Privacy

### 🌍 Who We Are

Storynory Ltd is a UK-based company that publishes free audio stories for children and families.

Our website address is https://www.storynory.com.

Registered office: 26, Star Street, London W2 1QB.

Company number 05479994.

We have tried to make this policy as easy to understand as we can but inevitably we have to use some technical “jargon”.

If you have any questions about this policy or your data, please contact HUGH FRASER at [email protected]. We welcome any feedback that may help us clarify and improve this policy.

### At a Glance

– **No logins. No tracking cookies.** – **We don’t sell personal data, share personal data, or profile anyone — child or grown-up.** – **Only anonymous stats help us understand which stories are popular.** – **Fully compliant with children’s privacy laws (COPPA & UK GDPR).** – **Our mission is to tell stories — not collect data.**

### 👧 Children’s Privacy (COPPA Compliance)

Storynory fully complies with the U.S. Children’s Online Privacy Protection Act (COPPA).

We do not serve behavioural advertising or use tracking cookies.

In the past, we have used COPPA compliant advertising through Google’s child-directed flag. We are now not using progmatic advertising.

Storynory.com is created for children and families. Our website does not knowingly collect personal information, nor do we request it.

We do not request names, email addresses, or any identifying information. We do not have customer accounts or logins on our website.

We do not sell, share, or disclose any personal data to third parties.

Parents or guardians can contact us at any time to ask questions or request removal of any information.

---

For information on how adults might voluntarily give us information – for example by making payments to support us, and for more details on our privacy policy,please read on.

---

### 📱 Apps

We currently do not offer any apps in the main app stores.

We are aware of unofficial apps using the name “Storynory” or “StoryNory” in various app stores. These apps are not affiliated with or endorsed by us.

On our own site, we offer a small web app that can be installed on some platforms, including Chrome and Android.

This web app provides a convenient home-screen icon and quick shortcuts to stories.

It does not have any service workers. Because service workers are scripts that can run in the background even after you’ve closed a webpage, not using them ensures our app only runs when you are actively using it, and stops completely when you leave.

It simply launches our website in a wrapper, and the privacy settings are identical to our website.

### 💖 Supporters and Shout-Outs

Parents and guardians who support Storynory through platforms such as PayPal or Patreon may optionally request a first-name shout-out for their child in one of our audio stories.

We also run story-writing competitions from time to time with shout-outs as rewards.

We confirm each request directly with the parent before publication. Only the child’s first name is used.

We won’t require more information than is necessary for the the reward or shout-out.

Payment details are processed securely by the relevant payment platform (for example, PayPal or Patreon) in accordance with their own privacy policies.

Payments are our preferred method for “verifying” the identity and consent of the responsble adult.

Parents can always request reviews or deletions of any personal information – and we will never share it with third parties.

### 🔒 Log Data We Collect (Minimal Technical Data)

When you visit our website, our web server may process a small amount of technical information such as your browser type and operating system. This information is to help us identify code errors and security threats.

We do not normally log or store real visitor IP addresses in our web server logs.

On our public facing websitte, our logs record Cloudflare’s data-centre IPs (used for security routing).

We might – from time to time – record real IP addresses on the public area to address a security concern, abuse, or bot attack – but only on a temporary basis. In our experience, we rarely need to do this.

We may record real IP addresses on non-public areas of our server or admin to enhance security. This should not effect normal users to the public website.

---

In case you are wondering, an IP address can identify a user’s geo-coordinates and their internet service provider. This is why we do not normally collect your ‘real’ IP address in our logs.

---

Please also see our Audio section below for our audio host, Libsyn’s, internal operations concerning IPs.

Our server logs are automatically deleted every 12 hours**—meaning data is never stored long-term**.

### 📊 Analytics (Privacy-Friendly and Cookie-Free)

We use privacy-respecting analytics to understand how our site performs.

We use Umami Analytics (self-hosted version). We selected Umami for its strong privacy focus.

Umami does not collect any personally identifiable information and anonymizes all data collected. Users cannot be identified and are never tracked across websites.

Umami does not set cookies. We do not set “Distinct IDs” on Umami. We do not use Umami to set pixel tracking or collect personal information such as names and email addresses from forms. We do not have vistor logins to associatiate with data in Umami.

Umami has a system of rotating salts (cyphers) which further enhance security of data.

