Privacy
Ifarium is read by families, so this page is written for parents, in plain language. It describes what the product actually stores — nothing here is boilerplate.
Reading without an account
You can read the free stories with no account and no email. Your reading place and saved progress live in your browser on your device. Reading progress includes the current branch, the endings you reached and the Treasures you found. These progress records stay on this device until you sign in. If you allow optional analytics, limited story-use events are also sent as described below.
What you give us, when you choose to
An email address — to keep your stories with your email and sign in, for a purchase, or for an email you ask for. We do not ask for a child’s name, except the optional name a grown-up may write on a bottle (below). We do not infer behavior or personality from story choices.
Bottles
At the end of a story a child can close the bottle and send it to a grown-up. The first time, a grown-up gives an email address, who it is for (Mom, Dad or Grandma) and, if they like, a name to sign it with. We keep these with each bottle: the story, the choice the child made, which other ways they liked and whether they had an idea of their own. Nothing the child says or types is recorded. The note is emailed the next morning, and only after the address is confirmed by a link in our first email. Every bottle email has a link to stop them; the general unsubscribe link stops them too.
When you sign in
Your stories — which stories you read, the current branch and reading position, explored endings, saved stories and Treasures — are kept with your email so another device can pick them up.
Payments
Purchases are sold through Stripe Managed Payments. Stripe, through its Link service (Sold through Link, LLC), is the merchant of record: it receives your payment details and email to take the payment, handle tax and send the receipt, under its own privacy policy. Card numbers do not reach our servers. We keep order and access records linked to your email. Checkout also sends Stripe limited campaign and, when analytics was allowed, random analytics identifiers and the originating story.
We use an email provider to send only these: sign-in codes and the link that keeps your stories with your email; a note when your free stories are kept with your email; a reminder when one of your stories is still unread, only if story reminders are on in your account; the bedtime secrets (two emails: the secrets, then one follow-up two days later) or a story’s tips (one email), only when you ask for them; occasional news about new stories and offers, only if you said yes to it; and purchase and access emails. The payment receipt itself comes from Link (Stripe). Every optional email has a link to stop it.
Measurement
Optional analytics runs only if you choose Allow in Analytics settings. We use PostHog EU to measure story stages, offers, checkout and verified purchases with a random browser identifier and limited campaign identifiers. With your optional analytics consent, we send the story path and a final fictional-story preference, plus the child’s one-word answer about the ending (just right, funnier or crazier), using a random browser identifier. We use these limited signals to improve stories; they are never public, never used to profile or diagnose a child, and do not include any text a child says or types. Session recording and heatmaps are off. We do not send account email, child names, addresses, card data or text you enter. Page URLs sent to analytics are limited to approved routes and have query strings removed. We also send the name of the site that sent you here (for example pinterest.com, never the page address) and your browser’s user-agent string, so we can tell which channels bring families and filter out automated traffic. You can decline or withdraw consent in Analytics settings without losing reading or purchase access. First-touch campaign identifiers remain in this browser for up to 90 days after consent; withdrawal removes our local analytics identifiers. A purchase begun with consent may still be reported when Stripe confirms it. Earlier versions may have stored choice IDs, classifications, prediction outcomes and masked recordings. We are checking and removing unnecessary historical analytics records; this does not affect purchase records. Limited campaign events can also be stored in our own database after consent. Separately, Vercel Web Analytics counts visits without cookies and without identifying you: the page (without query strings), the site you came from, country, device type, browser and operating system. It sets nothing in your browser and needs no consent.
How long records stay
Browser progress stays until you clear this site’s data. Account progress has no automatic expiry while your account is active. We review optional analytics and contact records for deletion; provider log periods vary by service. Contact us to ask for account data removal. Purchase and access records may need to remain for accounting, fraud prevention, or legal obligations; we will explain what is retained in your case.
Other services
Our site is hosted on Vercel. Supabase holds account, family progress and purchase records; Stripe (through Link) handles payment; our email provider sends requested messages. Story images may be served from our image host. These providers may also keep operational logs.
Your data, your call
Write to ask what we hold against your email or to request correction or deletion. There is no self-service account deletion button yet. We verify the request, remove eligible family progress and contact data, and explain any purchase or operational records that must remain. Clearing browser data is a separate step on your device.
Questions, corrections, deletions: stories@mail.ifarium.com