Privacy Policy

Last updated: February 2026

Who We Are

StoryCraft is an English learning platform operated by StoryCraft Taiwan. We help learners improve their reading skills through personalized stories generated at their reading level.

Data We Collect

We collect the following data:

• Profile data (email, display name, age range, country, reading level)
• Stories you create
• Quiz results and learning progress
• Moderation logs
• Analytics data (with consent)

How We Use Your Data

Your data is used for:

• Service delivery and personalization
• Reading level assessment and progress tracking
• Content moderation
• Site analytics (when consented)

Legal Basis for Processing

We process your data under the following legal bases:

• Contract performance (Art. 6(1)(b) GDPR) — core service features including account management, story generation, and progress tracking
• Consent (Art. 6(1)(a) GDPR) — analytics cookies, which you can enable or disable at any time
• Legitimate interest (Art. 6(1)(f) GDPR) — content moderation to ensure a safe learning environment

Data Retention

• Profile data — retained until account deletion
• Stories and quiz data — retained until account deletion
• Moderation logs — retained until account deletion
• Email verification tokens — 24 hours
• Session cookies — 7 days

Your Rights

Under applicable data protection laws, you have the following rights:

• Access your data — data export is available in Settings
• Rectify your data — edit your profile in Settings
• Erase your data — delete your account in Settings
• Data portability — JSON export of your data
• Withdraw consent — analytics toggle in Settings

Third-Party Services

We use the following third-party services:

• Google Analytics 4 — site analytics, consent-gated (only active when you opt in)
• Stripe — payment processing for paid subscriptions
• Google Cloud Platform — infrastructure hosting
• Vertex AI — story generation (no personal data is stored by the AI service)

International Transfers

Your data is processed on Google Cloud Platform infrastructure located in the United States. International transfers are governed by Standard Contractual Clauses (SCCs) to ensure adequate data protection.

Cookies

We use the following cookies:

• Session cookie — essential, expires after 7 days. Required for authentication.
• Analytics consent cookie — preference, expires after 1 year. Records your analytics opt-in/opt-out choice.
• Google Analytics cookies — consent-gated. Only set when you opt in to analytics.

AI & Profiling

Your reading level is determined by assessments and quizzes you complete on the platform. You can retake assessments at any time to update your level. No automated decisions with legal or similarly significant effects are made based on your profile.

Children

We collect age range information at signup. Users under 13 years of age should obtain parental consent before using StoryCraft.

Changes to This Policy

We may update this privacy policy from time to time. We will notify users of material changes via email or an in-app banner.

Contact

For privacy-related inquiries, contact us at privacy@storycraft.app.