Privacy Policy

A note before we begin

Our Fable exists to preserve something irreplaceable: the love, memories, and voices of the people who matter most to your child. We take protecting your family's information as seriously as you take protecting your family. This Privacy Policy explains what we collect, why we collect it, how we protect it, and what rights you have. We've written it to be readable — not deliberately confusing.

If you have questions, email us at hello@ourfable.org. We're real people and we respond.

Two companion pages list the details: our Cookie Policy (every cookie and browser storage item we use) and our subprocessor list (every company that processes personal information for us, with a dated log of changes). To exercise your privacy rights without signing in, use our privacy request form.

1. Who We Are

Our Fable is operated by Our Fable, Inc. ("Our Fable," "we," "us," or "our"). We provide a private digital memory platform that allows parents to create sealed archives of letters, photos, voice recordings, and videos for their children, to be opened at milestone ages chosen by the parent.

2. Who Uses Our Fable — and Who Doesn't

Our Fable is a service for adults. Specifically:

• Parents and guardians create accounts, manage archives, and control all settings.
• Circle members (grandparents, aunts, uncles, godparents, friends) contribute content when invited by a parent.
• Children are the subject of the archives — the people being celebrated — but they do not use Our Fable. Children do not create accounts, log in, submit information, or interact with the platform in any way. Content is sealed until milestone ages set by parents, and is only revealed at those times through parent-controlled access.

3. Information We Collect

3a. Information You Give Us Directly

Parent / Account Holder Information: Email address, OPAQUE authentication records that let us verify a password without receiving or storing it, billing information processed by our payment processor, and account preferences. We do not store full payment card numbers.

Optional Sign-in Protection: If you add a passkey, we store its public credential and security metadata, not the private passkey. If you choose text-code verification, we collect your mobile number, its verification status, and security records needed to limit abuse. A number entered during setup is stored while enrollment is pending, even if you do not finish verification.

Child Information: Child's first name (or nickname — whatever you choose to use) and date of birth (used to calculate milestone unlock dates).

Circle Member Information: Name and email address of people you invite to contribute, and their relationship to the child if you provide it.

Content: Text letters, memories, messages, photos, videos, voice notes, captions, and descriptions.

3b. Information We Collect Automatically

When you use Our Fable, we automatically collect log data (IP address, browser type, pages visited), device information, and usage data (features used, actions taken). We use this to keep Our Fable running, diagnose problems, and measure the performance of eligible public pages when optional analytics cookies have not been declined. We do not use private archive content, child data, or family-submitted memories to build advertising profiles.

4. Why We Collect This Information

We collect and process your information to provide the Our Fable service, send transactional emails, maintain security, improve the product, comply with legal obligations, and measure performance on eligible public marketing pages if you have not declined optional analytics cookies. We do advertise Our Fable, but we do not use private archive content, child data, or family-submitted memories for advertising.

Text-code verification is optional. We use the number you provide for sign-in and sensitive-action verification, not marketing texts. You can manage your sign-in protection in account settings.

Marketing email is opt-in. We send news about Our Fable only to people who ask for it: a parent who ticks the optional box at sign-up or turns on "News from Our Fable" in Settings → Quiet settings, or someone who joins our mailing list. We record when and how you said yes. You can withdraw at any time in Settings or with the unsubscribe link in any such email, and that takes you off our newsletter list too. Archive, billing, security and account emails are not marketing and are not affected.

5. How We Share Your Information

We do advertise Our Fable. We do not sell your data, and we do not share your family's content with third parties for marketing purposes. Third-party ad measurement is limited to eligible public pages and to reporting sign-ups and purchases, as described in Sections 7 and 11.

We share information with the service providers that run Our Fable for us, and with limited marketing measurement partners when optional analytics and ad measurement have not been declined. We do not share private archive content, child data, or family-submitted memories with advertising platforms. We may disclose information if required by law, and if Our Fable is acquired, you will be notified in advance.

Infrastructure providers. Our database and backend run on Convex (Convex, Inc.), the website is hosted by Vercel (Vercel Inc.), and uploaded photos, voice notes, videos and export files are stored in Cloudflare R2 (Cloudflare, Inc.). Our subprocessor list names every company that processes personal information for us, including these and the internal alert, spreadsheet and lookup services we use, with exactly what each receives and a dated log of changes.

