Personal data privacy policy

1. Introduction

MyStoryAR ("we", "us", "our") operates this website and the WebAR viewer (together, the "Service"). This policy describes what data we collect, why we collect it, and the choices you have. By using the Service you agree to the collection and use of information in accordance with this policy.

2. Data we collect

• Account data — your name, email address, and password hash when you register.
• Content you upload — photos, videos, and the AR target files generated from them, plus the names you give your living photos and albums.
• Usage data — QR scans and AR view events for your photos (date and count), used for the analytics we show you.
• Technical data — session cookies needed for login and security (CSRF). We do not use advertising trackers.

3. How your content is processed

The AR tracking file for each photo is compiled in your own browser before upload — your photo is not sent to any third-party processing service. Uploaded files are stored on our server and are only reachable through the links and QR codes generated for your account.

4. Sharing

We do not sell or rent your personal data. Your photos and videos are visible only to people who have the share link or QR code you distribute. We may disclose data when required by law.

5. Retention & deletion

Content stays on the Service while your account exists. Deleting a living photo removes its files from our storage; deleting your account removes your personal data and all remaining content. You can delete your account at any time from Settings.

6. Security

Passwords are stored hashed, connections are encrypted in transit (https), and access to your content management is protected by your login. No method of transmission or storage is 100% secure, but we work to protect your data with commercially reasonable safeguards.

7. Children's privacy

The Service is not intended for use by children under 13. We do not knowingly collect personal data from children under 13.

8. Changes & contact

We may update this policy from time to time; the effective date above reflects the latest revision. Questions about this policy: [email protected].