Privacy policy

Storypop lets a parent turn a YouTube video into an interactive story their child answers along with. This page explains exactly what we store and why. We do not sell your data, we do not show advertising, and we do not use your family's data to train any model.

Using Storypop without an account

You can use Storypop as a guest. In guest mode your stories, stickers, streaks and progress are saved only in your own browser's local storage. We never receive them. Clearing your browser data deletes them permanently.

If you sign in with Google

We ask Google only for your name, email address and profile picture (the openid, email and profile scopes). We never receive your Google password, and we request no access to Gmail, Drive, Contacts, Calendar or any other Google service. Signing in creates an account identified by your email address so your stories follow you between devices.

What we store once you have an account

• Your name, email address and profile picture from Google.
• The child profiles you create — only the first name or nickname you type, plus a chosen avatar icon. Please do not enter your child's full name, birth date, school or photo; we neither need nor want them.
• The stories you write: the YouTube link, timestamps, questions, answers, hints and messages.
• Play results per child profile: which stories were finished, how many tries each question took, stickers earned and daily streaks.
• A login session token in a secure, http-only cookie so you stay signed in.

Children's data and parental consent

Storypop is designed for a grown-up to set up and a child to play alongside them. Only a parent or guardian may create an account, and by creating child profiles you consent to us storing the limited information above for those profiles. Children do not sign in, do not have their own accounts, and cannot be contacted through Storypop. Deleting a child profile in your account deletes that child's progress, stickers and streaks immediately.

Stories you choose to share

When you save a story it is marked public by default and appears in Explore, where other parents can add a copy to their own library. A public story shows its title, the video thumbnail, the number of questions and your first name only — never your email address, and never anything about your children. You can switch any story to Private in the editor at any time, which removes it from Explore.

Sharing links

The "Share" button encodes a story into a link. Anyone holding that link can play that story. It contains no account or child information.

Third parties we rely on

• Google Sign-In — to log you in, as described above.
• YouTube — videos play in YouTube's official embedded player, so YouTube and Google receive the usual data associated with watching an embedded video.
• OpenAI — if the "Read aloud" studio voice is enabled, the text of the question is sent to be turned into audio. No account, child or email data is sent with it. Choosing the device voice instead keeps everything on your device.

How long we keep it, and how to delete it

We keep your account data until you ask us to delete it. Deleting a child profile removes that child's data straight away. To delete your whole account and everything in it, email us and we will remove it, usually within a few days. Sessions expire after seven days.

Security

Data is sent over HTTPS and stored in a private database. Session cookies are http-only and secure. No system is perfect, so please tell us if you spot a problem.

Changes

If this policy changes in a way that affects what we collect, we will update the date at the top of this page.