Legal

Privacy Policy

Last updated: September 20, 2026

The short version: we use your child’s photo to draw them into the book you ordered, and for nothing else. We delete the original once the book is finished. We don’t sell your data. Payment is handled by Stripe — we never see your card.

1. Who we are

BR Tech Ltd (company number 207369386, registered in Bulgaria) runs My Story Game. In this policy, “we” and “us” mean that company.

2. What we collect

What you give us when you order:

a photo of your child, uploaded by you;
the hero’s first name and age;
your email address;
a record that you confirmed you are the parent or guardian — including the date, time and IP address of that confirmation, so we can show the consent was actually given.

What your payment involves: card details are entered on our payment processor’s form and go straight to them. We never see or store your card number.

What is collected automatically: IP address, browser and device type, the pages you open and when — the ordinary server and security records any website keeps.

3. Your child’s photo

This is the part that matters most, so it gets its own section.

You confirm you may upload it. Orders are placed by a parent or guardian, or by someone with their permission. We keep a record of that confirmation.
It is used for one thing: creating the illustrated hero for the book you ordered.
It is processed by an AI image-generation service that we use to draw the illustrations. The photo is sent to that service so it can return the artwork.
It is stored with our storage and delivery provider while your book is being made.
We delete the original photo from our storage once your book is finished.
We do not sell photos, and we do not use them for advertising.

The consent record outlives the photo on purpose: it holds no image, only the fact that permission was given, with the date, time and IP address.

4. How we use it

to create your book and show you the free preview;
to email you that preview and, after you order, the finished book;
to take payment and keep the records a business has to keep;
to answer you when you write to us;
to keep the site working, secure and fast;
to understand how the site is used and how well our advertising works, where such tools are switched on.

We use other companies to do parts of the job. They act on our instructions:

Payment processing — Stripe, which handles the card details we never see.
File storage and delivery — the provider that stores the uploaded photo and the artwork.
AI image generation — the service that draws your child into the story.
Email delivery — the provider that sends the preview and the finished book.
Analytics and advertising — measurement tools, where and when we switch them on.
Legal requirements — if the law or a valid legal request requires it.

We do not sell your personal information.

6. Cookies and tracking

The site uses cookies that are needed to make it work — keeping your session, remembering your order, and protecting forms from abuse. If and when we switch on analytics or advertising tools, they may also set cookies, and this policy will say so before they do.

You can clear or block cookies in your browser settings. Blocking the necessary ones will break ordering.

7. Your choices and rights

Depending on where you live, you may have the right to ask us to:

tell you what personal information we hold about you;
give you a copy of it;
correct it if it is wrong;
delete it;
stop using it for targeted advertising, where that applies.

Residents of California and other US states with privacy laws have these rights under those laws, and we will not treat you differently for using them. To make a request, email us and say what you want; we may need to confirm who you are before we act.

You can also withdraw the photo consent at any time. We will stop processing and delete the photo; if the book has not been made yet, that order cannot be completed.

8. Children

This service is sold to adults. The account, the order and the payment are all the parent’s or guardian’s. We do not knowingly collect personal information directly from children under 13. If you believe a child has given us information without a parent’s involvement, write to us and we will delete it.

9. Where your data is processed

Our company is based in Bulgaria, in the European Union, and your data is processed there and by the providers listed above. European data-protection rules apply to that processing, which in practice means a stricter standard than most US states require.

10. How long we keep things

The uploaded photo — deleted once your book is finished.
The finished book — kept so your link keeps working, for as long as we run the service.
Order and payment records — kept as long as accounting and tax rules require.
The consent record — kept with the order, to show the processing was lawful.

11. Security

Data is transferred over encrypted connections, access is limited to the people who need it, and payment details never reach our servers. No system is perfect; if something goes wrong that affects you, we will tell you.

12. Changes to this policy

If we change how we handle your data, we will update this page and the date at the top. If the change is significant, we will say so plainly rather than quietly editing a line.

13. Contact us

Questions about your data, or a request about it: support@mystorygame.com.