Our payment, email, text-code and measurement partners are:

• Stripe, Inc. — processes payments and subscriptions. Receives the parent's email address (as the customer identifier) and the plan and marketing-attribution details needed to process the subscription. It does not receive child names, dates of birth, circle-member contacts, or any archive content. Stripe's privacy policy is available at stripe.com/privacy.
• Resend, Inc. — sends transactional emails (account confirmations, circle question emails, delivery notifications). Receives the email address needed for delivery and limited message context such as invite, billing, or archive-delivery details. Resend's privacy policy is available at resend.com/legal/privacy-policy.
• Twilio Inc. (Twilio Verify) receives your mobile number and verification requests when you choose text-code sign-in protection. It sends security codes and checks the codes you submit. Our Fable does not send passwords, archive keys, child details, or archive content to Twilio. Twilio's privacy notice is available at twilio.com/en-us/legal/privacy.
• Meta Platforms, Inc. — receives limited browser, device, and page-visit data from eligible public marketing pages, and from the page shown right after checkout the page visit, the completed sign-up, and the start of the subscription, via the Meta Pixel unless you decline optional analytics cookies. No child names, birthdays, or archive content are sent to Meta. When you sign up or buy (including a gift), and you have not declined, our server also reports that event to Meta through its Conversions API with a one-way hash of your email address, Meta's browser cookies, your IP address and browser details, campaign tags, and the amount. This is used to measure ad performance, not to access or process your family's archive content. Meta's privacy policy is available at facebook.com/privacy/policy.
• Google LLC (Google Analytics 4). — receives limited browser, device, and page-visit data from eligible public pages via Google Analytics 4 unless you decline optional analytics cookies. Eligible pages include marketing, sign-in, sign-up, gift, journal and legal pages and the pages people open from invitation, question and delivery links; the private token in such a link is never reported. When you sign up or buy, and you have not declined, our server also reports that event with our internal family ID, the analytics browser ID, the plan, the number of children and the amount. This is used to measure traffic and page performance, not to access or process your family's archive content. IP addresses are anonymized. Google's privacy policy is available at policies.google.com/privacy.

No AI. Our Fable does not use AI services, and none of your information or archive content is sent to an AI provider. The questions we email to parents and circle members come from a fixed question library we prepare in advance; nothing is generated from your family's details.

6. Children's Privacy — COPPA Disclosure

Our Fable is not directed to children. Our Fable is directed to parents, grandparents, adult family members, and adult friends. Children do not use Our Fable — they do not create accounts, log in, or submit content. The service is designed, marketed, and operated exclusively for adults.

While children do not use Our Fable, parents do provide limited information about their children (name and date of birth). We collect this solely to operate the archive and calculate milestone dates. We do not share it with advertising platforms, use it for advertising, or process it for any purpose beyond archive operation.

We collect limited information about children (name and date of birth) only from a parent or legal guardian who has confirmed their guardian status during account creation.

If you believe a child under 13 has accessed Our Fable directly, please contact us at hello@ourfable.org and we will investigate and delete any such account promptly.

To submit a COPPA-related inquiry, contact hello@ourfable.org.

7. Cookies & Tracking Technologies

Our Cookie Policy lists every cookie and browser storage item we use, with its purpose and lifetime. In summary, we use cookies and similar technologies for the following purposes:

• Session cookies: Keep you logged in across browser sessions.
• Preference cookies: Remember your settings and choices.
• Analytics: Understand how eligible public pages are being used unless you explicitly decline optional analytics cookies.
• Google Analytics 4: We use Google Analytics 4 on a limited set of eligible public pages (see Section 5) unless you explicitly decline optional analytics cookies. GA4 may collect your IP address (anonymized), browser information, device information, and pages visited on those pages. This data is shared with Google LLC and is subject to Google's Privacy Policy. It is used solely for measuring traffic and page performance — not for targeting ads to your family's archive content.
• Meta Pixel: We use the Meta (Facebook) Pixel on a limited set of eligible public marketing pages, and on the page shown right after checkout, unless you explicitly decline optional analytics cookies. The Meta Pixel may collect your IP address, browser information, and pages visited on those pages; on the page shown right after checkout it also records that your sign-up was completed and your subscription started. No child names, birthdays, or archive content are sent to Meta. This data is shared with Meta Platforms, Inc. and is subject to Meta's Privacy Policy. It is used solely for measuring ad performance — not for targeting ads to your family's archive content.

We do advertise Our Fable, but third-party advertising and measurement cookies on our site are limited to Google Analytics 4 and the Meta Pixel described above. In the European Union, the EEA, the United Kingdom and Switzerland they stay off until you accept them in our cookie banner; elsewhere they run unless you decline. Anyone, anywhere, can decline (or change their answer) under Your choices on our Cookie Policy. If your browser sends a Global Privacy Control signal, we treat it as declining, everywhere. You can also change your browser settings, or visit Google's opt-out or Meta's ad preferences. Some features of Our Fable may not work correctly if required cookies are disabled.

8. Data Retention

Voluntary cancellation alone does not delete the archive. If a payment is missed, adding to the archive and all circle questions pause immediately. You can still log in and download your archive. Account holders receive at least weekly reminders. Your Archive Guardian is notified 120 days after the missed payment date and invited to accept a separate passkey-confirmed takeover. Guardians then receive weekly reminders. We prominently remind you about downloading on Day 196 and send daily final warnings on Days 207, 208, and 209. An unresolved, unclaimed archive is removed from active systems on Day 210 only after a fresh payment-status check. Successful payment restores full usage and circle questions and cancels the countdown. Completed guardian takeover stops this countdown; adding memories and circle questions remain paused until payment is restored.

