Privacy Policy

Last updated: 5 October 2026

StoryMaker is a browser-based tool for turning your own audio, images, and video clips into a finished video. This policy explains what we collect and — just as importantly — what we don’t.

The short version. Your media never leaves your device. All video rendering happens locally in your browser, so we never upload, see, or store your audio, images, or video. The only personal data we keep is the basic account information needed to sign you in.

Who we are

StoryMaker (“StoryMaker”, “we”, “us”) is operated by Rui Baião. You can reach us at rui.palma.baiao@gmail.com.

Information we collect

Account information

When you create an account or sign in, we collect and store the basics needed to identify you:

Your email address.
If you sign in with Google or Apple, your name and profile picture as provided by that service.
Your plan (Free, Creator or Pro) and, if you subscribe, your subscription status, used to apply plan limits.

This account data is stored on our behalf by Supabase, our authentication and database provider.

Technical data

Our hosting provider (Vercel) automatically records standard request information — such as IP address and browser type — to deliver, secure, and troubleshoot the site. This is ordinary web-server logging, not profiling.

Product analytics

To learn which parts of StoryMaker help people finish a video, we record anonymous usage events — for example “soundtrack added”, “export started” or “pricing viewed” — with counts and categories such as the number of photos, the chosen format and your plan. We use PostHog, hosted in the EU, configured without cookies or local storage, without session recording and without automatic capture of page content. Events never include file names, your email address or anything about the content of your media. If you are signed in, events are linked to your account’s internal id (not your email).

Projects saved in your browser

Your projects — including copies of the media you add — are saved in your own browser’s storage on your device, so you can pick up where you left off. They are not sent to us. Clearing your browser’s data for StoryMaker deletes them; a backup file you download stays wherever you save it.

What we do not collect

Your media. Your audio, images, and video files stay on your device. Rendering runs entirely in your browser, so your files are never uploaded to or stored on our servers.
No advertising or cross-site tracking. We don’t use advertising trackers, and our analytics set no cookies and don’t follow you across other sites.

How we use your information

To create your account and sign you in.
To remember your plan and apply its limits.
To operate, secure, and improve the service.
To send essential account emails (for example, email confirmation or password reset). We don’t send marketing email.

How your information is shared

We do not sell your personal data. We share data only with the service providers that make StoryMaker work:

Supabase — authentication and storage of your account record.
Google / Apple — only when you choose to sign in with them, to verify your identity.
Vercel — hosting of the website.
Stripe — payments and subscriptions, if you subscribe. Stripe receives your payment details directly; we never see your card.
PostHog (EU) — anonymous product analytics, as described above.
Mailjet — operational emails to StoryMaker’s operator (for example, an alert when a subscription had to be corrected), which can include the affected account’s email address.

We may also disclose information if required by law or to protect the rights, safety, and security of our users and the service.

Cookies and local storage

We use only what’s necessary to run the app: a secure sign-in session token so you stay logged in, small preferences, and your saved projects, all stored locally in your browser. We do not use advertising or analytics cookies.

Data retention and your rights

We keep your account information for as long as your account exists. You can ask us to access, correct, or delete your personal data at any time by emailing rui.palma.baiao@gmail.com; we’ll delete your account and associated data on request. Depending on where you live (including the EU/EEA under the GDPR), you may have additional rights over your data, including the right to object to or restrict certain processing and to lodge a complaint with your local data-protection authority.

Data security

Access to StoryMaker is over encrypted HTTPS, and account data is held by Supabase with industry-standard protections. No system is perfectly secure, but because your media stays on your device, the most sensitive content never reaches us in the first place.

International transfers

Our providers (Supabase, Vercel, Stripe, Mailjet) may process data in countries other than yours; PostHog analytics are hosted in the EU. Where required, appropriate safeguards are used to protect your information during these transfers.

Children

StoryMaker is not directed to children under 13 (or the minimum age required in your country), and we don’t knowingly collect their data.

Changes to this policy

We may update this policy from time to time. When we do, we’ll change the “Last updated” date above, and significant changes will be highlighted in the app.