Umami tracks general trends such as page views, story popularity, and usage of website features (for example our audio player).

Umami povides us with a broad overview of countries and cities where visitors come from, helping us serve our international audience.

Umami does not record geographic coordinates (longitude and latitude) or Internet Service Providers.

Umami is open source, which means its code is open to the public to inspect and discuss.

We retain Umami data for up to 180 days which we think is the minimum we need to notice trends.

### Cloudflare

Our infrastructure is protected by Cloudflare, which provides security and performance optimisation.

We use Cloudflare as a content-delivery and security provider to help keep our website fast and safe. Cloudflare may process limited technical data about your visit (for example your IP address, browser type or device, and timestamps) only to deliver web-service performance and to protect the site from abuse.

Cloudflare does not use this data to deliver advertising or to profile or track you across different websites. Their full privacy policy for website visitors is available here: Cloudflare Privacy Policy.

Cloudflare is certified under the EU–U.S. Data Privacy Framework and the UK Extension.

### 🍪 Cookies

We are a cookie-free website for general (non-admin) visitors.

We do not use advertising, tracking, or remarketing cookies.

---

In case you are wondering, cookies are tiny text files that websites save on your device. Some are essential (like keeping you logged in), while others track you across the web for advertising. Since we don’t use logins or advertising, we don’t set any cookies for general visitors.

---

If you find a cookie from us in your browser, it is likely from a previous version of our site and can be safely deleted. You should be cookie-free when you refresh your browser or revisit our site.

(Our earlier advertising profile was set to non-remarketing, non-tracking, COPPA-compliant.)

### 💬 Social Media

Storynory maintains official social-media accounts (for example, on Facebook, Instagram, and similar platforms) to share updates with parents, teachers, and adult listeners.

These platforms are intended for adults, not for direct interaction with children.

Any data collected through social media is governed by the respective platform’s own privacy policy.

We do not carry any third-party cookies or tracking code from social-media platforms on our website.

We encourage parents and teachers to supervise children’s access to social media.

Our YouTube channel is recognised by Google as a children’s channel and is subject to Google’s enhanced restrictions for young people’s privacy.

### Audio Hosting on Libsyn

The audio player on our website is our own design (not third party).

Our audio stories mp3 files are hosted by Libsyn, a podcast hosting service based in the United States. When you listen to an episode, Libsyn automatically receives your device’s IP address and general technical information (such as browser type or device).

This data is used only for essential internal operations — such as counting listens, preventing abuse, and keeping the service running properly. It is not used for advertising, tracking, profiling, or personalisation. It is purged regularly.

We do not receive any information about individual listeners from Libsyn. The only data we see are anonymised, aggregated statistics (e.g. total downloads per episode).

For our US audience: this processing falls under the “support for internal operations” exception in the Children’s Online Privacy Protection Act (COPPA).

For our UK and EU audience: we rely on legitimate interests under UK GDPR, and ensure that this data is handled in a minimised, privacy-protective way.

You can read more in Libsyn’s privacy policy: Libsyn Transparency – section 11 is particularly relevant to our listeners re Podcast Information.

### ⚖️ Legal Principles Summary

Minimal Collection: Collecting only technical data necessary to operate the site

Legitimate Interest: Maintaining website security and performance

Consent: When a parent voluntarily provides a child’s first name for a shout-out or contacts us directly.

You have the right to request access to, correction of, or deletion of any personal data you provide to us.

### 🚸 Your Rights

You have the right to:

Request details of any personal data we hold about you (we normally hold none)

Request correction or deletion of your data

Request no future deletion of your data

Object to any form of processing (where applicable)

To exercise these rights, contact [email protected] .

### 🔄 Updates to This Policy

We may occasionally update this policy to reflect improvements in privacy or changes in regulation.

### 🕊️ Summary

Storynory exists to tell stories — not to collect data.

Storynory Ltd, UK — Company number 05479994.

This policy was reviewed as part of a privacy audit on 1–7 November 2025. Last updated: 7 November 2025.

Audit areas reviewed:

Cloudflare settings

Umami settings

Server-log settings

Libsyn account and transparency policy

Email policy / contact with parents and guardians

Payment accounts

Social-media links

Cookies (checked for absence)

Web-manifest app / home-screen icon