Privacy Policy
Last updated: July 1, 2026
SourcedStory (“we”, “us”) helps you build, publish, and explore sourced timelines. This policy explains what we collect, why, and the choices you have. We aim to collect the minimum needed to run the service well and keep it secure.
Information we collect
- Account: your email address and a username. If you sign in with a provider (e.g. Google), we receive basic profile info from them.
- Content you create: timelines, events, sources, and related text you add.
- Technical & usage data: IP address, device/browser information, and log/usage events. We use these to operate the service and to prevent fraud and abuse (for example, stopping automated or duplicate accounts created to bypass limits).
- Cookies: a session cookie to keep you signed in, and a local preference for your theme (light/dark). We do not use third-party advertising cookies.
How we use it
- Provide and maintain the service (your account, your timelines, publishing).
- Keep it secure — detect and prevent abuse, fraud, and violations of our Terms.
- Improve features and fix problems.
- Communicate essential service notices.
Where required (e.g. under the GDPR), our legal bases are performance of our contract with you, our legitimate interests in operating and securing the service, and your consent where applicable.
How we share it
We do not sell your personal data. We share it only with service providers who help us run SourcedStory — notably Supabase (database, authentication, and hosting), and a payment processor if you subscribe — and where required by law. Timelines you choose to publish publicly are, by design, visible to anyone.
Your rights & choices
You can access and export your data or permanently delete your account and all its content at any time from your Settings page. Depending on your location you may also have rights to correct data, object to or restrict certain processing, and lodge a complaint with a regulator. Deleting your account removes your profile, timelines, events, and sources.
Retention
We keep your data while your account is active. When you delete your account, we remove your content promptly; limited records may be retained where required for legal, security, or fraud-prevention purposes.
Security
Access to your data is protected by database row-level security and authentication. Unpublished drafts are private to you. No system is perfectly secure, but we work to protect your information and limit access to what’s necessary.
Children
SourcedStory is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data.
Changes
We may update this policy; we’ll revise the “last updated” date and, for material changes, provide additional notice.
Contact
Questions or requests: privacy@sourcedstory.com (contact address to be finalized at launch).