Back to home

Privacy Policy

Last Updated: February 12, 2026

1. Introduction

This Privacy Policy explains how KidzStory ("we," "our," or "us") collects, uses, and protects your personal information when you use our website and services. We are committed to protecting your privacy and being transparent about our data practices.

KidzStory is operated from Austria and complies with the EU General Data Protection Regulation (GDPR) and the U.S. Children's Online Privacy Protection Act (COPPA).

2. Children's Privacy & COPPA Compliance

Because KidzStory creates content for children, we take children's privacy extremely seriously. Here's what you need to know:

2.1 Our Service Is for Parents, Not Children

KidzStory is designed to be used by adults — parents, guardians, and gift-givers — on behalf of children. We do not allow children under 13 to create accounts or use our service directly.

2.2 What We Do NOT Do

  • We do not knowingly collect personal information from children under 13 (or under 16 in the EU)
  • We do not allow children to create accounts, make purchases, or interact with the service
  • We do not use children's information for advertising, profiling, or behavioral targeting
  • We do not share children's data with third parties for marketing purposes
  • We do not serve targeted advertising to children

2.3 Information About Children Provided by Parents

When a parent creates a personalized book, they may provide their child's name, age, and appearance details. This information is:

  • Used solely for generating the personalized book
  • Never used for marketing, advertising, or profiling
  • Never shared with third parties beyond what's needed for book creation
  • Deleted from our active processing systems after the book is generated

2.4 Parental Rights

Parents and guardians have the right to:

  • Review any personal information we hold related to their child
  • Request deletion of their child's information at any time
  • Refuse further collection or use of their child's information
  • Withdraw consent previously given for data processing

To exercise these rights, email us at privacy@kidzstory.com. We will respond within 48 hours.

2.5 If We Discover a Child Has Provided Information

If we learn that a child under 13 has provided us with personal information without verified parental consent, we will delete that information as quickly as possible. If you believe a child has submitted information to us, please contact us immediately at privacy@kidzstory.com.

3. Information We Collect

3.1 Information You Provide

When you use our service, we collect:

  • Account Information: Name, email address, and password when you create an account
  • Child Character Details: Name, age, and appearance details for story personalization (see Section 2.3 above)
  • Uploaded Photos: Photos used for AI character generation (deleted after processing)
  • Story Preferences: Theme choices and customization options
  • Payment Information: Processed securely by Stripe; we do not store full payment card details

3.2 Information Collected Automatically (With Consent)

With your consent, we collect:

  • Device Information: Browser type, operating system, device type
  • Usage Data: Pages visited, features used, time spent on pages
  • Technical Data: IP address (anonymized), referral source

Important: We only collect this data if you accept cookies via our cookie consent banner. If you decline, no tracking data is collected.

4. How We Use Your Information

We use your information to:

  • Create personalized children's books featuring your child
  • Process payments and fulfill orders
  • Send order confirmations and updates
  • Improve our service based on usage patterns (with consent)
  • Measure advertising effectiveness (with consent — see Section 5)
  • Prevent fraud and ensure platform security
  • Comply with legal obligations

We will never sell your personal information to third parties.

5. Analytics & Advertising Tracking

5.1 PostHog Analytics (EU-Hosted)

We use PostHog for website analytics. When you accept cookies:

  • PostHog collects anonymized usage data
  • Data is stored in the European Union
  • We use this to understand how visitors use our site and improve the experience

5.2 Meta Pixel (Facebook/Instagram)

We use the Meta Pixel (provided by Meta Platforms, Inc.) to measure the effectiveness of our advertising on Facebook and Instagram. When you accept cookies, the Meta Pixel may:

  • Track page visits and certain actions on our site (such as completing a purchase)
  • Help us understand which ads lead people to KidzStory
  • Allow Meta to match your visit with your Facebook/Instagram profile for ad measurement
  • Enable us to create "lookalike" or "custom" audiences for advertising

What this means for you:

  • Meta may receive data about your visit, including your IP address, browser information, and the pages you viewed
  • This data is subject to Meta's Data Policy
  • Meta acts as a joint controller for this data under GDPR

What this does NOT mean:

  • We do not use the Meta Pixel to track children or serve ads to children
  • The Meta Pixel only fires for adult users who have accepted analytics cookies
  • We do not share any child character details, photos, or book content with Meta

5.3 Opting Out of Tracking

You can opt out of all analytics and advertising tracking by:

  • Declining cookies via our cookie consent banner
  • Resetting your cookie preferences using the button at the bottom of this page
  • Using browser extensions like uBlock Origin or Meta's Off-Facebook Activity controls
  • Adjusting your ad preferences directly on Facebook or Instagram

When you decline cookies, no analytics or advertising tracking occurs. Your experience on KidzStory remains fully functional.

