Story Keeper
Sign up

Privacy Policy

Last updated: July 12, 2026

Who we are

Story Keeperis a community-built web app for organizing Yoto card collections and gift registries. It is operated by its maintainer, Brady Watkinson (“we”, “us”), and is not affiliated with, sponsored by, or endorsed by Yoto. This policy explains what personal data Story Keeper collects, why, who it is shared with, and the choices you have.

For any privacy question or request, reach us through our feedback board.

What data we collect, and why

We only collect the data needed to run the features you use. We do not sell your personal data.

Account & authentication

When you create an account we store your email address, display name, and (if you set one) an avatar. Sign-in and account management are handled by Better Auth, and your account record is stored in our Convex backend. This data is used to authenticate you, secure your account, and personalize the app.

Payments (Pro subscriptions)

If you upgrade to the Pro tier, billing is processed by Polar, our merchant of record. Polar handles your payment details; we never see or store your full card number. We retain the subscription status Polar reports back to us so we can unlock Pro features for your account.

Product analytics

We use PostHog to understand how the app is used (pages viewed, features used, and similar interaction events) so we can improve it. These events are tied to your account or an anonymous identifier.

Advertising

Free-tier users see ads served by Google AdSenseon some pages. Google and its partners may use cookies and device identifiers to serve and measure ads, including personalized ads where permitted. Pro subscribers see no ads. You can review and control Google’s ad personalization at My Ad Center.

Connected Yoto account

If you choose to connect your Yoto account, we use Yoto’s official OAuth flow. We store access and refresh tokens so we can, on your behalf, read your Yoto players and their status, the cards you own, your library groups, and what is currently playing — and control playback when you ask us to. We never receive your Yoto password. You can disconnect your Yoto account at any time from Settings, which deletes the stored tokens.

Error & performance logs

To keep the app reliable we use Sentry for error monitoring and Axiom for logs and performance metrics. These may incidentally include technical data such as your IP address, browser/device information, and the actions leading up to an error.

Cookies & local storage

We use cookies and browser local storage for a small number of purposes:

  • keeping you signed in (authentication session);
  • remembering your language/locale preference;
  • remembering your cookie and ad-consent choices;
  • the analytics and advertising uses described above.

You can review or change your cookie and analytics choices at any time — . The same option is available from the “Cookie settings” link in the site footer.

Who we share data with

We share data only with the service providers that make Story Keeper work, each acting as our processor or an independent controller for its own service: Convex (backend and hosting), Better Auth (authentication), Polar (payments), PostHog (analytics), Google AdSense (advertising, free tier), Sentry and Axiom (error and log monitoring), Resend (transactional email), and Yoto (only when you connect your Yoto account). We may also disclose data where required by law.

Data retention

We keep your account data for as long as your account exists. Analytics and log data are retained only as long as needed for the purposes above and then deleted or anonymized. When you delete your account, we delete your personal data as described below.

Your rights & data deletion

You can access and update your profile from Settings, and disconnect a linked Yoto account there at any time. Depending on where you live, you may also have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing.

To delete your account and associated data, send a request through our feedback board. We will delete your account, collections, registries, and any stored Yoto tokens within 30 days and confirm once it is done. This is also the process for the Facebook data-deletion request required for accounts created via Facebook Login.

Children’s privacy

Story Keeper is intended for parents and adult caregivers, not for children. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

Changes to this policy

We may update this policy as the app evolves. When we do, we will revise the “Last updated” date above, and we will provide a more prominent notice for material changes.

Contact

Questions about this policy or your data? Reach us through our feedback board.