Privacy Policy

Information we collect

• Account: your email address and a username. If you sign in with a provider (e.g. Google), we receive basic profile info from them.
• Content you create: timelines, events, sources, and related text you add.
• Billing: if you subscribe to Pro, Stripe collects and stores your payment details directly. We never see or store your full card number. We keep only your Stripe customer/subscription IDs and plan status.
• Technical & usage data: IP address, device/browser information, and log/usage events. We use these to operate the service and to prevent fraud and abuse (for example, stopping automated or duplicate accounts created to bypass limits).
• Cookies: a session cookie to keep you signed in, and a local preference for your theme (light/dark). We do not use third-party advertising cookies.

How we use it

• Provide and maintain the service (your account, your timelines, publishing, billing).
• Keep it secure: detect and prevent abuse, fraud, and violations of our Terms.
• Improve features and fix problems.
• Communicate essential service notices.

Where required (e.g. under the GDPR), our legal bases are performance of our contract with you, our legitimate interests in operating and securing the service, and your consent where applicable.

Analytics

We use Vercel Analytics to see aggregate traffic (which pages get visited, roughly how many people). It’s cookieless and doesn’t track you across other websites. We don’t get an individual profile of your browsing.

Who we share it with

We do not sell your personal data. We share it only with the service providers who help us run SourcedStory:

• Supabase: database, authentication, and file storage.
• Stripe: payment processing for Pro subscriptions.
• Resend: delivering account and notification emails.
• Sentry: error monitoring, so we can catch and fix bugs.
• Vercel: hosting, content delivery, and the analytics described above.

Each only receives what it needs to do its job. We share data beyond this list only where required by law. Timelines you choose to publish publicly are, by design, visible to anyone.

Your rights & choices

You can access and export your data or permanently delete your account and all its content at any time from your Settings page. Deleting your account also cancels any active Pro subscription. Depending on your location you may also have rights to correct data, object to or restrict certain processing, and lodge a complaint with a regulator. Deleting your account removes your profile, timelines, events, and sources.

Retention

We keep your data while your account is active. When you delete your account, we remove your content promptly; limited records may be retained where required for legal, security, or fraud-prevention purposes.

Security

Access to your data is protected by database row-level security and authentication. Unpublished drafts are private to you. No system is perfectly secure, but we work to protect your information and limit access to what’s necessary.

Children

SourcedStory is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

Changes

We may update this policy; we’ll revise the “last updated” date and, for material changes, provide additional notice.

Contact

Questions or requests: privacy@sourcedstory.com.