Privacy Policy

Last updated: February 22, 2026

StoryMaker ("we," "us," or "our") operates the StoryMaker application and website at stories-now.app. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information We Collect

Account Information

When you create an account, we collect:

• Name
• Email address
• Password (stored as a secure hash, never in plain text)
• Profile picture (if you sign in with Google)

Family Information

When you set up your family, we collect:

• Family name
• Family member names and usernames
• Family member roles (admin, member, child)

Story Content

When you use our service to create stories, we collect:

• Character names, descriptions, traits, and appearance details
• Story themes and preferences
• Generated story text and illustrations
• Age range preferences and art style selections

Usage Information

We automatically collect:

• Session cookies for authentication
• Error logs for debugging and improving the service

2. How We Use Your Information

We use your information to:

• Create and manage your account
• Generate personalized stories and illustrations for your family
• Maintain story continuity across your family's stories
• Provide age-appropriate content based on your preferences
• Send password reset emails when requested
• Improve our service and fix bugs

3. Third-Party Services

We use the following third-party services to provide our service. Your data may be processed by these services in accordance with their respective privacy policies:

4. Children's Privacy (COPPA Compliance)

StoryMaker is designed for families with children ages 2-11+. We take children's privacy seriously and comply with the Children's Online Privacy Protection Act (COPPA).

Parental Consent

• Only parents or legal guardians may create a StoryMaker account.
• Child profiles are created and managed by the parent/guardian account owner.
• By creating a child profile, the parent or guardian consents to the collection and use of that child's information as described in this policy.

What We Collect from Children

• Username (chosen by the parent)
• Story preferences (age range, art style)
• Story content created using the child's profile

We do not collect email addresses, real names, or other personal information directly from children. Child accounts use a username and password set by the parent.

Parental Rights

Parents and guardians have the right to:

• Review their child's information
• Delete their child's profile and associated data
• Refuse further collection of their child's information
• Request a copy of their child's data

To exercise these rights, contact us at the address listed below.

5. Data Storage & Security

• All data is stored on secure, encrypted servers.
• Passwords are hashed using bcrypt and never stored in plain text.
• All connections use HTTPS/TLS encryption.
• Authentication tokens are signed with secure secrets and expire after 30 days.

While we implement industry-standard security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention & Deletion

• Your data is retained for as long as your account is active.
• You may request deletion of your account and all associated data at any time by contacting us.
• When an account is deleted, all associated family data, stories, characters, and generated images are permanently removed.
• Password reset tokens expire after 1 hour and are automatically cleared.

7. Cookies & Tracking

StoryMaker uses session cookies only for authentication purposes. We do not use:

• Analytics or tracking cookies
• Third-party advertising cookies
• Cross-site tracking

The only cookie we set is a secure, HTTP-only session token that keeps you logged in.

8. Your Rights

You have the right to:

• Access — Request a copy of the personal data we hold about you.
• Correction — Request correction of inaccurate data.
• Deletion — Request deletion of your account and data.
• Portability — Request your data in a portable format.
• Objection — Object to specific processing of your data.

To exercise any of these rights, please contact us using the information below.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the service after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy, your data, or your children's privacy, please contact us at:

• Email: privacy@stories-now.app