1. Introduction

Storyfall ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, share, and protect information when you use our Platform.

2. Information We Collect

Information You Provide

• Account Information: Username, email address, display name, and profile information
• Content: Stories, characters, reviews, and other content you create
• Payment Information: Processed through Stripe; we do not store credit card numbers
• Communications: Support tickets, emails, and feedback you send us

Information Collected Automatically

• Story Interaction Data: When logged in, we collect reading progress, choices made, time spent on scenes, completion rates, and similar gameplay metrics to improve stories and help authors understand reader engagement
• Usage Data: Pages viewed, features used, time spent on the Platform
• Device Information: Browser type, operating system, device type
• IP Address: For security and fraud prevention purposes only
• Essential Cookies Only: We use strictly necessary cookies for authentication (keeping you logged in) and storing your theme preference. We do not use tracking, advertising, or analytics cookies

3. Cookie Policy & No Banner Required

We do not display cookie consent banners because we only use strictly necessary cookies that are essential for the Platform to function:

• Authentication cookies: Required to keep you logged in securely
• Theme preference: Remembers your light/dark mode choice (optional, enhances user experience)
• Security cookies: Essential security measures to protect your account

Under GDPR and other privacy laws, these essential cookies do not require consent as they are necessary for providing the service you requested. We do not use any third-party tracking, advertising, or analytics cookies.

4. How We Use Your Information

We use your information to:

• Provide and improve the Platform
• Process payments and manage subscriptions
• Send important account notifications
• Respond to support requests
• Detect and prevent fraud or abuse
• Analyze usage patterns to improve user experience
• Provide authors with aggregated analytics about their stories
• Comply with legal obligations

5. Information Sharing

We do not sell your personal information. We may share information in the following circumstances:

Service Providers

• Stripe: Payment processing and author payouts
• Resend: Transactional email delivery
• Tigris (Fly.io): File storage for avatars and cover images
• Analytics Services: Anonymous usage statistics

Other Circumstances

• With your consent
• To comply with legal obligations or court orders
• To protect rights, property, or safety
• In connection with a business transfer or acquisition

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit using HTTPS
• Secure password hashing using bcrypt
• Regular security updates and monitoring
• Limited access to personal information by employees
• Secure third-party services for payment processing

7. Your Rights and Choices

Account Management

• Access: View your information through your account settings
• Update: Edit your profile and preferences
• Delete: Request account deletion through support
• Export: Download your stories and content

Communications

You can opt out of promotional emails through your notification settings. Essential account notifications cannot be disabled.

Cookies

You can control cookies through your browser settings, though some Platform features may not function properly without them.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide services. After account deletion:

• Personal information is deleted within 30 days
• Some information may be retained for legal or security purposes
• Anonymized data may be retained for analytics
• Content you've sold may remain accessible to purchasers

9. Children's Privacy

The Platform is not intended for children under 13. We do not knowingly collect information from children under 13. If we learn we have collected such information, we will delete it promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in accordance with applicable law.

11. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to:

• Know what personal information we collect
• Request deletion of personal information
• Opt out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising privacy rights

12. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR), including:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: Processing necessary to provide our services (account management, story access, payments)
• Legitimate Interests: Story interaction analytics, fraud prevention, improving our services, and providing aggregated insights to authors
• Legal Obligation: Compliance with applicable laws
• Consent: Where you have explicitly agreed (e.g., optional marketing communications)

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or Platform notification. The "Effective Date" at the top indicates when the policy was last updated.

14. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights, please contact us through the Support page or email privacy@storyfall.com.