Privacy Policy
Last updated: April 13, 2026
1. Information We Collect
We collect information you provide directly, such as your name, email address, and uploaded content. We also collect usage data and analytics to improve our services. Viewer IP addresses are anonymized before storage.
2. How We Use Information
We use your information to provide and improve ThinkInStories, communicate with you, process payments, and ensure the security of our platform. We do not sell your personal data.
3. Cookies and Storage
We use the following categories of storage:
- Essential: Local storage tokens required for authentication.
- Analytics: Session IDs stored in sessionStorage for anonymous usage analytics.
- Preferences: Theme preference stored in localStorage.
You can manage cookies and local storage through your browser settings.
4. Data Processors
We rely on the following subprocessors to operate our platform:
| Processor | Purpose | Location |
|---|---|---|
| Render | Cloud hosting, managed PostgreSQL, Redis | United States |
| MinIO / AWS S3 | Object storage for media files | Configurable (default: US) |
| Stripe | Payment processing | United States |
| Sentry | Error monitoring and performance | United States |
| SMTP provider | Email delivery (password resets, notifications) | Configurable |
| Optional OAuth authentication | United States | |
| OpenAI | Optional AI image captioning and tagging | United States |
5. International Data Transfers
If you are located in the EEA, UK, or Switzerland, your personal data may be transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) under GDPR Article 46 to ensure an adequate level of protection for these transfers.
6. Data Protection Officer (DPO) / DPA Contact
For data protection inquiries, to request a Data Processing Addendum (DPA), or to exercise your privacy rights, please contact us at privacy@thinkinstories.com.
7. Data Security
We implement reasonable security measures to protect your data, including encryption at rest and in transit. However, no method of transmission over the Internet is completely secure.
8. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, delete, restrict processing, object to processing, or request portability of your personal data. You can export or delete your account and data from your account settings at any time.
9. Data Retention
We retain your data as long as your account is active or as needed to provide our services. Deleted accounts are soft-deleted immediately and permanently purged after 30 days.
10. Children's Privacy
ThinkInStories is not intended for children under 13. We do not knowingly collect personal information from children under 13.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes by posting the new policy on our website.
12. Contact Us
If you have questions about this Privacy Policy, please contact us at support@thinkinstories.com.