Privacy Policy

1. Information We Collect

Depending on how you use Storyra, we collect:

• Account details: name, email, and authentication identifiers.
• Session data: signed session cookie and app auth tokens for signed-in use.
• Story content: titles, messages, media uploads (photos/videos), captions, dates, and visibility settings.
• Billing metadata: selected story pack, purchase ID, payment reference, and payment status updates.
• Usage and diagnostics: basic product analytics and error/operational logs.

2. How We Use Information

We use your information to:

• Create and maintain your account and session.
• Upload, host, and display your stories and media.
• Process and verify story pack purchases.
• Enforce storage/media limits and service safety rules.
• Improve app reliability, performance, and user experience.

3. How Stories Are Shared

You control story visibility in Storyra:

• `Public`: visible to anyone with the link and may be discoverable.
• `Unlisted`: accessible through the direct link.
• `Private`: access key required.

You are responsible for the links and access keys you share. Anyone with the required access can view the corresponding story.

4. Third-Party Services

Storyra relies on third-party providers to run core features, including:

• Authentication services (Firebase Authentication).
• Media hosting and delivery (Cloudinary).
• Payments and checkout processing for story packs.
• Infrastructure and analytics tooling (including Vercel Analytics).

We do not store full payment card numbers in the app. Payments are handled through the checkout provider used by our backend.

5. Cookies and Local Storage

Storyra uses cookies and browser storage to support sign-in and app behavior, including:

• `storyra_session` cookie for session state.
• Local storage keys for access/refresh tokens, user profile cache, upload cache, and payment flow continuity.

6. Data Retention

We retain account and story data while your account is active or as needed to provide the service, handle disputes, enforce terms, and meet legal obligations.

7. Your Choices

You can:

• Edit or delete stories in the app.
• Log out to clear active app sessions on your device.
• Control cookies/local storage through your browser settings.
• Request account or data support by contacting us.

8. Security

We use reasonable technical and organizational safeguards, but no system is completely secure. Please use strong credentials and protect your device access.

9. Children's Privacy

Storyra is not intended for children under 13, and we do not knowingly collect data from them.

10. Policy Updates

We may update this Privacy Policy from time to time. When we do, we will update the effective date on this page.

11. Contact

Privacy questions can be sent to support@storyra.app.