storyscene
Try StorysceneNo sign-up required

Legal

Privacy

What data we collect, why, and how to switch it off.

Storyscene legalv3.1Effective 1 Oct 2026

1. Scope

This policy explains how Storyscene handles personal data when you use the website, app, account, cloud projects, sharing, billing and product analytics.

Storyscene is operated by Mohammed Bellouki, who is responsible for the product-side processing described in this policy. Privacy requests can be sent to [email protected].

2. Data Storyscene processes

Account and authentication

Email address, account identifiers, authentication-provider identifiers and security metadata, plus the approximate country seen when you first sign in (two-letter country code from Cloudflare; your IP address is not stored). If you answer the optional profile question shown after sign-up, we also keep the profession and the main kind of projects you selected from a fixed list (for example “Director” and “Ads”), to understand who uses Storyscene and improve it. You can skip it. If you use email/password, the password is handled by the authentication provider and is not available to Storyscene in readable form.

Projects and cloud data

Projects, scenes, objects, cameras, notes, names, images and other content you intentionally save or upload, together with metadata needed to synchronize, version, export and restore supported cloud projects.

Sharing

Share-link identifiers, expiry/revocation state and the project reference or snapshot required to serve the link.

Billing metadata

Plan and entitlement state, Paddle customer/subscription identifiers, interval, status and billing timestamps needed to provision access and open the customer portal. Storyscene does not store payment-card numbers.

Product analytics

Event name, random browser analytics identifier, session identifier, Storyscene version, page path, limited product properties and the approximate country of the connection (two-letter country code from Cloudflare; the IP address itself is not stored). Short technical error information may also be sent for client-error monitoring.

3. Usage statistics

Our usage statistics are not linked to your Storyscene account. We don’t record your screen or your sessions, and your project content, project names and uploaded images never go to analytics.

4. Why data is processed

  • Provide Guest, Free and Pro functionality.
  • Authenticate accounts and synchronize supported cloud projects.
  • Create and serve sharing links when requested.
  • Provision paid access and billing self-service.
  • Secure the service and prevent abuse.
  • Diagnose faults and understand product usage.
  • Meet legal and accounting obligations.

5. Analytics control

Storyscene uses a first-party browser identifier for product measurement, designed to rotate after approximately 13 months rather than being renewed forever.

You can turn product analytics off in Settings, under Data. Storyscene then removes the local analytics identifier, queue and analytics session identifier from that browser and stops sending new product-analytics events from that client.

Rules for storage/access on a user’s device vary by jurisdiction. Where prior consent is legally required for optional analytics storage, Storyscene must obtain it before using that storage.

6. Providers

  • Supabase for authentication, database, Edge Functions and cloud product infrastructure. The Storyscene project is hosted in the Paris region (eu-west-3).
  • Cloudflare for website/CDN delivery and network security.
  • PostHog for product analytics through Storyscene’s server-side relay to its EU endpoint.
  • Paddle for paid transactions, subscriptions and billing self-service as Merchant of Record.
  • Google only where a user chooses a Google-backed authentication flow.

7. International processing

Some of these providers process data outside the European Union.

8. Retention

  • Guest data stored in your browser stays there until you or your browser delete it.
  • Account and cloud-project data is kept while your account is active, then removed or de-identified when the account is deleted, subject to legal requirements.
  • Share records are kept while a share is active, and for a limited time after it is revoked or expires, for security.
  • The browser analytics identifier is renewed after about 13 months.
  • Usage statistics are kept only as long as reasonably needed for product measurement, security and troubleshooting.
  • Billing and transaction records may be kept as required by Paddle, tax, accounting or applicable law.

9. Your choices and rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, and to receive a portable copy of it. You can export your Storyscene projects directly from the app.

For privacy questions or requests, write to [email protected] or use the contact form. For payment or refund data handled by Paddle, you may also need to contact Paddle Buyer Support.

10. Security

Storyscene uses HTTPS for data in transit and account-level controls for protected data. Treat share links like passwords: anyone who has one can view what it shares.

11. Children

Storyscene is a professional preproduction tool for people aged 16 and older. Account sign-up asks you to confirm that you are 16 or older; we do not ask for or store your date of birth, only the time of that confirmation. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has created an account, contact us and we will delete it.

12. Changes

We may update this policy as Storyscene evolves. Material changes will be announced in a reasonable way where required.