Storybook Sanctum

Privacy Policy

Last updated: June 18, 2026

1. Information We Collect

1.1 Information You Provide

1.2 Information Collected Automatically

1.3 Our Privacy Commitments

2. How We Use Your Information

We use the information collected to:

• Process your photographs through AI systems to generate character avatars and illustrations
• Generate story narratives from your text prompts
• Deliver your completed book and store it so you can access it again
• Create and manage your account, verify your email, and sync your library across your devices (if you choose to create an account)
• Manufacture and ship printed books you order, by sharing the necessary shipping and contact details with our print partner
• Process payment and manage your session token
• Detect and prevent abuse, fraud, and policy violations
• Comply with legal obligations

3. How Your Photographs Are Handled

This is the most sensitive aspect of our service. Here is exactly what happens to your photos:

• Upload: Your photo is read in your browser and converted to a base64 string. It is transmitted over encrypted HTTPS to our server.
• Processing: Our server forwards the image data to Anthropic's Claude API for appearance analysis, and to Google's Gemini image generation API to create your character avatar and illustrations.
• Storage of the original photo: We do not retain a stored copy of your original uploaded photograph on our servers after your book is generated; it is used in transit to produce your avatar.
• Storage of generated likenesses: The avatars and illustrations we generate from your photo — which depict the person's likeness in an illustrated style — are stored on our infrastructure (Cloudflare R2) and, if you save them to an account library, associated with your account in our database, so your book remains available to you across sessions and devices.
• Third-party handling: Anthropic and Google may retain and, in some cases, have personnel review your image data and prompts in accordance with their own policies (linked below). We do not control their data retention or review practices.

4. Third-Party Services

We use the following third-party services to operate Storybook Sanctum:

5. Data Retention

6. Children's Privacy

Storybook Sanctum is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used the Service without parental consent, please contact us immediately at [email protected].

For users aged 13–17, parental or guardian consent is required. Parents who create books featuring photographs of their children accept full responsibility for ensuring appropriate consent and use of those images.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of personal data we hold about you
• Deletion: Request deletion of your personal data, including your account, synced library, and stored generated content. You can also delete individual books and clear the local copy in your browser at any time.
• Correction: Request correction of inaccurate data
• Objection: Object to certain processing of your data
• Portability: Request a portable copy of your data

To exercise these rights, contact us at [email protected]. If you have an account, we can identify your data by your account email; if you used the Service without an account, we may need additional information to locate any data associated with you.

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to delete, and the right to opt out of sale of personal information. We do not sell personal information. To exercise CCPA rights, contact us at [email protected].

EU/UK Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, our legal basis for processing your personal data is your consent (given when you use the Service) and legitimate interests (fraud prevention and service operation). You have the right to withdraw consent at any time by discontinuing use of the Service.

8. Security

We implement reasonable technical and organizational security measures including:

• TLS/HTTPS encryption for all data in transit
• Server-side API keys that are never exposed to users
• Rate limiting to prevent unauthorized bulk access
• Session tokens that expire after use

However, no system is perfectly secure. We cannot guarantee absolute security and are not liable for unauthorized access beyond our reasonable control.

9. Cookies and Local Storage

Storybook Sanctum uses browser local storage and IndexedDB (not traditional advertising cookies) to:

• Store your purchased session token
• Keep a local cache of your generated books on your device for offline access and faster loading
• Remember your preferred settings

Some of this information — such as your session token when you make requests, and your books when you sync your library to an account — is transmitted to our servers in the course of providing the Service. You can clear locally stored data at any time through your browser settings or the "Clear Library" option in our Settings screen; clearing local data does not by itself delete books you have synced to your account (see Section 7 for deletion requests).

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

11. Contact Us