Skip to content
Sparkostory
← Back to Sparkostory

Privacy Policy

What We Collect

  • Your email address (for account access and book delivery)
  • Your child's first name, date of birth, city, and pronoun (to personalise the story)
  • A photo of your child (to generate the character illustration) — only after you confirm you are the child's parent or legal guardian, or have their permission, and have the right to use the photo. We record that confirmation with the photo.
  • Payment information (processed by Stripe — we never see or store your card details)

Analytics & Cookies

Strictly necessary

  • sparko_vid (first-party, 1 year) — a random UUID we assign each browser so we can debug issues and stitch funnel steps together. Contains no personal data.
  • sparko_consent (first-party, 6 months) — records your cookie choice on this site.
  • sparkostory_session / sparkostory_user (first-party) — login and cart session.
  • sparko_wl_src (first-party, 30 days) — on the waitlist page only: the campaign link that first brought you (for example “utm_source=tiktok”), so we know which posts work. Contains no personal data.

Optional (set only after you tap “Accept”)

  • Google Tag Manager — the loader for the measurement tags listed here. It is not itself loaded until you accept, and it is told your consent choice before any tag runs. Provider: Google LLC. See policies.google.com/privacy.
  • Google Analytics 4 — measures traffic sources and conversions. IP anonymized; no ad personalization. Provider: Google LLC. See policies.google.com/privacy.
  • PostHog (EU region) — product usage and session replay. All form inputs are masked in replay — we never see what you type. Data hosted in the EU. Provider: PostHog Inc. See posthog.com/privacy.

Your choices

You can change your choice anytime by clearing cookies for this site. Rejecting optional cookies disables PostHog, Google Tag Manager and GA4 immediately; the strictly-necessary cookies above remain.

Children

Sparkostory is purchased by adults for children. We do not knowingly collect personal data from children. The child's name and date of birth supplied in the story form are used only to generate the book; they are not used for advertising profiling.

Waitlist

Before launch, parents can join our waitlist. This section covers only that list (notice version 2026-10-v1).

What we collect

  • Your email address (required)
  • Your first name, your WhatsApp number and your child's first name, if you choose to give them
  • Your answers to the optional questions: child's age band, language, story shelves and a fair price
  • The country you choose, and the country your connection appears to come from
  • The campaign link that first brought you (for example which post or referral link), and an anonymous visitor ID that ties the steps of your visit together

We do not collect a photo of your child, their date of birth or their surname at this stage. Those are only asked for later, when you create a story.

Why

  • To keep your place in line and send your early-access invite
  • To send waitlist and launch updates, including any launch offer for waitlist families
  • To understand, in aggregate, which stories, languages and countries to prioritise

WhatsApp is used only if you switch on “Send me launch news on WhatsApp too”. Emails are sent through our email provider, Resend. We do not sell this data or use it for advertising profiling.

How long we keep it

  • If you never confirm your email, your signup is deleted automatically after 30 days.
  • If you confirm but never buy a story, your details are deleted 12 months after launch (or 12 months after you join, if you join later).
  • You can ask us to delete them sooner at any time (below).

Unsubscribe or delete

Every waitlist email has an Unsubscribe link and a Delete my details link. Delete removes your signup permanently. You can also email [email protected] and we'll do it for you.

How We Use It

  • Your child's photo is used only to create their illustrated character and the stories you order. It is shared only with the providers listed under “Who Processes Your Data” below, only for that purpose, and never sold or used for advertising.
  • Your data is not used to train AI models. We do not train models of our own, and we use Google's models only through its paid APIs (the Gemini API and Vertex AI), under terms that do not let Google use what we send — photos, story details or the images it returns — to train or improve its models.
  • Your email is used to send your book and (if you opt in) occasional updates.
  • We do not sell your personal data.

Who Processes Your Data

We use these providers, each only for the purpose listed:

  • Google — Gemini API / Vertex AI: receives your child's photo and story details (first name, pronoun, city) to generate the character and the story's illustrations. Google keeps requests only for a limited time to detect misuse, as its terms allow, and does not use them to train its models. See ai.google.dev/gemini-api/terms and Google Cloud's data processing terms.
  • Google Cloud Text-to-Speech: receives the words of your story, with your child's name in them, to read it aloud. No photo is sent.
  • Google Cloud Storage (Singapore region): stores photos, illustrations, books and read-aloud audio.
  • Stripe: takes payment (details below). We never see your card details.
  • Resend: sends our emails — sign-in links, order and gift emails.
  • Google Analytics and PostHog: only if you accept optional cookies (above).

How We Store It

  • Photos and generated images are stored on Google Cloud Storage (GCS), hosted in the asia-southeast1 region (Singapore).
  • Data is retained for 12 months after your last order, then deleted.
  • Stripe processes all payments. See Stripe's privacy policy at stripe.com/privacy.

Your Rights (PDPA)

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Withdraw consent and request deletion

To exercise these rights, email: [email protected]

Contact

Questions about privacy? Email [email protected].
Last updated: October 2026.