Privacy Policy

Effective Date: September 2, 2026
Last Updated: September 2, 2026
Website: https://storybyshubha.click/ (“Platform”, “we”, “our”, or “us”)

We respect your privacy and are committed to protecting the digital personal data you share with us. This Privacy Policy explains how your personal data is collected, used, processed, and safeguarded when you visit, create an account, comment, or publish stories on storybyshubha.click, in compliance with applicable data protection laws, including India’s Digital Personal Data Protection Act (DPDPA).

1. Information We Collect

We collect only the minimum personal data necessary to provide our storytelling and community services:

  • Account Information: When you register, we collect your username/display name, email address, and a securely hashed password. If you sign in via a third-party service (such as Google OAuth), we receive your basic public profile information (name and verified email) as permitted by your provider settings.
  • User-Generated Content (Public): When you submit stories, draft submissions, comments, or author bios, these contributions and associated timestamps become part of the platform. Please note: Content published as a story or comment is publicly accessible.
  • Technical & Log Data: When you browse the platform, our servers may automatically log basic information such as your IP address, browser type, device type, referring URLs, and access timestamps to ensure uptime, security, and prevent spam.
  • Cookies & Local Storage: We use essential session cookies or local storage strictly to keep you authenticated and maintain platform preferences (e.g., UI theme).

2. Purpose and Legal Basis for Processing

We process your data for the following specific purposes:

  • Account Management & Authentication: To verify your identity, maintain your session, and allow you to access your dashboard/profile.
  • Facilitating User Contributions: To attribute stories and comments to your profile, display your published works, and enable community interaction.
  • Platform Integrity & Security: To monitor against malicious activity, detect spam/bots, prevent unauthorized access, and protect user accounts.
  • Direct Communication: To send necessary system notifications (e.g., password resets or updates to legal policies). We do not send marketing newsletters unless you explicitly opt in.

3. Public Nature of Stories and Comments

  • Any stories, titles, comments, or profile bios you choose to publish are visible to the public and other registered users.
  • Do not post sensitive personal details (such as phone numbers, home addresses, government IDs, or private financial records) inside your story drafts, bios, or comments.
  • You are responsible for ensuring that the content you post does not violate third-party copyrights or privacy rights.

4. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third-party data brokers or marketing firms. We only share personal data with:

  • Cloud Hosting and Infrastructure Providers: Trusted infrastructure, database, or CDN providers that host our code and data under strict security agreements.
  • Legal Compliance: When required by applicable law, court order, or authorized governmental authority.

5. Data Retention

  • Active Accounts: We retain your account information as long as your account remains active.
  • Published Content: If you delete a comment or story, it is removed from public view immediately, and removed from active database records within a reasonable operational backup cycle.
  • Account Deletion: If you delete your account, your personal credentials (email, hashed password) are purged from active systems. We may retain pseudonymized logs solely for legitimate legal, anti-fraud, or audit purposes.

6. Your Rights (Data Principal Rights)

You have the following rights regarding your personal data:

  • Right to Access & Review: Request a summary of the personal data we hold about you.
  • Right to Correction: Update or correct incomplete or outdated personal information via your account settings.
  • Right to Erasure: Request the deletion of your account and associated personal data.
  • Right to Withdraw Consent: Where data processing is based on consent, you may withdraw your consent at any time (which may require account closure).
  • Right to Grievance Redressal: If you have concerns regarding how your data is handled, you may contact our Grievance Officer.

7. Security Measures

We implement standard administrative and technical safeguards to protect your personal data, including encrypted transmission over HTTPS/TLS, salted and hashed passwords, and restricted administrative access. However, no internet transmission is 100% secure, and we urge you to use strong, unique passwords.

8. Age Restrictions

Our platform is intended for users who are at least 18 years old (or the age of majority in your jurisdiction). If you are under 18, you may only use this site under the supervision of a parent or legal guardian. We do not knowingly collect data directly from unaccompanied minors.

9. Grievance Redressal & Contact Information

If you have any questions, wish to exercise your data rights, or want to submit a privacy-related concern, please contact our Grievance Officer:

  • Entity / Platform: storybyshubha.click
  • Contact / Grievance Officer: Shubha / Platform Administrator
  • Email: support@storybyshubha.click
  • Response Timeline: We aim to acknowledge and address your privacy inquiries within 30 days.