Privacy Policy

01 Core Client-Side Architecture

StoryBrain AI is engineered with a privacy-by-design architecture. The overwhelming majority of utilities across our platform—including image compressors, JSON formatters, base64 tools, password generators, and financial calculators—execute entirely within your web browser using modern web standards and WebAssembly.

When you manipulate documents, calculate returns, encode data, or generate secure passwords, your inputs remain inside your device's memory. No raw data, images, or files are uploaded to our servers for processing.

02 Information We Collect & Do Not Collect

Data We Never Collect

• We do not collect names, phone numbers, postal addresses, or payment card credentials.
• We do not retain copies of files, text, images, or documents you process through our tools.
• We do not store passwords, cryptographic keys, or sensitive seeds generated in our utility suites.

Technical Telemetry & Server Logs

When your browser requests a web page or static asset, our web server infrastructure automatically records standard HTTP transaction metadata:

• IP address (anonymized or truncated where supported).
• Browser user-agent string, operating system version, and system language.
• HTTP referrer URL, request timestamp, and server response code.

These server logs are maintained strictly for security monitoring, DDoS mitigation, rate-limiting enforcement, and server performance diagnostics. Server logs are automatically purged on a rolling 90-day retention schedule.

03 Cookies, Analytics & Advertising

Cookies and client-side storage tokens help ensure continuous site functionality, remember your interface settings, and support our free infrastructure.

1. Functional Storage

We use browser localStorage to remember your selected visual theme (light or night mode) and cookie consent status. No personally identifiable tracking information is stored in these tokens.

2. Advertising Partners (Google AdSense)

To keep StoryBrain AI 100% free and accessible without paywalls, we partner with advertising platforms including Google AdSense.

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other web destinations.
• Google's use of advertising cookies enables it and its partners to serve relevant advertisements based on your visit to our platform and other sites across the web.
• You may opt out of personalized advertising at any time by visiting Google Ads Settings.
• You can also opt out of third-party advertising cookies through the Digital Advertising Alliance (aboutads.info) or the European Interactive Digital Advertising Alliance (EDAA).

04 Third-Party Services

StoryBrain AI may link to external websites, documentation, or public API endpoints. We do not control the privacy policies or operational conduct of third-party domains. We advise you to review the privacy policies of any third-party websites you visit.

Processors & Infrastructure Providers

• Google LLC — advertising (Google AdSense) and measurement (Google Analytics), loaded only after you accept cookies. See Cookies, Analytics & Advertising.
• Cloudflare, Inc. — content delivery, caching, and security (e.g., DDoS mitigation). Cloudflare may process limited technical data such as IP addresses to provide these services.

05 Your Legal Rights (GDPR, UK GDPR & CCPA)

Depending on your location (including the European Union, United Kingdom, and California), you possess statutory privacy rights:

• Right to Access: You may request details of personal information we maintain. Because we operate without accounts, we hold zero user dossiers.
• Right to Erasure: You may request the deletion of any identifiable technical server logs linked to your IP address.
• Right to Object & Restrict Processing: You may object to the processing of technical data or opt out of non-essential cookies.
• CCPA / CPRA Disclosures: StoryBrain AI does not sell or share personal information for monetary or commercial consideration.

06 Security & Data Retention

We maintain strict security defenses, including modern TLS 1.3 encryption, cryptographic Content Security Policy (CSP) nonces, HTTP Strict Transport Security (HSTS), and anti-tampering headers. We do not store uploaded files or tool inputs on our servers, which structurally minimizes breach risk. We do store limited data: anonymous aggregated analytics for up to 90 days and contact-form messages you send us. You may request deletion of your contact message at any time via [email protected].

Data retention: technical server logs are retained for a maximum of 90 days and then automatically purged. Cookie consent choices stored in your browser (localStorage cookieConsent) persist until you clear them via the Cookie Settings button or your browser controls.

07 Policy Updates

We may update this Privacy Policy periodically to reflect technological improvements, newly added tools, or regulatory changes. Any modifications will appear directly on this page with an updated "Effective Date." Continued use of our utilities constitutes agreement with the revised policy.

08 Contact Information

If you have questions, inquiries, or feedback regarding our privacy practices or data handling, please contact our team:

Email: [email protected]