Talebound

Effective date: 27 August 2026

Privacy Policy

This policy explains what Talebound collects, how it is used, and which third-party services support the product. GDPR-related information is included here so people do not need to hunt across multiple legal pages.

Who controls this service

Talebound is operated by Stagline SRL, registered at Cluj-Napoca, Cluj, Romania. For privacy questions or rights requests, contact [email protected].

Data we collect

  • Account data such as email address, username, display name, and sign-in method.
  • Profile data you choose to add, including avatar, country, and bio.
  • Letter and journey data, including message content, recipients, courier selections, and journey status history.
  • Uploaded media such as avatar images and optional letter photos.
  • Notification data, including in-app notifications and Firebase Cloud Messaging device tokens if you enable push.
  • Purchase data related to Stamps, such as Stripe checkout/session identifiers and payment status.
  • Analytics and technical usage data when analytics is configured, such as approved event telemetry and page visits.

How we use your data

  • To create and secure your account using Google OAuth or magic link sign-in.
  • To deliver letters, render journeys, and show related notifications.
  • To store profile images and letter photos you choose to upload.
  • To process Stamp purchases and reconcile payment outcomes.
  • To understand acquisition and product usage through GA4, if that service is enabled.
  • To respond to support, privacy, and abuse reports.

Third-party services we use

  • Google OAuth for optional Google sign-in.
  • Resend for magic link email delivery.
  • Amazon S3 for direct uploads of avatars and letter photos via presigned URLs.
  • Firebase Cloud Messaging for optional web push notifications.
  • Stripe for Stamp checkout and payment processing.
  • Google Analytics 4 for analytics when configured.
  • Mapbox for journey map rendering when map features are enabled.

Each provider processes data under its own terms and privacy documentation. Talebound only sends the data needed for the relevant feature.

Cookies & local storage

  • Talebound relies on Rails-managed httpOnly session cookies for authentication.
  • Google Analytics 4 may place cookies or similar browser storage when analytics is enabled.
  • Browser push notifications require a service worker registration and a Firebase messaging token if you opt in.

Your GDPR and privacy rights

You may have rights to access, correct, delete, export, or object to certain processing of your personal data.

To make a request, email [email protected]. We may need to verify your identity before acting on a request.

Governing law & jurisdiction

This policy and your use of Talebound are governed by the laws of Romania. Any disputes not resolved directly with Stagline SRL are subject to the exclusive jurisdiction of the Romanian courts.

Retention

Talebound keeps personal data only for as long as needed to operate the service, meet legal obligations, and resolve disputes. The live retention schedule should be filled in here before launch: [DATA RETENTION PERIOD].