Privacy policy
Last updated 14 October 2026.
Picture to Story is the data controller for this website. Contact: hello@picturetostory.com.
What we collect
- The photo you upload and your answers (name, age, preferences, dedication), to make your book.
- Your email, if you save a book or order, to send your book, order updates and up to three reminders about an unfinished book.
- Order details: shipping address and phone for printed books. Card details go straight to Stripe; we never see them.
- Usage data: pages visited and steps completed, recorded without cookies and without personal details, to improve the site.
Your child’s photo
The photo is used only to draw your book. It is never shared publicly, sold, or used to train AI models. We delete it within 60 days of your book being finished. Books that are never ordered, and their photos, are deleted after 30 days. You can ask us to delete everything sooner.
Please only upload a photo of a child if you are their parent or guardian, or have their permission.
Who we share data with
Only the services needed to make and deliver your book, each under a data processing agreement:
- fal.ai and OpenAI: draw the pictures and write the story. Both are contracted not to train on API data.
- Hetzner (Germany/Finland): hosts our servers and database.
- Stripe: payments. Lulu: printing and posting printed books. Resend: email delivery. Cloudflare: security and cookieless analytics.
- Meta and TikTok: advertising measurement, only if you choose “Allow” on the cookie banner.
Cookies
Essential cookies keep your book and sign-in working. Advertising cookies (Meta, TikTok) load only if you allow them. You can change your choice by clearing this site’s data in your browser.
How long we keep data
Photos: up to 60 days after your book is finished. Unordered books: 30 days. Finished books and order records: as long as you have an account, and order records for 6 years for tax.
Your rights
Under UK GDPR you can ask for a copy of your data, correct it, delete it, or object to how we use it. Email us and we will reply within one month. You can also complain to the Information Commissioner’s Office (ico.org.uk).