Privacy

The short version: we run a storytelling site, not a data business. We set no tracking cookies, run no advertising, build no profiles, and sell nothing about you to anyone. What little we do process is listed below — completely.

Effective August 15, 2026 · All Aboard Stories, a family-run children's storytelling project ("we")

1. What we collect, exhaustively

(a) What you send us through our forms. If you submit a story idea or sign up for episode emails, we receive what you typed: your name, email address, and — for story ideas — the idea itself and any location you choose to share. Legal basis: your consent (GDPR Art. 6(1)(a)), given when you press send. Delivery is handled by Web3Forms, a form-relay processor that forwards your submission to our inbox and does not use it for its own purposes. We use your email solely to send what you asked for; you can withdraw consent anytime via the unsubscribe link or by writing to us.

(b) Aggregate counts.We count page views, episode plays, and whether a browser has visited before. The "visited before" signal is a single yes/no marker stored in your browser's localStorage — it is not an identifier, and no identifier exists anywhere in our analytics. What reaches our server is arithmetic: "views of /characters: +1." No IP addresses, no device fingerprints, no per-person records. Legal basis: legitimate interest (GDPR Art. 6(1)(f)) in knowing which stories families enjoy.

(c) Technical delivery data. Our host, Vercel, processes IP addresses transiently in server logs to deliver pages and defend against abuse, as any web host must. We do not access or retain these.

2. Videos

Episodes play through YouTube's privacy-enhanced player (youtube-nocookie.com), and no YouTube frame loads until you choose to play a video. From the moment you press play, Google processes playback under its own privacy policy — before that, YouTube learns nothing about your visit beyond serving thumbnail images.

3. Children

Our stories are made for children; our forms are not. Signups and story submissions are addressed to parents and guardians, and we do not knowingly collect personal information from children under 13. If you believe a child has submitted their own information, write to us and we will delete it promptly — this is our obligation under COPPA and we take it literally.

4. Your rights

You may ask us what we hold about you (for nearly everyone: at most a form submission), have it corrected or deleted, or object to processing — email hello@allaboardstories.com and we will respond within 30 days. EU/UK residents additionally hold the GDPR's access, portability, and restriction rights and may lodge a complaint with their supervisory authority. We keep form submissions only as long as needed for the purpose you sent them; aggregate counts contain nothing to delete because they contain no one.

5. Changes

If our practices ever change — for example, if we add a newsletter service or analytics beyond the counters above — this page will say so before the change takes effect, with a new effective date. A promise kept quietly is still a promise.