Privacy Policy

1. Overview

WonderWeaver ("we," "us," "our") values your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our storytelling app and website.

WonderWeaver is currently in its pre-launch phase, operated as a personal project. We follow principles of transparency, minimal data use, and child safety under applicable laws such as GDPR (EU) and COPPA (US).

2. Information We Collect

• Parent Email Address: Used for login and account identification. This is the only personal data collected.
• Session Cookie: One secure, HTTP-only cookie (connect.sid) is used to keep you logged in.
• Story Data: Stories you create are stored securely in our database and linked to your account.

We do not collect children's personal data directly. Parents are responsible for any information entered into the app.

3. How We Use the Information

• To manage your login session and keep your account secure.
• To store and display your created stories within your account.
• For basic internal analytics (e.g., error logging, not user tracking).

4. Cookies and Local Storage

WonderWeaver uses only one cookie:

• Name: connect.sid
• Purpose: Authentication and session management
• Duration: 30 days
• Security: HTTP-only and Secure in production

We do not use tracking, advertising, or third-party cookies. The landing page may use localStorage for storing language preferences, but no personal data is stored client-side.

5. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on secure cloud infrastructure. We use encryption for session secrets and HTTPS for all production traffic. Access is limited to authorized administrators only.

6. Children's Privacy

WonderWeaver is designed for parents to create and share stories with children. We do not knowingly collect personal information directly from children under 13 (US) or under 16 (EU). By creating an account, you confirm that you are a parent or guardian.

If we learn that a child has registered without parental consent, we will delete the account and its data promptly. Parents may contact us at any time to request review or deletion of data related to their child's use.

7. Data Retention and Deletion

Your data is kept as long as your account is active. You can request deletion of your account and all related stories by emailing us at ricky@bedtime.cloud with the subject "Account Deletion."

Once deleted, your data is permanently removed from our database.

8. Your Rights (GDPR)

If you are located in the European Union, you have the right to:

• Access the data we hold about you.
• Request correction or deletion of your data.
• Withdraw consent to data processing (which may limit your ability to use the app).

9. Third-Party Services

WonderWeaver does not share your data with third parties for marketing or analytics. We use standard cloud hosting and CDN providers (e.g., Bootstrap, Google Fonts) that may handle IP addresses as part of normal web delivery.

10. Updates to This Policy

We may update this Privacy Policy periodically. Any significant changes will be announced on our website or in the app. Continued use of WonderWeaver after such changes constitutes acceptance of the revised policy.

11. Contact Us

For any questions, data access requests, or parental verification, please contact us at:

Email: ricky@bedtime.cloud
Subject: "WonderWeaver Privacy Inquiry"