Last updated: July 2026
We collect the following categories of personal information when you use DadTale (“the Service”), operated by Fireborne XIII Foundry LLC (“we,” “us,” or “our”):
en or es, so our pages can be titled in the language you are reading. It records a preference you have expressed, not anything about you: it cannot identify or recognise you, is never used for advertising, analytics or profiling, and is never shared.We use your personal information for the following purposes:
| Data Category | Purpose | Legal Basis (GDPR) |
|---|---|---|
| Names, age, photos | Generate your personalized storybook and illustrations | Contract performance; Explicit consent |
| Email address | Send storybook PDF, memory card, verification codes, and account communications | Contract performance |
| Bonding responses | Save memories for future access (when you choose to save) | Consent |
| Payment information | Process payments via Stripe | Contract performance |
| IP address | Rate limiting and abuse prevention | Legitimate interest |
| Facial features (biometric) | AI illustration generation only; not stored independently from photos | Explicit consent |
| Aggregate usage (approximate country, content page views) | Anonymous, aggregate counts to understand where and how the Service is used; no IP or identifier stored, never linked to you | Legitimate interest (anonymous statistics) |
We do not use your data for advertising, profiling, or behavioral targeting. We do not sell your personal information. We do not use your photos to train AI models. We may compute aggregate, de-identified statistics (such as the total number of books generated) to operate and improve the Service; this involves no cookies, no third parties, and no tracking of individuals.
We do not sell your personal information. We have not sold personal information in the preceding 12 months. We do not sell the personal information of minors under 16 years of age. As defined under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), “sale” includes disclosing personal information to third parties for monetary or other valuable consideration.
We do not share your personal information for cross-context behavioral advertising purposes.
Shine the Light (California Civil Code § 1798.83): We do not disclose personal information to third parties for their direct marketing purposes. California residents are entitled to request this information once per year; contact us at dad-tale-support@f13foundry.com.
DadTale is a service designed for parents and legal guardians, not for children. We do not knowingly collect information directly from children under 13. All data is provided by the parent or legal guardian, who must be at least 18 years old.
Before uploading photos or providing your child's information, you must affirmatively confirm that you are the parent or legal guardian by checking consent boxes on the story creation page. For paid users, the credit card transaction via Stripe serves as additional verifiable parental consent, as a child under 13 would not have access to a payment method. For free preview users, parental consent is obtained through a combination of email verification and the affirmative consent checkboxes, as permitted under the Children's Online Privacy Protection Act (COPPA).
Photos of children are used solely to generate personalized illustrations and are not shared, sold, disclosed to third parties (except OpenAI for image generation), or used for any other purpose. You may revoke consent and delete your child's information at any time by using the “Delete My Account” button on your My Memories page, or by contacting dad-tale-support@f13foundry.com.
When you upload photos, the AI image generation process may analyze facial geometry and features to produce illustrated likenesses. Under certain state and international laws, this may constitute the collection of “biometric identifiers” or “biometric information.”
Biometric Data Policy:
Retention & Destruction Schedule:
Consent:
By checking the consent box on the story creation page and uploading photos, you provide informed, written consent to the collection and processing of biometric data as described in this section. This consent is intended to satisfy the requirements of the Illinois Biometric Information Privacy Act (BIPA) and the Texas Capture or Use of Biometric Identifier Act (CUBI), and, to the extent they apply, Washington's biometric privacy law (RCW 19.375) and other applicable state biometric data laws. (Washington's law generally applies only where a biometric identifier is enrolled in a database for a commercial purpose; DadTale does not create or store such a database.) You may withdraw consent at any time by requesting deletion of your photos.
We share personal information with the following third-party service providers (sub-processors), solely for the purposes described:
We do not sell or share your information with data brokers, advertisers, or any parties not listed above.
Data Processing Agreements: Fireborne XIII Foundry LLC maintains written data processing agreements (DPAs) with each of the above service providers. These agreements include obligations for data protection, purpose limitations, confidentiality, sub-processor restrictions, and deletion requirements consistent with applicable U.S. state privacy laws and the EU General Data Protection Regulation (GDPR). Copies of our DPAs are available upon request by contacting dad-tale-support@f13foundry.com.
Your data is stored securely in our database and file storage systems hosted in the United States. Uploaded photos are deleted as the final step of generating your book, in practice within seconds of it finishing, and in all cases within 24 hours. This applies to the free preview too, which generates the complete book. The same deletion runs if generation fails permanently. They are not retained on our servers. Your completed storybooks and saved memories are retained for as long as your account exists, they are the “My Memories” you keep, and are deleted when you delete your account or on request. Incomplete or failed generations (and any uploaded photos not already deleted) are removed automatically by our scheduled cleanup within 90 days. Account information (your email address, and authentication credentials managed on our behalf by our authentication provider, Supabase) is retained until you request deletion.
International Data Transfers: If you are located outside the United States (including in the European Economic Area, United Kingdom, or Switzerland), your personal data will be transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission, as incorporated into our data processing agreements with sub-processors, to provide adequate safeguards for these transfers. By using the Service, you acknowledge and consent to the transfer and processing of your data in the United States.
