Privacy Notice

Last updated: 30 October 2026

Santa Story collects as little as it can. This notice explains what we keep, why, who else sees it, and your rights.

1. Who is responsible

The controller of your personal data is Ishai Ravid. For anything about privacy, write to hello@santastory.xyz.

2. What we keep, why, and on what basis

A device identifier. A random code kept in a cookie, so each device sees its own bookshelf and its stories left. It contains no name or contact details. Why: to provide the Service (contract).
Stories. What was asked for in each story, as text (as Santa understood it), and each page's characters, drawings and plans, so the book can be read again. Why: to provide the Service (contract).
Voice. When you talk to Santa, the recording is sent to Google only to turn the words into text. We don't keep recordings. Why: to provide the Service (contract).
Purchases. Dodo Payments, the Merchant of Record for all our orders, collects the payment details. We keep the order number, the amount and the device the stories are for; Dodo Payments also tells us the buyer's name and e-mail address, which we don't keep. We never see card details. Why: to deliver the stories you bought, to help with refunds and questions (contract), and to keep accounting records (legal obligation).
Photos. Photos are used only with the explicit permission of a grown-up. The first time someone wants to use one, the Service stops and shows a screen for grown-ups that explains exactly what happens to a photo and asks for an answer a young child cannot give. Until a grown-up approves, Santa Story never opens the camera or the photo album. A grown-up can switch photos off again at any time in the bookshelf’s settings. A photo is used for one thing only: it is sent to Google’s Gemini AI, which draws a cartoon hero from it. We never keep the photo: it is not saved on our servers or in any book, and only the cartoon hero remains. We keep only a note that a photo was used on that device, and when. We never use photos for anything else, never show or give them to anyone else, and never use them for advertising or to identify anyone. Why: your consent, which you can withdraw at any time (consent).
Technical information. The type of device and browser, screen size, language, time zone, an approximate country and city, and a scrambled code made from the network address (never the address itself). The network address is used only for a moment, to stop overload. Why: security, preventing abuse, the daily story limits and simple statistics (legitimate interests).
Messages. What you write to us, and your e-mail address, to answer you (legitimate interests).

3. Younger users

Santa Story can be used at any age, and only adults buy. Younger users should use it with a parent or another responsible adult. We never ask anyone for their name, address or other contact details. If someone says something personal inside a story, it may be saved in the story's text: any book can be deleted at any time (drag it to the shredder on the bookshelf), and we will delete all of a device's books on request. Voice recordings are used only to understand the words and are not kept. Photos are used only with a grown-up’s explicit permission and are never kept (see 2.5). If you believe we hold personal information about someone under 16 without a parent's consent, contact us and we will delete it.

4. Who else receives data

Google (the Gemini AI): what is said to Santa and the state of the story, to understand speech, write the story, draw and speak; and, only with a grown-up’s permission, a photo, to draw a cartoon hero from it (see 2.5).
Dodo Payments (the Merchant of Record for all our orders): payments, taxes, receipts and refunds, under Dodo Payments' own privacy notice.
Railway (our servers, in the European Union) and Cloudflare (network security and delivery).
Our professional advisers, such as our accountant, and authorities when the law requires it.
A book you choose to send as a link can be opened by anyone with the link; the shared copy never includes the words said while making it. We don't sell personal data and don't use it for advertising.

5. International transfers

Our servers are in the European Union. Google and Cloudflare may process data in the United States and elsewhere; they do so under the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.

6. How long we keep it

Books: until you delete them, or until you ask us to.
Device information: until you ask us to delete it.
Purchase records: as long as tax and accounting law requires (usually 7 years).
Messages: as long as needed to answer and follow up.

7. Your rights

You may ask to see the personal data we hold about you (or someone in your care), to correct it, to delete it, to restrict or object to its use, to receive it in a portable form, and to withdraw consent where we rely on consent. You may also complain to a data protection authority: in the EU or the UK, the authority where you live. Write to hello@santastory.xyz; we answer within one month.

8. Security

The site is encrypted (https), access to stored data is limited to the business owner and those who help run the site, and we keep what we store to a minimum.

9. Cookies

We use only the cookies the Service needs: the device identifier, which keeps your bookshelf on this device (and, only if the site is ever set to ask for an access code, a cookie that remembers that it was given). Your language choice is kept in your own browser. We use no advertising or tracking cookies. Dodo Payments' checkout page may use its own cookies to process your payment.

10. Changes

If we change this notice, the new version will appear on this page with its date.