6. Cookie Policy

6.1 What Are Cookies?

Cookies are small text files stored on your device that help websites remember information about your visit.

6.2 Cookies We Use

Essential Cookies (Always Active):

  • Authentication and session management
  • Security features (CSRF protection)
  • Basic site functionality
  • Cookie consent preference storage

These cookies are necessary for the site to work and cannot be disabled.

Analytics & Marketing Cookies (Require Your Consent):

  • PostHog: Understanding site usage, improving user experience
  • Meta Pixel (_fbp, _fbc): Advertising measurement and optimization
  • These cookies are only placed after you accept via our cookie consent banner

6.3 Managing Your Cookie Preferences

You can change your cookie preferences at any time:

  • Use the "Manage Cookie Preferences" button at the bottom of this page
  • Clear your browser cookies and revisit our site
  • Use your browser's built-in cookie settings
  • Use browser extensions that block third-party cookies

7. Data Sharing

We share your information only with:

7.1 Service Providers

  • AI Services: For generating book illustrations (photos are processed and deleted)
  • Stripe: For secure payment processing
  • PostHog: For analytics (EU-hosted, only with consent)
  • Meta Platforms: For advertising measurement (only with consent, adults only)
  • Email Provider: For transactional emails only

7.2 Legal Requirements

We may disclose information when required by law or to protect our legal rights.

8. Data Security

We implement industry-standard security measures:

  • All data transmitted via HTTPS encryption
  • Secure authentication and session management
  • Regular security reviews
  • Limited employee access to personal data
  • Photos encrypted at rest and deleted promptly after processing

9. Data Retention & Deletion

  • Account Data: Retained while your account is active; deleted within 30 days of account closure
  • Uploaded Photos: Deleted immediately after book generation
  • Child Character Details: Removed from active processing systems after book creation; may persist in encrypted backups for up to 30 days
  • Generated Books: Stored for your access until you delete them or close your account
  • Analytics Data: Anonymized and retained for up to 12 months
  • Meta Pixel Data: Subject to Meta's data retention policies (typically 180 days for conversion data)

9.1 How to Request Data Deletion

You can request deletion of your data at any time by:

  • Deleting your account through your account settings
  • Emailing privacy@kidzstory.com with the subject "Data Deletion Request"

We will process deletion requests within 30 days and confirm completion via email.

10. Your Rights

10.1 Under GDPR (EU/EEA Residents)

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate information
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Limit how we process your data
  • Portability: Receive your data in a portable format
  • Objection: Object to certain processing activities
  • Withdraw Consent: Withdraw consent at any time (e.g., for analytics)

10.2 Under COPPA (U.S. Residents with Children)

Parents and guardians have additional rights regarding their children's information — see Section 2.4 above.

10.3 California Residents (CCPA)

California residents have the right to know what personal information is collected, request its deletion, and opt out of its sale. We do not sell personal information.

To exercise any of these rights, contact us at privacy@kidzstory.com.

11. International Transfers

Your data may be processed by service providers outside the EU (including Meta Platforms in the U.S.). When this occurs, we ensure appropriate safeguards through:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions by the European Commission
  • The EU-U.S. Data Privacy Framework (where applicable)
  • Other legally recognized transfer mechanisms

12. Changes to This Policy

We may update this Privacy Policy periodically. We will:

  • Update the "Last Updated" date
  • Notify you of significant changes via email
  • Post the updated policy on our website

Material changes (especially those affecting children's data or tracking practices) will be communicated with at least 30 days' notice.

13. Contact Us

For privacy-related questions or to exercise your rights:

Email: privacy@kidzstory.com

Data Controller: KidzStory Location: Austria, European Union

For COPPA-related concerns, you may also contact the U.S. Federal Trade Commission at ftc.gov/complaint.

By using KidzStory, you acknowledge that you have read and understood this Privacy Policy. If you are a parent or guardian creating books for your child, you consent to the processing of your child's information as described in Section 2.

Cookie Preferences

You can change your cookie preferences at any time. This will affect analytics tracking only - essential cookies required for the site to function cannot be disabled.

No preference set