Privacy Policy

Information you provide. When you create a book, we collect your child’s first name, pronoun, and (for some titles) a short appearance description and one or more photos of your child, all provided by you. When you order or join our waitlist, we collect your email address. For printed books, we collect the shipping name and address you enter at checkout.

Payment information. Payments are processed by Stripe. Your card details go directly to Stripe and never touch our servers; we receive only order confirmation, the amount, and your shipping details.

Automatic information. Like most websites, we receive standard technical data such as IP address, browser type, and pages visited, and we use essential cookies to keep you signed in and to remember your book in progress. We do not use advertising or cross-site tracking cookies.

Our service is designed for adults. We do not knowingly collect information directly from children; all information about a child is provided by that child’s parent or legal guardian, who consents to its use for the sole purpose of creating their personalized book.

Photos of your child are stored in private, access-controlled storage, are used only to create your book’s illustrations, and are automatically deleted after your order is completed. If you start a book but don’t order, you can ask us to delete the photos at any time at [email protected].

We use the information above to:

• generate your personalized book and show you a preview;
• process your payment and fulfill your order (digital delivery and/or printing and shipping);
• email you order confirmations, delivery links, and sign-in links;
• send waitlist or product updates you signed up for (you can unsubscribe anytime);
• operate, secure, and improve the service.

We do not sell personal information, and we do not use it for third-party advertising.

For AI-personalized titles, your child’s photos and description are processed by our AI image providers solely to create your book’s illustrations. We use these providers under business terms that do not permit them to use your content to train their models.

We share information only with the service providers who help us run Go Little Star, and only what each one needs:

• Supabase — database, sign-in, and private file storage;
• Stripe — payment processing;
• Resend — transactional and waitlist email;
• AI image providers (currently Replicate/OpenAI and Google) — generating illustrations for AI titles;
• Lulu — printing and shipping physical books (receives the book file and your shipping details);
• DigitalOcean — application hosting.

We may also disclose information if required by law or to protect our rights, our customers, or others.

Uploaded child photos are deleted automatically after your order is fulfilled. We keep your finished book files so we can re-send your digital copy or resolve print issues, and we keep order records as required for accounting and legal purposes. You can request earlier deletion of your book and account data at any time.

All data is encrypted in transit, files are stored in private buckets that are not publicly accessible, and download links are time-limited and signed. No system is perfectly secure, but we design ours so that the most sensitive data — your child’s photos — is held for the shortest possible time.

You may request access to, correction of, or deletion of your personal information (and your child’s) at any time by emailing [email protected]. Depending on where you live (for example, the EU/UK under GDPR or California under the CCPA), you may have additional rights, such as data portability or the right to lodge a complaint with a supervisory authority. We honor these requests regardless of where you live.

If we make material changes to this policy, we will update the effective date above and, where appropriate, notify you by email.

Questions? Email us at [email protected].