/
💐 Mother's Day in 41 days. Order now for guaranteed delivery
Last updated: January 15, 2026
Spark Stories SAS ("we", "us", "our") is the data controller responsible for your personal data. We are registered in France and operate the website spark-stories.com. Our registered address is 42 Rue de Rivoli, 75001 Paris, France. For any privacy-related questions, you can reach our data protection officer at privacy@spark-stories.com.
We collect data that you provide directly and data generated through your use of our service. Here's what that includes:
Account information: email address, name, and preferred language when you create an account.
Order information: shipping address, billing details (processed by Stripe - we never see or store your full card number), and the personalization data for your book (child's name, age, chosen theme).
Usage data: pages visited, features used, browser type, device type, IP address, and referring URL. This is collected through Vercel Analytics and, if you consent, through cookies.
Communication data: the content of emails or support messages you send us.
We use your personal data for the following purposes:
To fulfill your order: generating your personalized book, processing payment, arranging printing and shipping. Legal basis: performance of a contract.
To communicate with you: order confirmations, shipping updates, responses to support requests. Legal basis: performance of a contract and legitimate interest.
To improve our service: analyzing usage patterns to fix bugs, optimize performance, and develop new features. Legal basis: legitimate interest.
To send marketing communications: only if you have explicitly opted in. You can unsubscribe at any time. Legal basis: consent.
We share your data only with the following categories of service providers, and only to the extent necessary to deliver our service:
Stripe - payment processing. Stripe acts as an independent data controller for payment data. See Stripe's privacy policy.
Our printing partner - receives the book file and shipping address to fulfill physical orders. Located in Germany, bound by a data processing agreement.
Supabase - database hosting (servers in the EU). Bound by a data processing agreement.
Vercel - website hosting and analytics. Bound by a data processing agreement.
We do not sell your personal data to anyone. Period.
We use cookies to keep you logged in, remember your language preference, and understand how people use our website. For full details on which cookies we use and how to manage them, see our Cookie Policy.
If you are located in the European Economic Area, you have the following rights regarding your personal data:
Access: you can request a copy of all personal data we hold about you.
Rectification: you can ask us to correct any inaccurate data.
Erasure: you can ask us to delete your data, subject to legal retention requirements.
Portability: you can request your data in a machine-readable format.
Objection: you can object to processing based on legitimate interest.
Restriction: you can ask us to limit how we use your data while a complaint is being resolved.
To exercise any of these rights, email us at privacy@spark-stories.com. We respond within 30 days, as required by law. You also have the right to lodge a complaint with your local supervisory authority (in France, that's the CNIL).
We retain your account data for as long as your account is active. Order data is kept for 5 years after the transaction date to comply with French accounting regulations. If you delete your account, we anonymize your personal data within 30 days, except where retention is required by law.
We protect your data with encryption in transit (TLS 1.3) and at rest. Access to personal data is restricted to team members who need it to perform their job. We conduct regular security reviews and our infrastructure is hosted on Vercel and Supabase, both of which maintain SOC 2 Type II certifications.
Our service is intended for adults purchasing books for children. We do not knowingly collect personal data from children under 16. The child's name and age provided during book creation are used solely for the purpose of personalizing the product and are stored as part of the order record. If you believe a child has provided personal data to us directly, please contact us so we can remove it.
For any privacy-related questions or to exercise your rights, contact us at privacy@spark-stories.com or write to: Spark Stories SAS, Data Protection Officer, 42 Rue de Rivoli, 75001 Paris, France.