Legal

Privacy Policy

Last updated: April 2025

Your privacy matters to us. This policy explains what data we collect, why we collect it, and how you can control it. We will never sell your personal information to third parties.

1. Who We Are

Interactable Stories ("we", "our", "us") operates the website and platform at interactablestories.com and app.interactablestories.com. If you have any questions about this policy, contact us at [email protected].

2. Information We Collect

We collect information you provide directly and information generated by your use of the service:

Account data: Your email address and encrypted password when you register.
Usage data: Story choices, progress, and session activity to personalise your experience.
Device & browser data: IP address, browser type, operating system, and referring URL for security and analytics purposes.
Communications: Any messages you send us via email or support channels.

We do not collect payment card details directly. Payments are handled by a PCI-compliant third-party processor.

3. How We Use Your Information

To create and manage your account.
To deliver and personalise the interactive storytelling experience.
To send transactional emails such as password resets or account notices.
To improve the platform through aggregated, anonymised analytics.
To detect and prevent fraud or security incidents.
To comply with legal obligations.

We will not send you marketing emails without your explicit consent.

4. Cookies & Tracking

We use essential cookies required for authentication, including tokens stored in your browser. We also use a self-hosted analytics tool, Umami, to collect anonymous, aggregate page-view statistics without cross-site tracking or personally identifiable information.

We do not use advertising cookies or third-party tracking pixels.

5. Data Sharing

We do not sell, rent, or trade your personal data. We may share data only with:

Service providers such as hosting or email partners that process data on our behalf under confidentiality obligations.
Law enforcement or regulators when required by applicable law.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days unless a longer retention period is required by law.

7. Your Rights

Depending on your location, you may have rights that include:

Accessing the personal data we hold about you.
Requesting correction of inaccurate data.
Requesting deletion of your account and data.
Objecting to or restricting certain processing.
Data portability, meaning receiving your data in a machine-readable format.

To exercise these rights, email us at [email protected].

8. Security

We use industry-standard security measures including HTTPS encryption, hashed passwords, and JWT-based authentication. No system is completely secure, so please use a strong, unique password and contact us immediately if you suspect unauthorised access to your account.

9. Children's Privacy

Interactable Stories is not directed at children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated date. Continued use of the service after changes take effect constitutes acceptance of the revised policy.

11. Contact Us

Questions or concerns? Reach us at [email protected].