Privacy Policy
Last updated: October 26, 2026
My Saint Story is run by Sirius One, Inc., Unit 2A, 17/F, Glenealy Tower, No.1 Glenealy, Central, Hong Kong S.A.R. (“we”, “us”). This page explains what we collect when you visit our website or order a book, why, and the choices you have. Questions? Write to support@mysaintstory.com.
When you order a book
To write, illustrate, print and ship your child’s book we collect: your child’s first name and age; a photo of your child (and, if you add them, photos, first names and relationships of up to two adults); the shipping name, address and phone number; and your email address. You give us these on the order form, together with a parent’s consent.
The photos are used only as a reference for the illustrations. They are sent to the third-party AI providers that write and paint the book, are never used for anything else, and are deleted once the illustrations are finished. Your email is used for the order, for the private link to review your book, and — only if you tick the box — for occasional offers.
Who handles your data
We share only what each company needs to do its job:
| Company | What it does | What it receives |
|---|---|---|
| Stripe | Takes your card payment. | Your email, the amount and, for printed copies ordered from “Your orders”, the title of each book (which may include your child’s first name). Your card details go to Stripe and never reach our servers. |
| Resend | Sends our emails. | Your email address and the email itself. |
| OpenAI, Google and naga.ac | AI providers that write and paint the book. | Your child’s photo and first name and, if you add them, the adults’ names and relationships. |
| Our hosting provider | Runs the website and stores our data. | The data described on this page, stored on our behalf. |
How long we keep it
Photos are deleted once the illustrations are finished, and from our backups within 7 days (backups are replaced every 7 days). Unpaid orders are deleted after 30 days. Sign-in records (the codes we send you and your sign-in attempts, from “Your orders” and from your book link, with your email or a reference to your link, and your IP network) are kept for about a day: they are cleared the next time anyone signs in, and they leave our backups within 7 days. Paid orders are kept as long as we need them for the order itself, for support and claims, and for tax obligations.
Analytics and cookies
We measure how people use the website so we can make it clearer and easier to use. We use two tools:
| Tool | What it does | Where the data is |
|---|---|---|
| PostHog | Which pages and buttons are used, where people leave the order form, and — on the home page only — heatmaps and session recordings in which every form field and every photo is hidden. | European Union (PostHog EU Cloud, Frankfurt) |
| Google Analytics | Page visits and orders, so we can measure our advertising. | Google LLC (United States) |
| Google Ads | On the home page only: whether a visit that came from one of our ads ended in an order, so we can tell which ads work. It is not used to show you ads. | Google LLC (United States) |
We never send these tools your name, your child’s name, your email, your address, photos, or anything you type. A customer who orders is known to them only by the order number. The secret links we email you are removed from everything these tools receive.
They set cookies (or use your browser’s local storage) to recognise a returning visitor:
ph_* (PostHog), _ga and _ga_* (Google Analytics), _gcl_*
(Google Ads), and
mss_consent, which remembers your choice below. Analytics data is kept for up to 14 months.
Your choices
Visitors in Europe (EEA, UK, Switzerland): nothing is stored on your device for analytics until you press “Accept”. Before that — or if you press “Reject” — we count visits anonymously, without cookies.
Visitors in the United States and elsewhere: analytics runs by default. You can opt out at any time, including of any “sharing” of data for advertising under California law.
You can also block cookies in your browser; the website still works.
Children
Our books are about children, but our website is for their parents and guardians. We only collect a child’s information from a parent or legal guardian who gives verifiable consent on the order form, and only to make that child’s book.
Your rights
You can ask us what we hold about you, to correct it, or to delete it, by writing to us at support@mysaintstory.com or at the address above. If you are in Europe you may also complain to your local data-protection authority.