Provider retention: Our app deletes uploaded photos after generation or terminal failure, but providers may retain limited content in security or abuse-monitoring systems for the periods described in their policies. We do not represent that provider-side copies are deleted at the same moment as app storage; where available, we use approved data-control settings and document those settings internally.
Depending on your location, you may have the following rights regarding your personal information:
All Users:
California Residents (CCPA/CPRA):
If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
Virginia, Colorado, Connecticut, Texas, Oregon, Montana, Utah, Iowa, Indiana, Tennessee, Delaware, New Jersey, New Hampshire, Nebraska, Maryland, Minnesota, Rhode Island, Kentucky, and Other State Residents:
If you reside in a state with a comprehensive consumer privacy law, you generally have the right to:
European Economic Area, United Kingdom & Switzerland Residents (GDPR / UK GDPR):
If you are located in the EEA, UK, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) and UK GDPR:
Our lawful bases for processing your data are: (a) performance of a contract (generating and delivering your storybook); (b) explicit consent (for processing photos, biometric data, and children's information); and (c) legitimate interest (for abuse prevention and rate limiting). See the table in Section 2 for the specific legal basis for each data category.
Right to Appeal:
If we deny your privacy request, you have the right to appeal. To appeal, email dad-tale-support@f13foundry.com with the subject line “Privacy Request Appeal.” We will respond to your appeal within 60 days. If your appeal is denied, you may contact your state's Attorney General (U.S. residents) or your local data protection supervisory authority (EEA/UK residents) to submit a complaint.
How to Exercise Your Rights:
Self-service: You can exercise certain rights directly from your account without contacting us:
For any other request, or if you prefer not to use self-service, contact us at dad-tale-support@f13foundry.com. We will respond to verifiable requests within 45 days for U.S. residents (or within the timeframe required by your state's law) and within 30 days for EEA/UK residents (extendable by 60 days for complex requests, with prior notice). You may also designate an authorized agent to submit requests on your behalf by providing written authorization.
Do Not Sell or Share My Personal Information: DadTale does not sell or share your personal information as defined by the CCPA/CPRA or any other applicable privacy law. No opt-out action is required.
DadTale honors Do Not Track (DNT) browser signals and Global Privacy Control (GPC) universal opt-out signals. Because we do not engage in tracking, behavioral advertising, or the sale or sharing of personal data, these signals do not change how the Service operates: DadTale already does not track you.
We protect your data using encryption in transit (HTTPS/TLS), hashed passwords (bcrypt), and secure file storage with access controls. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but take commercially reasonable measures to protect your information.
In the event of a data breach involving your personal information, Fireborne XIII Foundry LLC will notify affected users and applicable state attorneys general in accordance with the breach notification laws of all 50 U.S. states and territories. For users in the EEA or UK, we will notify the relevant supervisory authority within 72 hours of becoming aware of a breach as required by the GDPR, and will notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms. We will provide notification in the most expedient time possible and without unreasonable delay, and in no event later than the timeframe required by applicable law. Notification will include the nature of the breach, the categories of information affected, and steps you can take to protect yourself.
DadTale sends transactional emails (storybook delivery, verification codes, memory cards) and does not send marketing or promotional emails. In compliance with the CAN-SPAM Act:
DadTale uses browser local storage, a strictly necessary session cookie to keep you signed in and preserve your story progress, and a strictly necessary abuse-prevention cookie that enforces the one-free-preview-per-device limit (see Section 1). Both cookies are first-party, are not readable by page JavaScript, and are not used for advertising or analytics. We do not use third-party tracking cookies, advertising pixels, cross-site tracking, or cookie-based analytics, and we do not share information with advertisers or data brokers. Our only usage measurement is first-party, cookieless and anonymous aggregate counting: visits by country and loads of our public content pages (see Section 1): it sets no cookie, stores no IP address, and is never linked to you, your account, or your device, so it is aggregate statistics, not personal data. Because we use only strictly necessary storage plus this anonymous aggregate count, no opt-in consent is required to gate it; we nonetheless display a privacy notice banner on first visit so you are informed of these uses, with a link to this policy. If we introduce cookie-based analytics or advertising technologies in the future, we will update this policy and implement appropriate granular consent mechanisms before doing so.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on the Service at least 30 days before the changes take effect. Your continued use after the effective date constitutes acceptance.
The data controller responsible for your personal information is:
Fireborne XIII Foundry LLC
Email: dad-tale-support@f13foundry.com
5900 Balcones Drive STE 100
Austin, TX 78731
United States
For privacy questions, data requests, or to exercise your rights under any applicable privacy law (including CCPA, CPRA, GDPR, UK GDPR, BIPA, and all U.S. state privacy laws), contact us at dad-tale-support@f13foundry.com.
EEA/UK residents may also contact your local supervisory authority if you are unsatisfied with our response. A list of EEA supervisory authorities is available at edpb.europa.eu. UK residents may contact the Information Commissioner's Office (ICO).