Draft for lawyer review — not legal advice

Privacy policy

Operator and data controller: Panonium consulting d.o.o., Međašni klanac 1, Zagreb, Croatia. Contact privacy@myabcstory.com. This draft is written for a parent-directed US shop run by an EU company. A lawyer should review it before launch.

Who the site is for

MyABCStory is directed to parents and legal guardians, not to children. We do not want children to use the site. You, the adult, type the child's first name, age, and interests, and you may optionally upload a photo.

COPPA

The Children's Online Privacy Protection Act covers personal information collected online from children under 13. A parent upload on a parent-directed site is treated differently from a child typing into a child-directed site. We design the site for adults: a parent account, adult copy, and no child account. We still keep a short retention rule and do not ask a child to contact us.

Photos, likeness, and biometrics

A photo is optional and needs a separate consent tick. We use it only as a reference so an illustrated character can resemble the child, in a stylized storybook look. We do not create a face template, faceprint, or other biometric identifier, and we do not score facial geometry. That is our approach to Illinois BIPA and similar laws: written notice here, consent on the form, no biometric retention schedule because we do not keep biometrics, and deletion of the photo within 30 days. If that approach ever changed, we would stop and get a written release first.

GDPR

If GDPR applies, the lawful bases we expect to rely on are contract (making and shipping the book) and consent (the optional photo). You can ask for access, correction, deletion, or a copy, and you can complain to a supervisory authority. Child photos are high-risk data; a DPIA should be completed before launch. Processors that need contracts include Supabase, Stripe, the print partner, the image-model vendor, Cloudflare, and the email sender. Transfers from the EU to the US should use the appropriate transfer tool, such as SCCs.

What we store

Account email, the child's first name and age, likes and dislikes, the character you picked, order and shipping details, and, if you consented, the photo until the deletion date. We do not sell personal information.

Image models

Prompts describe our original characters and your child's interests. They are filtered so studio names and famous character names are not sent. Use a vendor plan that does not train on your photos, and keep the data-processing terms on file.