When a spell checker analyzes each sentence you type, it is by definition handling raw text, which can sometimes be sensitive. The question deserves to be asked: what happens to this text once submitted to Scribens, and what concrete guarantees surround its processing? To answer this, we need to examine what the tool’s privacy policy details (or does not detail) regarding the retention, location, and GDPR compliance of its processing.
Scribens Privacy Policy: What the Official Document Specifies
Scribens publishes a privacy policy that was last updated on July 15, 2022. The data controller is the company Scribens, a limited liability company registered with the Montpellier Trade and Companies Register, with its registered office located in the same city. This legal establishment in France places the tool under the direct jurisdiction of the GDPR and the CNIL.
The document mentions contact details (mail, email, phone) and specifies the contexts in which personal data is collected: browsing the site, using the free service or the Premium service, exchanges with the company. For a user concerned about the governance of their texts, the fact that the processing is carried out by a French entity subject to European law constitutes a differentiating factor compared to checkers hosted outside the EU.
You can delve deeper into how to secure your data on Geek Nation to better understand the relationship between linguistic correction and the protection of personal information.
Data Retention Period: The Weak Point Shared by Most Checkers
GDPR retention requirements have tightened in recent years. Stating that data is retained “as long as necessary” is no longer sufficient in the eyes of regulatory authorities. The compliance guides published in 2026 (Termsbox, PrivacyTerms.io, DynamicsHub) converge on the same observation: a compliant policy must indicate a duration or criteria for duration by category of data.
Scribens is no exception to a widespread shortcoming in the online linguistic tools sector. The table below compares the typically expected elements in a GDPR retention policy with what Scribens makes public.
| Expected GDPR Criterion | Presence in Scribens Policy |
|---|---|
| Categories of data collected | Mentioned (browsing, account, service) |
| Retention period by category | Not publicly detailed |
| Criteria justifying the duration | Not specified |
| Legal basis for processing | Mentioned |
| Right to erasure | Mentioned |
| Location of the data controller | France (Montpellier) |
The right column shows that the basics are in place, but the absence of a retention table by category remains a gap. This is not unique to Scribens: the majority of online checkers, including those backed by large groups, exhibit the same vagueness regarding durations.
GDPR Compliance of Online Checkers: Three Criteria to Verify Before Use
Rather than relying on a generic statement, three elements allow for a concrete evaluation of the level of protection offered by a spell checker.
- The legal location of the data controller: an entity based in the European Union is directly subject to the GDPR, which simplifies the exercise of rights (access, rectification, erasure). Scribens ticks this box with its headquarters in Montpellier.
- The granularity of the retention policy: the 2026 compliance guides recommend tables detailing each type of data (technical logs, account data, submitted texts) with its retention period and associated reason. A checker that publishes this level of detail offers measurable transparency.
- The processing of texts submitted for correction: is the text stored after analysis, used to train a model, or deleted immediately? This information, rarely highlighted, remains the most discriminating criterion for professional or confidential use.
By cross-referencing these three criteria, a user can distinguish a tool that merely displays the word “GDPR” from a service that truly applies its principles.
Submitted Texts and Technical Logs: Two Categories Not to Be Confused
Browsing data (IP address, browser type, pages viewed) fall under technical logs. Their retention is subject to legal obligations or traffic analysis needs. In contrast, the texts you paste into the correction field constitute usage data directly related to your activity.
The regulatory trend encourages publishers to clearly separate these two categories in their policies, with distinct durations and legal bases. A checker that treats a professional email and a login log under the same retention regime does not meet current transparency expectations.
Scribens Free Version and Premium Version: Different Data Levels
Using Scribens without an account does not require providing an email address or personal identifier. The data collected is limited to browsing information and the text submitted for correction. The Premium version, on the other hand, requires creating an account and therefore the transmission of additional identification data (email, possibly payment data).
This distinction has a direct impact on the scope of data covered by the privacy policy. An occasional user who corrects a paragraph without logging in does not expose the same volume of information as a Premium subscriber who uses the tool daily on professional documents.
For regular use, checking that the right to erasure is indeed applicable to the submitted texts (and not just to account data) remains a relevant precaution. Scribens’ policy mentions this right, but does not explicitly clarify whether it covers analyzed content or only identification information.
The Scribens checker benefits from a French legal grounding that distinguishes it from many competitors hosted outside the EU. Declarative compliance is in place. What is still lacking, as with most players in the sector, is the publication of a detailed retention table by category of data, the only element that would allow for a shift from principle-based compliance to verifiable transparency.
