Privacy policy
Who is responsible for your data?
Star Catcher Stories is operated by Swift Flows, the data controller. Address: Hammarskjöldlaan 319, 2286 HG, Rijswijk, The Netherlands. Contact: info@starcatcherstories.com.
Star Catcher Stories is operated for parents and guardians. We collect only the information needed to personalise and deliver our stories and books: parent email, billing identifiers via Stripe, and child profile details you provide (name, age, interests, friend names as fiction characters).
Free previews and email choices
We use your email address, book details and the personal details you provide to create, save and deliver the preview you request, and to take steps at your request before a purchase. We rely on performance of a contract or pre-contractual steps for this service. We also process limited technical and security records for our legitimate interests in preventing abuse and keeping the service reliable. You need to provide an email to receive a preview; optional reminders are not required.
Only if you tick the optional box will we send up to three promotional reminders about that preview and ordering that book, scheduled over six days. The legal basis is consent. This does not subscribe you to a newsletter or unrelated offers. Each reminder has an unsubscribe link that needs no account. You can also contact us to withdraw consent. Withdrawal does not affect earlier lawful processing or essential emails about a requested preview, payment, book completion or delivery.
Service providers and international processing
Resend delivers our emails; Supabase stores book and customer records; Vercel hosts the service and processes technical logs. OpenAI and, depending on the story service in use, Groq process the relevant story details or images to create and check the book. Stripe handles payments. For printed orders, the selected printer and delivery services receive the files and delivery details needed to fulfil the order. Some providers may process data outside the EEA or UK, including in the United States. Contact us for information about the destinations, applicable transfer safeguards and how to obtain a copy. We do not sell personal data.
How long we keep preview information
Unpaid drafts and their uploaded photos and artwork are scheduled for deletion seven days after the draft was created, unless the draft is a prepaid gift. The scheduled cleanup may run shortly after that deadline. Email-choice records contain the address, time, wording, language and notice version, plus any withdrawal time; we keep these for up to 90 days to demonstrate the choice and honour withdrawals, then delete them in scheduled cleanup. Operational event logs are also scheduled for deletion after 90 days. Purchased books and necessary order records are kept to provide book access, support and meet accounting or legal obligations. You can contact us to request deletion; records needed for legal obligations may be retained.
Photos for personalized books
If you create a personalized book, you may upload a photo of your child. By uploading a photo you confirm you are the child's parent or legal guardian, or have the guardian's permission. We use reference photos to create and check the illustrated characters for your book. The hosting, storage and AI providers described above process them as needed to provide that service. We do not use your photos for our advertising or to train our own models.
Photos and generated artwork are stored in private storage that is not publicly accessible. You can request deletion of your photo and all generated artwork at any time by emailing us — we will remove them within 30 days.
AI-generated content
Stories and illustrations are generated using AI with child-safety rules applied, and you review the book content before it is finalized. Content is fiction for entertainment—not medical, educational, or professional advice.
Analytics and advertising
With your consent, we use privacy-conscious first-party analytics and the Meta Pixel to understand anonymous journeys, campaign performance, and where the book builder can be improved. We store an anonymous session identifier, page paths, general device type, referrer hostname, and campaign tags for up to 90 days. We do not record names, email addresses, form values, photos, keystrokes, or full referrer URLs in analytics events. You can decline analytics without affecting checkout or delivery.
Your privacy rights
You can request access, correction, deletion, restriction or portability where applicable, and object to processing based on legitimate interests. You can withdraw marketing consent at any time. Email info@starcatcherstories.com; we normally respond within one month, with extensions only where the law allows. You may complain to the Dutch Autoriteit Persoonsgegevens or your local data protection authority, including the UK ICO.
Payment processing is handled by Stripe under their privacy policy.