Privacy Policy

Last updated: 30 August 2026

This policy explains how personal data is handled for people who use Stories to Solve (a desiderai brand), available at storiestosolve.com.

Data controller

Marco Molica
Francesco Court 99, 2/A
Pietà PTA 1320, Malta
privacy@storiestosolve.com

What we collect

• From Google sign-in: your Google identifier, email address and name.
• Generated by using the service: a session token (in the cookie), your device/browser type (user agent), stories played, number of questions, likes, and your access entitlement (free or purchased).
• Technical: IP address and logs handled by Cloudflare for security and operation.

Why, and on what legal basis

• To provide your account and the service — performance of a contract (Art. 6.1.b GDPR).
• Security, abuse prevention and rate limiting — legitimate interest (Art. 6.1.f).
• Accounting and tax obligations for purchases — legal obligation (Art. 6.1.c).

Payments

Payments are handled by Stripe acting as merchant of record: it collects payment, issues the receipt and handles VAT. Your card details never pass through our systems.

Who we share data with

We use providers that process data on our behalf: Google (authentication), Cloudflare (hosting, database, logs) and Stripe (payments). Some transfers may occur outside the European Union, under appropriate safeguards (standard contractual clauses).

How long we keep it

• Sessions: deleted 180 days after last use.
• Account, progress and entitlement: as long as the account exists.
• Technical database recovery (Cloudflare Time Travel): up to 30 days.
• Payment-related data: for as long as tax obligations require.

Deleting your account

You can delete your account from the account menu («Delete account»): it removes the user, sessions and progress. If you made a purchase, the linked email is retained so you can recover the entitlement by signing back in with the same email, and payment data is kept for tax obligations.

Your rights

You can request access, rectification, erasure, restriction, objection and portability of your data by writing to privacy@storiestosolve.com. You may also lodge a complaint with a supervisory authority: as the controller is established in Malta, the competent authority is the Information and Data Protection Commissioner (IDPC) of Malta (idpc.org.mt); you may also contact the authority in your country of residence.

Cookies

We use only technical cookies: details in the Cookie policy.

Changes

We may update this policy; the date above shows the latest revision.