Privacy Policy

1. Who we are

Tiffany's StoryHouse (“WrapAStory”, 恺晴故事屋, “we”, “us”) provides free bilingual English & Mandarin stories, videos, and activity packs for children aged 3–10, and a character-learning app (Chinese Quest). We are based in Victoria, Australia. You can reach us at hello@wrapastory.com.

2. Information we collect

• Email & name — if you subscribe to updates, download a resource, or send an enquiry.
• Subscription confirmation — new signups receive a confirmation link valid for 24 hours. We record when you confirm; older addresses without a confirmation record are not treated as confirmed subscribers. Opening the link alone does not subscribe you. Pending requests that expired more than seven days ago are removed during later signup activity.
• Welcome pack & email preferences — after confirmation we send a welcome pack email. We record email acceptance, delivery and failure events, and retain unsubscribe and suppression records so we can honour your preferences. Subscription emails include an unsubscribe link; opening the website link alone does not unsubscribe you. We do not use tracking pixels in the welcome email. Unsubscribing does not remove access to free resources or stop purchase delivery and replies to enquiries.
• Signup abuse prevention — Vercel BotID checks the browser request for automated activity. We use short-lived hashes of IP addresses and email addresses for request limits, plus a hidden spam-trap field. We do not retain raw IP addresses in these rate-limit records.
• Enquiries — your contact details, topic and message, plus the occasion, preferred language, delivery country and optional preferred date for a custom storybook. We save these details and email them to our team so we can respond. Enquiring does not subscribe you to marketing emails. Please do not include children's full names, photos or sensitive information in an enquiry.
• Chinese Quest accounts — a parent-created username, a 4-digit PIN (stored hashed), an optional child first name and age, and learning progress. These accounts are meant to be created and managed by a parent or guardian.
• Usage & device data — standard analytics and log data (pages viewed, approximate region, browser type, and story activity events such as listening or answering a question) to understand and improve the site. Story activity events contain content identifiers and activity counts, not child names or written answers.
• Your little bookshelf — favourite story identifiers, recently opened stories, and the 3D book page are saved in this browser's local storage. The bookshelf does not require an account and is not uploaded as an account profile. Use Clear saved bookshelf on the homepage or Stories page, or clear this site's browser data, to remove it. If browser storage is unavailable, choices last only for the current visit.
• Cookies — used for basic site function, analytics, and advertising (see section 5).

3. How we use your information

• To send you the updates or resources you asked for.
• To respond to your enquiry and discuss a storybook or partnership you requested.
• To save Chinese Quest progress and improve our stories and activities.
• To operate, secure, and improve the site, and to show relevant advertising.

We do not sell your personal information.

4. Children's privacy

This site is designed for families. Accounts and sign-ups are intended for parents, guardians, and educators, not for children to complete on their own. We do not knowingly collect personal information directly from a child without a parent's involvement. If you believe a child has provided us personal information without consent, email us at hello@wrapastory.com and we will delete it. Because the site is directed to families with young children, any advertising we serve is configured to be non-personalised (contextual) where required by law.

5. Cookies & advertising

We use cookies for essential functionality and analytics. We also work with Google AdSenseto display advertising that keeps the site free. Google and its partners may use cookies to serve ads based on context. Where the site is treated as child-directed, ad partners are instructed to serve non-personalised ads. You can manage cookie preferences in your browser and learn more at Google's Advertising pages.

6. Third-party services

We rely on trusted providers to run the site, and they process data only as needed to provide their service:

• Word listening — the new vocabulary buttons use your browser or device's speech service to read only the selected word. Some device voices may use the operating system or browser provider's online service. Voice availability varies by device. The 3D storybook uses recorded narration.
• Hosting & database — Vercel and Supabase (site hosting and secure data storage).
• Video — YouTube (embedded story videos; YouTube may set cookies).
• Advertising — Google AdSense.
• Email — our email/newsletter provider, to deliver the updates you request.

7. Data retention & security

We keep personal information only as long as needed for the purposes above, then delete or anonymise it. We use reasonable technical measures (including encryption in transit and hashed PINs) to protect your data, though no method of transmission is ever completely secure.

8. Your rights

You can ask us to access, correct, or delete your personal information, or unsubscribe at any time, by emailing hello@wrapastory.com. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

9. Changes to this policy

We may update this policy from time to time. We'll change the date at the top when we do.