66 Scripts

Privacy

In effect from September 22, 2026.

66 Scripts is a Bible reader. In this policy, "we" means 66 Scripts. This page says what data the app and this site handle, where that data goes, and who can read it.

The short version

On your device

The app writes your notes and studies to your browser's own storage. In the Mac app and the iPhone app, it writes them to the app's storage on your device. We do not receive a copy.

The app keeps your notes as a log of changes. When you delete a note, the app hides it. The earlier text stays in the log on your device, and in any copy that you sync.

The app also keeps your settings and a list of the last 200 chapters and searches that you opened. The list stays on the device. You can clear it in Settings.

Search runs on your device. Your search words do not go to a server.

Neither this site nor the app sets cookies.

This site and the web app

GitHub Pages hosts this site and the web app at app.66scripts.com. GitHub records the IP address of each visitor for security. The GitHub privacy statement covers that record.

The site and the app load their fonts, scripts and Bible texts from their own address. They load nothing from other companies.

You can add a Bible add-on from a web address that you type. The app then downloads the add-on from that address, and that host sees your IP address. The app keeps the address in your notes log.

The Mac app and the iPhone app

The Mac app contains the Bible text. It is built to check www.66scripts.com for a new version. That check shows GitHub your IP address and your computer type.

The iPhone app does not ask for access to your camera, photos, location or contacts.

Neither app has crash reporting or analytics.

Sync to your own bucket

You can sync to an S3 bucket that you control. The app then sends your notes log straight to that bucket. It does not go through us, and we hold nothing.

You can encrypt the copy in your bucket with a passphrase. Then only a person with the passphrase can read it. If you choose no passphrase, anyone with access to the bucket can read the copy.

The app keeps your bucket keys on your device. If you choose to store the passphrase, the app keeps that on your device too.

The app can make a setup link to move these settings to another device. The link contains your bucket keys and your passphrase. The app does not send the link to a server. Treat the link like a password.

Plus: sync that we run for you

Plus keeps a copy of your notes on our server, so that your devices stay in step. The server is a service that we run ourselves, at sync.66scripts.com, in the United States.

What your account holds

Who can read your notes

Your notes log goes to the server over an encrypted connection. The server encrypts the log before it writes it to disk. The server also holds the key.

This protects your notes if someone steals the disk. It does not protect them from us, from a legal order, or from a person who breaks into the running server. We can read your notes.

If you want nobody but you to read your notes, sync to your own bucket with a passphrase.

A person who can read your email can sign in to your account. There is no second check.

Signing in

You sign in with a six-digit code that we send to your email address. Postmark delivers these emails for us. Postmark receives your email address and the code.

The service keeps a hash of the code for ten minutes. To stop abuse, it keeps your email address and your IP address for one hour each time you ask for a code or use one.

Payments

On the web and on the Mac, you pay through Stripe. You type your card details on Stripe's page, and we never see them. Stripe sends us your Stripe customer number, the dates your subscription is paid through, and notices of payments and refunds.

On the iPhone, you pay through Apple. Apple sends us your purchase's transaction numbers and the date the subscription ends. We never see your Apple ID or your card.

The Stripe privacy policy and the Apple privacy policy cover what they collect.

What the service logs

The service keeps a record of account events. The record shows when you signed up, when you signed in a device, when you paid, and when you synced. It shows the size of each sync, but no note text.

The service writes no email address, sign-in code or token to its error log.

A web proxy runs in front of the service. It logs each request: the time, the address and method, the result, the size, and your IP address. The server keeps one log file of 10 MB for all the apps on it. That file holds about the last few days of requests. Older lines are removed.

We see a summary page of accounts. It shows each email address, plan, paid-through date, payment source, stored size, sync count, last sync time, device count and signup date. It does not show notes.

Backups

We do not make backups of the sync service. If the server fails, we can lose the copy on it. The copies on your devices stay.

When a subscription ends

Sync stops. We keep your notes log on the server, and it comes back if you subscribe again.

Deleting your data

Your notes on a device are yours to delete. Remove the app, or clear the site's data in your browser.

A bucket is yours. Delete the file there.

For Plus, use Delete account in the app's Sync settings while you are signed in. This removes your account from the sync service: your email address, your sign-in tokens and the copy of your notes log. The notes on your own devices stay.

Delete account also cancels a subscription that you pay through Stripe, at once. It cannot cancel a subscription that you pay through Apple. Cancel that one in your Apple account settings.

To stop a subscription and keep your account, use Manage subscription in the app's Sync settings. On the web and on the Mac, it opens Stripe's page, where you can cancel. On the iPhone, it opens your Apple subscriptions. You can also use your Apple account settings.

What we do not do

Changes

When this policy changes, we update this page and the date at the top.