Privacy at Scaff.

Your work in the desktop app

Scaff works in the project folder you choose. The desktop harness keeps its session data and model credentials on your computer, under its local data directory. Scaff does not send your project files or model API keys to scaff.design as part of its normal desktop operation.

Services you connect

When you use an AI model, prompts and relevant project context are sent to the provider you selected. Optional connections such as Figma, Paper, GitHub, Linear, and Jira exchange data with those services when you use them. A handoff sends the code changes, description, screenshots, and recordings you review to the GitHub repository you choose. Browser tools load the pages you ask Scaff to open. Those services have their own privacy practices.

Review links

When you share a review link, the desktop app serves your running prototype to reviewers through a Cloudflare tunnel. scaff.design stores only the link's id, the tunnel address it points to, and when it expires, at most 30 days later. The access token sits in the part of the link that browsers do not send to servers. Reviewers' names, comments, and cursors go to your desktop app, not to scaff.design, and a reviewer's browser remembers the name they typed. You can stop sharing or revoke a link at any time.

Your website account

You can use the core desktop app without creating a scaff.design account. If you create one, we store the name, email address, password credential, and session records needed to sign you in. Session records may include your IP address and browser user agent. Authentication cookies keep you signed in; sessions are configured to expire after 30 days.

Website analytics

scaff.design measures visits with PostHog without cookies: PostHog stores nothing in your browser and keeps no profile of you. It records the pages you view, the links and buttons you click (such as which installer you download), the site that sent you, your browser, operating system, screen size, and approximate location, how fast pages load, and errors the site runs into. Nothing is linked to your website account, and text you type into forms is not recorded. To count visitors without an identifier, PostHog combines your IP address and browser details with a value that changes every day and is then deleted, so visits on different days cannot be linked. This data goes through scaff.design to PostHog, which stores it in the EU.

Feeds and update checks

The desktop app requests the public Discover feeds (What's New, Jobs, and Events) so they can stay current. These requests include the Scaff version in the user agent and no unique installation identifier. As with ordinary web traffic, the receiving server can see the request IP address and standard HTTP details. Scaff also checks GitHub Releases for app updates.

Usage analytics and crash reports

The desktop app sends anonymous usage data and crash reports to help us improve Scaff. Both are on by default, and you can turn either off at any time in Settings › Privacy. Usage data records which features are used, such as starting a chat or sharing a review link, along with the app and Harness versions, your operating system, startup time, and update results. It is tied to a random installation ID created on your computer, which Settings › Privacy shows. Crash reports add the error message and stack trace, after Scaff removes your home folder, user name, open project folder, links, and credentials. When a chat stops on an error, they include that one-line error, such as a network failure, with the names of servers other than the AI providers' hidden. Neither includes your files, prompts, designs, chat content, name, or email address.

The app sends this data through scaff.design to PostHog, our analytics provider, which stores it in the EU. If you turn crash reports off, you can still send a single report when something fails at startup. If you turn usage data off, Scaff notes on your computer when you first reach steps such as opening a project or finishing a chat, and sends those dates only if you turn it back on. To have your usage data deleted, contact us with the installation ID.

Storage and your choices

Project files and local app data remain on your computer until you remove them. Website account records remain while the account is active; there is no automatic account deletion period in the current app. Website hosting and database providers process account data to run the service. You can ask for access, correction, or deletion of your website account data through the contact route below.

Agreeing to this policy

By downloading, installing, or using the Scaff desktop app, you agree to this policy, including the usage data and crash reports described above. You can turn either off at any time in Settings › Privacy. If you do not agree, do not download or use Scaff. When this policy changes, the date at the top changes too, and using Scaff after that means you accept the updated policy.

Contact and changes

For privacy questions or account data requests, contact the Scaff maintainers through the project repository. Do not post private account details in a public issue. We will update this page when our data practices change.