Privacy Policy — WonderTales

Last updated: 2026-05-01

This Privacy Policy explains how WonderTales collects, uses, shares, and deletes personal data during the public web beta. It should be reviewed before a paid public launch.

Controller and contact

WonderTales is the service provider for this beta. The final legal operator name, registered address, and merchant-of-record details must be confirmed before external paid use.

For privacy, child-data, deletion, access, correction, objection, or support requests, contact support@wondertales.art.

Data we collect

We may collect:

• account data: email address, display name, password credentials or OAuth identity, preferred language, settings, role, and session information;
• adult consent records: accepted document versions, timestamps, IP address, user agent, and consent context;
• child profile data added by the adult account owner: name or nickname, age range, language, preferences, descriptions, child photos, and drawings;
• story data: prompts, selected characters, scenes, generated text, generated images, narration, alignment data, ratings, visibility settings, public slugs, and share tokens;
• uploaded files: profile images, character references, child reference photos, drawings, and feedback screenshots;
• billing data: plan, subscription, bundle, customer identifiers, checkout/portal session identifiers, usage counters, and payment-provider event records. Full card numbers are handled by the payment provider, not by WonderTales;
• support and feedback data: messages, category, reported screen, optional email, and attached screenshots;
• technical data: IP address, device/browser information, logs, request metadata, cookies, analytics events, and security signals.

Why we use data

We use data to:

• create and secure accounts and sessions;
• generate, validate, narrate, store, and display stories;
• personalise stories based on adult-provided child profiles and character settings;
• enforce quotas, subscriptions, bundles, and feature access;
• process payments, cancellations, refunds, and billing support;
• keep private, unlisted, and public story access separate;
• moderate content and reduce unsafe or inappropriate outputs;
• respond to support, privacy, safety, and deletion requests;
• diagnose bugs, prevent abuse, and improve reliability;
• comply with legal, tax, accounting, security, and dispute obligations.

Legal bases

Depending on where you live, we may rely on contract performance, adult consent, legitimate interests such as service security and abuse prevention, and legal obligations such as billing and tax recordkeeping.

When child-related data is submitted, WonderTales requires adult parent or guardian consent before processing it for the selected story features.

Children's privacy

WonderTales is designed for adult-owned family accounts. Children do not create independent accounts for this launch.

Adults must have authority to provide child data, photos, drawings, or preferences. Adults can request deletion of child data by contacting support@wondertales.art.

Where laws require parent or guardian consent for children's online data, WonderTales uses adult consent gates before collecting child-related data. The required age threshold can vary by country.

AI and service providers

To provide the service, WonderTales may send necessary content to providers that help with AI text, image, narration, alignment, moderation, hosting, storage, analytics, email, payments, and support operations. Depending on configuration, these may include providers such as OpenAI, Google, ElevenLabs, Stripe, Resend, PostHog, hosting infrastructure, and storage providers.

We try to send only the data needed for the feature. Do not upload content that you are not allowed to share with these processors.

Public and unlisted sharing

Private stories are intended for authenticated account access.

Unlisted stories can be opened by anyone with the link. They are not intended for search indexing, but anyone with the link may view them.

Public stories may appear in public pages, share cards, catalogs, search engines, and social previews. Before publishing, remove private child details or sensitive family information.

Unpublishing or deleting a story removes ordinary public access, but search engines, recipients, screenshots, caches, or third parties may retain copies for some time.

Cookies and analytics

WonderTales may use cookies or similar technologies for sessions, security, preferences, analytics, and product diagnostics. Analytics can help us understand page visits, conversion, errors, and feature usage.

You can use browser settings to limit cookies, but some account, security, and payment features may not work without required cookies.

Retention and deletion

We keep data only as long as needed for the purposes above, unless a longer period is required for billing, tax, accounting, security, abuse prevention, dispute resolution, or legal claims.

You may request deletion of your account, child profiles, uploads, and stories by contacting support@wondertales.art. We will respond without undue delay. Some records may be retained where legally required or reasonably necessary, such as payment records, consent logs, security logs, and records needed to investigate abuse or resolve disputes.

Backups and logs may take additional time to expire.

Your rights

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to processing of your data, and to withdraw consent where processing is based on consent.

You may also have the right to complain to a data protection authority.

Security

We use technical and organisational safeguards designed to protect data, including authenticated access controls, private asset rules, moderation checks, rate limits, and operational logging. No online service can guarantee perfect security.

International transfers

WonderTales and its providers may process data in different countries. Where required, we use appropriate safeguards through service-provider agreements and platform controls.

Changes

We may update this Privacy Policy as the service, providers, laws, or launch stage changes. The latest version will show the update date above.

Contact

Privacy requests: support@wondertales.art