Access	Request confirmation of whether we process your personal data	Email with "ACCESS REQUEST"
Correction	Request correction of inaccurate or incomplete data	Email with "CORRECTION REQUEST"
Deletion	Request deletion of your personal data	Email with "DELETE MY DATA"
Objection	Object to processing of your personal data	Email with "OBJECTION"
Withdraw Consent	Withdraw consent for third-party data collection	Device settings (for AdMob) or email for newsletter
Unsubscribe	Unsubscribe from our newsletter	Email with "UNSUBSCRIBE"

To exercise these rights, email BrigidScrolls@Gmail.com with the appropriate subject line. We will respond within 15 business days.

Since Brigid Scrolls only collects email addresses for the newsletter, most of these rights apply to that data.

8. Children's Privacy

Our products are intended for specific age groups:

• Scrolls MD: Medical students and adult learners (13+)
• Biohazard Ward & Patient 447: Mature audiences (17+)
• Diagnostic Ward: General audiences (13+)
• Books: General audience (medical content appropriate for students 16+)

We do not knowingly collect or process data from children under 13 years of age (or under 16 in certain jurisdictions).

If you believe a child has provided data through third-party systems (Google Forms, etc.), please contact us immediately and we will delete the data.

COPPA Compliance: We do not knowingly collect personal information from children under 13. Our products are not directed at children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data transmitted to and from our products uses encrypted communication channels (TLS/SSL)
• Access Control: Access to your data is restricted to authorized personnel only
• Minimization: We collect only the minimum data necessary
• Retention Limits: We retain data only as long as necessary
• Third-Party Security: We rely on Google's industry-standard security measures for data stored on Google Forms and Sheets

Newsletter Data: Email addresses collected via Google Forms are stored on Google's secure servers. We manually export this data and store it securely on our devices. We do not share this data with any third party.

Offline Products: The Scrolls MD app, Biohazard Ward, Patient 447, and Diagnostic Ward do not store or transmit personal data. All purchases and advertisements are handled through secure third-party systems.

Data Breach Response: In the event of a data breach that affects your personal data, we will notify you and the relevant authorities within 72 hours, as required by applicable law.

10. Data Transfers

Brigid Scrolls is based in South Africa. However, we use third-party services that may transfer data internationally:

• Google (AdMob, Forms, Sheets): Data may be transferred to the United States and other countries. Google has implemented Standard Contractual Clauses to ensure adequate protection.
• GitHub (Website hosting): Data may be transferred to the United States. GitHub has implemented appropriate safeguards.
• Steam / Itch.io (Game distribution): Data may be transferred internationally. Refer to their privacy policies for details.

By using our products, you acknowledge that your data may be transferred to and processed in countries outside your jurisdiction, which may have different data protection laws.

Safeguards: We ensure that all third-party services we use provide adequate data protection, either through Privacy Shield certification, Standard Contractual Clauses, or other approved mechanisms.

11. Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this Privacy Policy:

• Newsletter Subscriptions: For as long as you remain subscribed. If you unsubscribe, we delete your email within 5 business days.
• Support Emails: For as long as needed to resolve your inquiry, typically 90 days after resolution.
• Unsubscribe Records: We may retain a record of your unsubscribe request for compliance purposes.

We do not retain any other personal data.

12. Data Deletion Requests (Google Play Requirement)

Brigid Scrolls is committed to protecting your privacy and providing you with control over your personal data. This section complies with Google Play's data deletion requirement.

What We Collect:

• Email address (if you subscribe to our newsletter via Google Form)
• We do not collect any other personal data

How to Request Data Deletion:

• Email BrigidScrolls@Gmail.com with "DELETE MY DATA" in the subject line
• Include the email address you used to subscribe
• We will confirm receipt within 5 business days
• We will delete your email address from our manual list within 15 business days
• We will send you a confirmation email once deletion is complete

Data Deletion Process:

• We manually remove your email from our Google Sheets list
• We confirm deletion by replying to your request
• We do not retain any backup copies of your email after deletion

Limitations:

• We do not have access to your Google Play account data or payment information
• We cannot delete data held by third parties (Google, Steam, Itch.io, Amazon, IngramSpark)
• For data held by Google AdMob, refer to Google's Privacy Policy

13. CCPA Compliance (California)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

• Right to Know: You have the right to request information about the personal data we collect, use, and disclose
• Right to Delete: You have the right to request deletion of your personal data
• Right to Opt-Out: You have the right to opt-out of the sale of your personal data (we do not sell data)
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

CCPA Data Categories:

• Identifiers: Email address (if you subscribe to our newsletter)
• Internet/Network Activity: Website usage data (collected by GitHub, not by us)

To exercise your CCPA rights, email BrigidScrolls@Gmail.com with "CCPA REQUEST" in the subject line. We will respond within 45 days as required by law.

14. PIPEDA Compliance (Canada)

If you are a Canadian resident, the Personal Information Protection and Electronic Documents Act (PIPEDA) provides you with additional rights:

• Right to Access: You have the right to access your personal data
• Right to Correct: You have the right to correct inaccurate data
• Right to Challenge: You have the right to challenge our compliance with PIPEDA

To exercise your PIPEDA rights, email BrigidScrolls@Gmail.com with "PIPEDA REQUEST" in the subject line.

15. Cookies and Tracking

Brigid Scrolls does not use cookies or tracking scripts on our website.

However, third-party services we use may set cookies:

• Google AdMob (Scrolls MD): May use cookies for ad targeting. You can manage this through your device settings.
• GitHub Pages (Website): May use cookies for authentication and security. Refer to GitHub's Privacy Policy.
• Steam / Itch.io: May use cookies for authentication and analytics. Refer to their privacy policies.

We do not have access to or control over cookies set by third parties.

16. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements.

Notification of Changes:

• The latest version will always be available at https://brigidscrolls.github.io/privacy-policy/
• Material changes will be notified via:
  • Website banner
  • In-app notification (Scrolls MD)
  • Game update notes (Biohazard Ward, Patient 447, Diagnostic Ward)
  • Email newsletter

Effective Date: The date at the top of this policy indicates when it was last revised. Changes become effective immediately upon posting.

Your continued use of our products after any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the changes, you must stop using our products.

17. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: BrigidScrolls@Gmail.com

Subject Lines for Requests:

• Data Access: "ACCESS REQUEST"
• Data Correction: "CORRECTION REQUEST"
• Data Deletion: "DELETE MY DATA"
• Newsletter Unsubscribe: "UNSUBSCRIBE"
• Objection: "OBJECTION"
• CCPA Request: "CCPA REQUEST"
• PIPEDA Request: "PIPEDA REQUEST"
• General Privacy Question: "PRIVACY"

Address: Port Shepstone, KwaZulu-Natal, 4230, South Africa

Information Officer (POPIA): Brigid Scrolls, BrigidScrolls@Gmail.com

South African Information Regulator: For unresolved complaints, you may contact the South African Information Regulator:

• Website: https://inforegulator.org.za
• Email: complaints@inforegulator.org.za

EEA Data Protection Authority: If you are in the EEA, you have the right to lodge a complaint with your local data protection authority.

By using Brigid Scrolls products, you consent to this Privacy Policy.

This Privacy Policy was last updated on July 10, 2026. The most current version will always be available at https://brigidscrolls.github.io/privacy-policy/.