StickTaleGet early access

Legal

Privacy Policy

Last updated

This policy explains what data StickTale handles when you make a video, where it goes and what you can do about it. It is written to be read, not skimmed past.

Who we are

StickTale is operated by StickTale ("we", "us"). We decide how the personal data described here is used, which makes us the data controller. Questions or requests: privacy@sticktale.com.

The short version

StickTale is built so that as little as possible leaves your device and nothing you create is kept on our servers.

  • Your videos stay on your device. Projects, pictures, narration and exported MP4s are stored in your browser (IndexedDB) and assembled there. We do not keep copies.
  • What you type is sent to AI providers to make the video, then discarded by our servers. Google processes it under its paid API terms, which say prompts and responses are not used to improve its products.
  • No advertising trackers, no selling data. We use Google Analytics and Microsoft Clarity to understand how people use the site (see below), but no advertising cookies, and we never sell or share personal data for advertising.

What we collect

Depending on how you use StickTale:

  • Content you submit: your topic or question, optional notes, a character description, edits to the script, scene descriptions, and the character reference picture used to draw scenes. Do not include personal data about other people in these fields.
  • Account and billing data (when accounts and paid plans are available): your email address, plan, usage (minutes of video generated) and billing history. Card details are handled by our payment provider and never reach our servers.
  • Technical data: IP address, browser type, the pages and API endpoints requested, timestamps and error logs, recorded by our hosting provider to run and protect the service.
  • Usage analytics: on our website and app we use Google Analytics, which counts visits, pages viewed, how visitors arrived and approximate location, and Microsoft Clarity, which records how pages are used (clicks, scrolling, mouse movement, page views and session replays), plus device, browser and approximate location. Clarity masks text you type into fields by default, and we do not send it your topics, scripts or videos on purpose.
  • Waitlist signups: your email address and your answers to the short questions on the signup form (what you would make, how many videos a month, which plan you would pick and, if you add it, your first video idea), plus the page you signed up from, how you arrived (referrer and campaign tags) and your approximate country.
  • Messages you send us: the contents of emails to support, and your address, so we can reply.

Stored on your device, not on our servers

Your projects (script, pictures, narration, settings) are saved in your browser’s IndexedDB storage so you can come back to them. The MP4 file is encoded in your browser. Small preferences, such as panel sizes and an access code during private beta, are kept in your browser’s local storage.

This storage is strictly necessary for the features you ask for. Clearing your browser’s site data deletes it permanently. Because we never receive these files, we cannot recover them for you.

Google Analytics and Microsoft Clarity also set their own cookies (for example _ga, _ga_* and _clck, _clsk) to recognize returning visitors and link page views into a session. These are not necessary for StickTale to work. You can block or delete them in your browser settings at any time.

How we use data

  • To make the video you asked for: researching the topic, writing the script, drawing pictures and recording narration.
  • To run, secure and debug the service, including preventing abuse and enforcing our terms and usage limits.
  • To provide accounts, billing and support once those are available.
  • To run the waitlist: inviting you when a spot opens, telling you about the launch, and counting which niches and plans people want so we build the right thing first.
  • To send service messages (receipts, important changes). Marketing emails only with your consent, with an unsubscribe link in every email.

AI providers and other processors

We use the following service providers to deliver StickTale. They process data on our behalf and only for that purpose.

  • Google (Gemini API): research with Google Search grounding, script writing, pictures and narration. Under Google’s paid API terms, prompts and responses are not used to improve Google’s products; Google logs them for a limited time to detect abuse and meet legal obligations, and keeps search-grounded requests for 30 days. See the Gemini API terms.
  • DeepSeek (optional): if enabled for script writing, your topic and research notes are processed by DeepSeek. We will name it here as active if we turn it on in production.
  • Hosting provider: serves the website and API and keeps short-lived request logs.
  • Google (Google Analytics): visit and page-view statistics, as described above, under the Google Privacy Policy. We do not enable Google advertising features or share this data for ads.
  • Microsoft (Clarity): usage analytics and session replays, as described above. Microsoft processes this data under the Microsoft Privacy Statement.
  • Google (Google Sheets): stores the waitlist (email and form answers) in a private spreadsheet only we can open.
  • Telegram: we get a private notification with each waitlist signup (email and form answers) so we can follow up. Telegram processes it under the Telegram Privacy Policy.
  • Payment provider (when paid plans launch): our payment provider processes payments as an independent controller under its own privacy policy.

International transfers

Our providers may process data outside your country, including in the United States. Where the GDPR or UK GDPR applies, transfers rely on adequacy decisions or the European Commission’s Standard Contractual Clauses offered by those providers.

How long we keep data

  • Content you submit: not stored by our servers after your request completes. AI providers keep it only as described above.
  • Request logs: kept for up to 30 days unless needed to investigate abuse.
  • Analytics: Google Analytics data is kept for the retention period set in our Google Analytics settings; Microsoft Clarity data for the period set in its Clarity terms. We do not export it elsewhere.
  • Waitlist signups: until you are invited and create an account, you ask us to remove you, or 12 months after the public launch, whichever comes first.
  • Account data: for as long as your account is open, then deleted within 30 days of closing it.
  • Billing records: as long as tax law requires (usually 7 years).

Your rights

Depending on where you live, you can ask to access, correct, delete or export your personal data, object to or restrict processing, and withdraw consent. Email privacy@sticktale.com. We reply within 30 days. In the EEA or UK you can also complain to your data protection authority.

California residents: we do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics.

Security

Traffic is encrypted with HTTPS, API keys stay on our servers, and access to logs is limited to people who need it to run the service. No system is perfectly secure; if a breach affects your personal data, we will notify you and the authorities as the law requires.

Children

StickTale is for adults. You must be 18 or older to use it, and it is not directed at children. If you believe a child has given us personal data, contact us and we will delete it. Teachers may show videos they made to students; students should not use StickTale themselves.

Changes to this policy

We will update this page when our practices change and change the date at the top. If a change is significant, we will tell account holders by email or in the app before it takes effect.