Privacy Policy
This is the authoritative English version of the Privacy Policy.
This Privacy Policy explains what personal data The Story Shack collects, why it is collected, and which third-party services are involved.
The Story Shack is operated by Martin Hooijmans. If you have privacy questions, email info@thestoryshack.com.
Website analytics
The Story Shack uses Umami to track visits and clicks on selected buttons. Umami is privacy-focused and is used to understand whether the site is useful and worth maintaining. Umami does not provide me with personally identifiable profiles of visitors.
Account features and Supabase
If you use account-based features such as Chest, saved ideas, synced themes, or shared sign-in across Story Shack apps, some of your data is processed through Supabase.
That may include:
- Your email address
- Authentication data needed to sign you in
- Saved ideas and account-linked preferences
- Basic account profile data such as a username, if you set one
- Email preference data, including your current marketing email settings
If you choose Google sign-in, Google also shares the account information needed to authenticate you, such as your email address and basic profile identity. This data is used only to provide the login flow and account features.
Email communications
The Story Shack uses your email address to send transactional or service-related emails such as sign-in links, account verification, purchase receipts, billing notices, security alerts, and important service updates.
The Story Shack may also send optional marketing emails about new features, launches, offers, and related Story Shack products. You can unsubscribe or update your email preferences at any time.
Email delivery providers may process your email address and the minimum related metadata needed to deliver transactional and, where enabled, marketing emails on our behalf.
Payments and subscriptions
If you start a paid subscription, checkout and billing are handled by Lemon Squeezy as the payment processor and merchant of record. The Story Shack does not store your full payment card details on its own servers.
Advertising
In order to keep the lights on, The Story Shack uses Google AdSense to display advertisements on thestoryshack.com. If you are in a region where consent is required, you will be shown a consent interface.
Google's advertising privacy information applies for advertising and monetization purposes.
Please note that, as part of the California Consumer Privacy Act (CCPA), a "Do not share my Personal Information" link is available in the footer for California-based users.
How data is used
Any data collected through The Story Shack is used to:
- Operate the site and its account features
- Save and sync your preferences and saved ideas
- Process subscriptions and payments
- Send transactional and service-related emails needed to operate the service
- Send optional marketing emails and honor your email preference settings
- Keep the service secure and prevent abuse
- Measure usage in a privacy-conscious way
The Story Shack does not sell your personal data.
Contact
If you would like me to delete account-related data or have a privacy question, email info@thestoryshack.com.
Best wishes,
Martin Hooijmans
info@thestoryshack.com
Affiliate attribution
When you visit The Story Shack through a Lemon Squeezy affiliate link, or when an existing affiliate attribution is present, The Story Shack loads Lemon Squeezy's affiliate tracking service. Lemon Squeezy stores the ls_aff_ref cookie and may use a browser or device identifier to attribute an eligible purchase to the referring affiliate.
The attribution is shared across thestoryshack.com and its Story Shack app and sign-in subdomains so that it can survive navigation between the site, apps, and checkout. It is used only to measure affiliate referrals, prevent abuse, calculate commission, and manage affiliate payouts. Attribution lasts for up to 30 days and uses the most recent eligible referrer.
Lemon Squeezy is the recipient and provider of this affiliate tracking and payout service. Its own privacy terms also apply.
Writer MCP and connected AI clients
When you connect Writer to a compatible AI client, the Writer MCP processes your email address, OAuth grant details, subscription capability, and the Writer content needed to answer your request. Read results and user-authorized changes are returned to the connected client, whose own privacy terms also apply.
The MCP does not collect the surrounding AI conversation. Operational logs contain request and client identifiers, tool names, outcomes, durations, and affected record identifiers, but not OAuth tokens or creative content. Mutation audit records retain operation identifiers, timestamps, status, affected records, and before/after hashes without storing creative content. Deleted Writer items and scenes remain recoverable in Writer for 30 days.
You can disconnect the client from its connection settings. To request account-data deletion or report a security concern, email info@thestoryshack.com.
Last updated: 2026-08-03
