Welcome! At Bedtime Stories, we keep things simple when it comes to your family's privacy. This policy explains exactly what we need to create magical, personalized bedtime stories for your child.
The simple truth: We only need your child's age range (3-4, 5-6, 7-8, or 9-12 years) to create age-appropriate stories. Character names are completely optional. Everything else is just the technical stuff needed to run the service.
For Your Account:
For Your Stories:
Like any website, we automatically collect some technical information to keep things running smoothly:
Here's exactly what we do with your information:
AI Processing Note: Story text is generated using Anthropic Claude for creating personalized narratives. Story images are created through OpenAI using only story-related prompts. Text-to-speech conversion is handled by ElevenLabs for high-quality voice generation. AI content safety is monitored through Helicon AI services. Our backend services running on Hetzner European servers coordinate these AI services and store the final content in Supabase. We ensure all AI partners maintain strict data protection standards.
Bot Protection: We use Cloudflare for DNS and Turnstile captcha protection to protect against automated abuse and ensure platform security. Turnstile processes technical information (IP address, browser signals, TLS fingerprint) to distinguish humans from bots. This data is processed by Cloudflare Inc. (US) under their privacy policy. Turnstile does not use traditional cookies and collects minimal data solely for security purposes.
Analytics & Cookies: We use PostHog (European data region) for analytics and product improvement. PostHog uses cookies and local storage to track user sessions, feature usage, and platform performance. You can manage your cookie preferences and opt out of analytics tracking at any time. PostHog data is processed under their privacy policy with GDPR-compliant safeguards. For more details, see our Cookie Policy.
Error Monitoring: We use Sentry to detect and fix technical issues. Sentry does not use cookies and we have disabled personal data collection.
Email Communications: Transactional emails (account confirmations, password resets) are sent via ZeptoMail, a GDPR-compliant email service hosted in Europe.
Our service is designed exclusively for parents and guardians. Children under 13 should not create accounts or provide personal information directly. Only parents or legal guardians should sign up and use this service on behalf of their children.
No Direct Collection from Children: We do not knowingly collect personal information directly from children under 13. All child-related information (names, age ranges) is provided by parents through their adult accounts.
Parental Consent & Control: By creating an account and providing your child's information, you (as the parent/guardian) are giving consent for us to use that information to create personalized stories. You maintain complete control and can review, modify, or delete your child's data at any time.
We comply with children's privacy regulations including:
If we discover we have received personal information directly from a child without proper parental consent, we will delete it immediately.
Here's the simple truth: We only use the character names and age ranges you choose to create personalized stories. That's it!
Your data is stored primarily on European servers through Supabase's European data region, ensuring GDPR compliance and strong data protection standards. This includes our database, object storage, and authentication systems.
We implement enterprise-grade security measures including encryption, access controls, and regular security audits. For detailed technical security information, please see our comprehensive Security Policy.
We work with trusted partners who maintain strict data protection standards:
All partners maintain GDPR-equivalent protection standards through data processing agreements and appropriate safeguards.
We do not sell, rent, or trade your personal information. We may share limited data only in these circumstances:
You can delete your stories or entire account anytime directly from your account settings. When you delete data, it's removed from our systems within 30 days. No need to contact us - you're in complete control!
We only keep data as long as you want us to. Payment records are retained for 7 years as required by Dutch tax law, and analytics data is anonymized after 2 years for service improvement.
We may update this Privacy Policy to reflect changes in our practices, legal requirements, or service features. When we make material changes:
Have privacy questions or concerns? I'm here to help!
Email Me
Contact Form
Visit our contact pageRelated: Security Policy | Cookie Policy
This policy is effective as of the date listed above and applies to all users of Bedtime Stories.