If you separately request account deletion, your archive enters a 30-day retention period. During that window, an approved restoration request can stop deletion. After 30 days, the archive is removed from active systems. Residual encrypted backup copies may remain for up to 14 additional days during normal backup rotation. Contact us at hello@ourfable.org for help.

Billing records may be retained for up to 7 years as required by applicable tax law — these contain only transaction metadata, not your content.

Service discontinuation: In the event Our Fable ceases operations, we intend to provide customers at least 60 days notice and the ability to export archive data before systems are shut down, subject to applicable law and operational constraints.

9. Security

For newly created families, sealed archive content is encrypted on the contributor's device before it is transmitted to our servers. Data in transit uses TLS 1.2 or higher, and the raw family key is not stored by Our Fable. Archive content is programmatically locked until milestone dates.

When an authorized parent initiates a milestone delivery, their browser decrypts only the eligible items and re-encrypts them under a fresh one-time delivery key. To preserve one-click email opening without requiring the recipient to create an account, end-to-end encryption ends at that authorization: Our Fable briefly handles the delivery key while sending or retrying the email and then erases the secret-bearing email body after acceptance, terminal failure, or within 15 minutes. Content not included in that delivery remains sealed.

Newly created parent, co-parent, and guardian accounts use the OPAQUE protocol, which verifies passwords cryptographically without transmitting or storing them on our servers. A pinned set of pre-launch test and legacy accounts remains on our previous sign-in system while we retire it; those accounts are outside this new-account claim.

10. Your Rights

You may access, correct, export, or delete your data at any time by contacting hello@ourfable.org or using our privacy request form, which works without an account. Parents can also download the archive from Settings → Data & privacy, where the account owner can delete the account. We confirm a request by email before acting on it, and may ask you to show you hold the account before we release or delete account information.

California residents (CCPA, as amended by the California Privacy Rights Act, "CPRA"): You have the right to know what personal information we collect, use and disclose, and to get a copy of it in a portable format; to correct it; to delete it; to opt out of its sale or sharing (see Section 11); and to limit our use of sensitive personal information. We use sensitive personal information (such as your account sign-in) only to provide the service, not to infer characteristics about you. We will not discriminate against you for exercising these rights. You can use an authorized agent; we may ask the agent for proof of authorization and ask you to confirm the request. We respond within 45 days of receiving a request, and act on an opt-out of sale or sharing within 15 days.

EEA/UK residents (GDPR): You have additional rights including restriction of processing, objection to legitimate-interest processing, and the right to lodge a complaint with your local data protection authority. We respond within one month of receiving a request. Our legal bases are: performance of contract (providing the service), legitimate interest (security, improvement), legal obligation, and consent (optional marketing and, in the EU, EEA, UK and Switzerland, optional analytics and ad measurement).

11. Do Not Sell or Share My Personal Information (California)

We do not sell personal information.

California law can treat some advertising measurement as "sharing" personal information for cross-context behavioral advertising, even when no money changes hands. Where you have not opted out, we share the following with Meta Platforms, Inc. (Meta Pixel and Conversions API) and Google LLC (Google Analytics 4), as described in Sections 5 and 7:

• Identifiers: IP address, browser cookie identifiers, and, when you sign up or buy, a one-way hash of your email address (Meta) or our internal family ID (Google).
• Internet activity: the eligible public pages you visit, with private link tokens removed, and the campaign that brought you to us.
• Commercial information: that you signed up or made a purchase, the plan, and the amount.

We never share children's information, archive content, or circle members' details for advertising, and we do not sell or share the personal information of anyone we know to be under 16.

How to opt out:

• Choose "Decline" under Your choices on our Cookie Policy. This stops the Meta Pixel and Google Analytics on that browser, and the sign-up and purchase reports for checkouts started from it.
• Turn on Global Privacy Control in your browser. We honour it automatically as an opt-out of sale and sharing, in every state and country.
• Make an "Opt out of sale or sharing" request on our privacy request form. It is tied to your email address, so it also stops the sign-up and purchase reports our server sends about you, whatever browser you use.

12. EU Digital Services Act

Our single point of contact for European Union Member State authorities, the European Commission and the European Board for Digital Services, and for people who use Our Fable, is hello@ourfable.org. You can write to us in English. To report content you believe is illegal, use the "Report" link on the page where you saw it, or see our Copyright and Content Reporting Policy; we confirm receipt, review the report, and tell you what we decided and why.

13. Changes to This Policy

We will notify you by email at least 30 days before any material changes to this policy take effect. Continued use of Our Fable after that date constitutes acceptance of the updated policy.

14. Contact

Our Fable, Inc.
hello@ourfable.org