Privacy Policy

We collect the email address you sign up with, the books you make, and a record of what you have generated. We do not run advertising, analytics or tracking of any kind — the only cookies we set are the two needed to keep you signed in.

A photograph you upload to make a character is sent to Google's Gemini API to draw the illustration and is then deleted from our storage. We never keep it.

Account. Your email address and a hashed password. We cannot read your password.

What you create. The premise you write, the story text, character names and descriptions, and the illustrations generated for you.

Photographs. Only if you use “Upload a photo” to base a character on someone. See below — these are not kept.

Billing. Your plan, your credit balance and a history of credits granted and spent. Card details are entered on Stripe's own checkout page and never reach our servers; we store only the customer and subscription identifiers Stripe gives us.

Technical. Ordinary server logs — IP address, timestamp, the page requested — and error reports when something breaks.

When you build a character from a photograph, the image is uploaded, sent once to Google's Gemini API to produce an illustrated character, and then deleted from our storage. The deletion runs whether the illustration succeeded or failed, so a photograph is not left waiting on a retry.

What is kept is the illustration, which is a drawing rather than a photograph. It is the illustration, never the original, that appears in your book.

Google processes the image to fulfil that one request. Please only upload photographs of people who are happy for you to do so — and, for a child, only where you are the parent or guardian.

These are the services that handle data on our behalf:

• Stripe — payments, subscriptions and invoices.
• Google (Gemini API) — generates story text and illustrations. Receives your prompts and, where you use one, an uploaded photograph.
• Cloudflare R2 — stores generated illustrations and exports.
• Resend — sends account email such as password resets.
• Vercel — hosts the website.
• Contabo — hosts the application server and database, in the EU.

We do not sell your data, and we do not share it with anyone for advertising.

Two, both strictly necessary: a session cookie that keeps you signed in, and a CSRF token that stops other sites submitting forms as you. There are no analytics, advertising or tracking cookies, which is why you are not being asked to dismiss a consent banner.

Scribble Tales is for adults — parents, guardians, teachers and authors — making books for children. It is not directed at children, and accounts are for over-18s. We do not knowingly collect personal information from a child.

A book you make may of course be about a child, and may include a character drawn from their photograph. That content belongs to you: your books are private unless you choose otherwise, and the photograph itself is deleted as described above. If you believe a child has created an account, write to us and we will remove it.

Every book is private by default. You can share one with a link, which makes it readable by anyone holding that link, or list it in the public library. Library listings show the title, cover, age range and style — they do not show your name or your email address.

You can unlist or unshare a book at any time from its Share page.

Your account and books are kept until you delete them or ask us to close your account. Uploaded photographs are deleted as soon as the illustration is made. Billing records are kept as long as tax and accounting rules require. Server logs are kept for a short period for security and debugging.

You can ask us for a copy of your data, to correct it, to delete it, or to object to how we use it. Email support@scribbletales.com from the address on your account and we will act on it.

If you are in the UK or the EU and you think we have handled your data badly, you have the right to complain to your data protection authority.

If we change this policy we will update the date at the top, and tell you by email if the change is significant.

Blooming Valley Limited — support@scribbletales.com. See also our terms of service.