Privacy policy.

Who we are

Yourtale AS, organisation number 935 129 966, Knausveien 46, 3121 Nøtterøy, Norway, is the controller for the personal data described here. Contact: hello@yourtale.art.

What we collect

• Account details: your name and email address when you sign up.
• List sign-ups: your email address, and any answers you give, when you join our list on a public page or ask to order a book.
• Your stories: the recordings, transcripts, photos and text you or your family member create in Yourtale, and the book made from them.
• Payment details: handled by Stripe. We never see or store your full card number. Our checkout is closed today, so no payment is taken.
• Usage data: pages visited, features used and basic device information, so we can understand what works and fix what does not.
• Session recordings: PostHog records how pages are used (scrolling, clicks, mouse movement) so we can see where people get stuck. Everything you type is masked. Inside the workspace all text is masked too, so a recording shows layout and clicks, never your stories. Book pages opened from a family read link are not recorded.

How we use it

To run the interview and produce your book; to keep your account secure; to take payment; to answer you when you write to us; and to improve the product. We do not sell your data, and we do not use your stories to advertise to you.

We process your account details and your stories to provide the service you signed up for (GDPR article 6(1)(b)). We keep list sign-ups because you asked to hear from us (article 6(1)(a)), and you can leave the list at any time. We process usage data, session recordings and security logs on the basis of our legitimate interest in running and improving a working, secure service (article 6(1)(f)).

A story is often about someone other than the account holder. If you are the person being interviewed, or someone named in a story, you have the same rights as the account holder over the data about you, and you can write to us directly.

The companies that help us (processors)

• Clerk: sign-in and accounts
• Vercel: hosting, and basic visitor and performance statistics (Vercel Web Analytics and Speed Insights)
• Neon: the database that stores your account and stories
• Cloudflare (R2): storing recordings, photos and other files
• Google (Gemini API): processing your recordings and text to conduct the interview and draft the book
• Google Analytics: measuring visits to our public pages
• PostHog (EU cloud): product analytics and session recordings
• Stripe: payments, when the checkout is open
• Upstash: short-lived technical data, such as rate limits that protect the service from abuse
• TypeSafe: when switched on, reads the last thing said in an interview to judge whether the speaker has finished, so the interviewer does not cut in

Each processes data only on our instructions. Some are based outside the EEA; where they are, transfers rely on the EU Standard Contractual Clauses or an adequacy decision.

Cookies

We use cookies and similar storage to keep you signed in (Clerk), to keep a family read link working on your device, to count visitors without an account, to remember which page first brought you to us and whether someone referred you, and for analytics and session recordings (Google Analytics and PostHog). Your browser settings let you block or delete them; signing in needs the sign-in cookies to work.

How long we keep it

Your stories are kept while your account is open, so you can return to them. You can ask us to delete a story or your whole account at any time, and we delete it from our systems within 30 days (backups within 90 days). Your data explains how. List sign-ups are kept until you leave the list or ask us to delete them.

Your rights

You can access, correct, export or delete your data, object to or restrict processing, and complain to Datatilsynet (the Norwegian Data Protection Authority). Write to hello@yourtale.art.

Our YouTube channel and the YouTube API

Yourtale publishes short documentary videos on its own YouTube channel. An internal tool, used only by our team, connects to our own channel through the YouTube API Services to upload those videos and read their public statistics. It does not access your YouTube account or anyone else's, and we collect no data from people who watch our videos beyond the aggregate numbers YouTube shows every channel owner.

By watching our videos you are subject to the YouTube Terms of Service and the Google Privacy Policy. Our team can revoke the tool's access at any time through Google security settings.

Yourtale's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Children

Yourtale is not intended for children under 16, and we do not knowingly collect their data.

Changes

If we change this policy we will update the date above, and tell you by email when the change matters.