Privacy
This policy is a draft. Memberships remain closed until the final business and legal details are approved.
Only what is needed.
The site is designed for a grown-up account. We do not ask for a child’s name, age, photograph, voice, school or location, and do not create child profiles or viewing histories.
Account and payment providers.
Clerk handles grown-up authentication. Stripe handles payment details, subscription billing and cancellation. Render hosts the site and its database. Cloudflare R2 stores the story films. Cloudflare Turnstile checks that waitlist sign-ups come from a person rather than an automated script; it runs in your browser when you use the form and does not use advertising cookies. Our membership database stores the adult account identifier and associated billing identifier, not card details.
The waitlist.
If you join the waitlist we store your first name, last name, email address, the wording you agreed to and when you agreed. We use them only to tell you when the story club opens. We don’t share them or use them for advertising. You can ask us to remove you at any time, and we delete your details. We don’t ask for anything about your child.
Anonymous totals.
To understand whether the stories are working, the site counts page visits and whether the story player was seen, started and finished, as daily totals only. There are no tracking cookies, visitor IDs or advertising pixels, and nothing is linked to you or your child.
Cookies and storage.
Sign-in uses necessary authentication cookies. The story player does not load advertising or behavioural analytics. Authentication services load when a grown-up chooses to sign in. Infrastructure providers may process technical connection information to operate and protect the service.
Deletion and retention.
Before launch we must publish the controller’s identity and contact, lawful bases, processors and international transfer safeguards, retention periods, and a working access/deletion request route. Minimal webhook delivery receipts are retained for 30 days. Statutory billing records may need to be retained separately.
Your rights.
The final notice will explain access, correction, erasure, restriction, objection, portability where applicable, and your right to complain to the UK Information Commissioner’s Office. This draft is not a complete production privacy notice.