Information used in the creator
The creator stores non-photo choices—such as age, theme, dedication, personality, and interests—in this browser's local storage. Generated previews may be stored in browser IndexedDB. Raw uploaded photos stay in current-tab memory and must be uploaded again after a refresh.
Live AI preview processing
Choosing the primary child's photo is the affirmative permission action for temporary AI processing. For a Family Adventure, choosing the selected adult or family group's required photo also gives permission to check both images independently and temporarily combine them into one private reference. The approved reference and selected story details are sent through our server to our private AI artwork provider to create preview artwork. Other supporting-character photos are not sent. Provider credentials never run in browser JavaScript. Input and output media use temporary private provider storage configured to expire after up to one hour, and JSON input/output history is disabled.
Anonymous visitor analytics
We use Vercel Web Analytics to understand aggregated visits, popular pages, referrers, general country, browser, operating system, and device type. It does not use third-party cookies. Analytics URLs are stripped of query strings and fragments, private download and API routes are excluded, and embedded book identifiers are redacted. Names, email addresses, uploaded photos, dedication text, access tokens, and checkout details are never intentionally sent as analytics data.
Optional Meta advertising measurement
If you choose Allow marketing, Meta Pixel measures page views and the start of personalization so we can understand Facebook and Instagram advertising. It is not loaded before permission, respects Global Privacy Control by default, and is disabled on account, API, and private-download routes. Unknown query parameters are not tracked. We never intentionally send names, email addresses, uploaded photos, dedication or story text, access tokens, private book identifiers, or payment details to Meta. You can change this choice from Cookie choices in the footer.
Registering a Digital book
Before Digital checkout, the approved cover and preview spread—not the raw child photo—are copied to private storage and linked to a server-generated book ID. Safe personalization text and that book ID are sent to Shopify as cart-line attributes. Raw photos and browser image blobs are never attached to Shopify.
Payment verification
A return from Shopify checkout never unlocks a book. LittleYouStories acts only on a Shopify orders/paid webhook whose signature, topic, store, payment state, Digital variant, and book ID have been verified. Duplicate webhook deliveries are recorded and processed idempotently.
Full-book generation and storage
After verified payment, the approved preview and personalization are used to generate the story, artwork, and final PDF. Versioned artwork and PDFs are stored privately. Order, book-status, and ownership records are kept in a secure database so the purchased book can appear in My Books.
Secure access and email
A same-device secure cookie can preserve access after checkout. We also use the Shopify order email to send a short-lived, single-use sign-in link when the PDF is ready. Email lookup values are keyed hashes and stored email values are encrypted. Download requests require an authorized session and a paid, ready book.
Your choices
Remove a character photo to revoke its local object URL. Clear browser site data to remove local draft, cart, and preview data. For help with a purchased book or an access request, use the contact page. Avoid using the creator on a shared device if those details should not remain there.