Legal

Privacy Policy

Last updated: 7 October 2026

This policy explains what information StoryFlowBuilder ("we", "us") collects when you use storyflowbuilder.com and the story editor, why we collect it, who processes it for us and the choices you have. We collect only what we need to run the Service, and we never sell your personal information.

1. Information we collect

Account details: your name, email address and password. Passwords are stored only as a secure hash by our authentication provider — we never see them.
Google sign-in (if you use it): your name, email address and profile picture from your Google account.
Profile: the profile picture you upload, if any.
Your content: the stories you create and the images, video, audio and covers you upload.
Subscription status: your trial and paid-until dates. We do not receive or store card details.
Contact messages: the name, email address, topic and message you send through the contact form or to our email address.
Story statistics: when someone reads a published story, we record an anonymous daily count. It is based on a one-way hash of the reader’s IP address and browser details mixed with a secret value that we do not publish; the IP address itself is not stored.
Technical data: our hosting provider processes request information such as IP address, browser type and the pages requested, to deliver the site, keep it secure and fix problems.
Security records: an audit log of account activity, such as sign-ins, password changes and changes made by administrators.

2. How we use it

to create and secure your account and keep you signed in;
to save, display, publish and export your stories;
to manage your trial and subscription;
to answer your messages and send essential emails such as verification and password reset links;
to show you how your published stories are read;
to understand how visitors use the website so we can improve it;
to protect the Service against abuse and to fix problems;
to meet legal obligations.

We do not sell or rent your information to anyone.

3. Cookies

The site sets these cookies so that it works:

Sign-in session cookies (sb-…): keep you signed in securely.
sf_signed_in: remembers that you are signed in, so the site can show the right buttons.
sf_locale and sf_theme: remember your language and light or dark theme.
sf_pending_email: remembers the address waiting for email verification, for up to one hour.

We also use Google Tag Manager to load measurement tools from Google, such as Google Analytics, that help us understand how visitors use the website. These tools may set their own cookies (for example _ga) and collect information such as pages viewed, device and browser type and approximate location. You can block them with your browser’s cookie settings or the Google Analytics opt-out browser add-on, and the website keeps working without them.

Cloudflare Web Analytics also counts visits to the website. It does not use cookies.

5. Public stories

When you publish a story, its content, media, title, description, cover and byline become public and may be indexed by search engines. Unpublish or archive a story at any time to take it offline. Copies that others have already saved, and exported files you have shared, are outside our control.

6. How long we keep information

Account information and content: for as long as your account exists. When an account is deleted, its stories and uploaded files are removed.
Story statistics: kept as anonymous counts.
Contact messages: kept in our inbox for as long as needed to help you and for our records.
Technical logs: kept for a short time by our providers for security and troubleshooting.
Backups: deleted information may remain in backups for a limited period before it is overwritten.

7. Security

All connections to StoryFlowBuilder are encrypted (HTTPS). Passwords are hashed, and database rules make sure each account can reach only its own private data. No system is perfectly secure, so please use a strong, unique password. If we learn of a breach that affects your information, we will tell you as the law requires.

8. Your rights and choices

Access and correct: you can see and update your name and profile picture in your dashboard, and change your password in settings.
Export: you can export your stories at any time from the editor.
Delete: to delete your account and its content, email support@storyflowbuilder.com from the address on your account.
Other requests: depending on where you live, you may have the right to ask for a copy of your data, to restrict or object to how we use it, or to complain to a data protection authority. Email us and we will respond within 30 days.

9. Children

StoryFlowBuilder is not intended for children. Accounts are for people aged 18 or over, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.

10. International transfers

Our providers operate around the world, so your information may be processed outside your country, including in Australia, the United States and the European Union. We rely on providers that protect personal information with appropriate safeguards.

11. Changes to this policy

We may update this policy as the Service changes. We will change the "Last updated" date above and tell you about important changes by email or in the app.

12. Contact

Questions or requests about your privacy? Email support@storyflowbuilder.com.