Sprinkles

Privacy Policy

Last updated: February 2, 2026

1. Information We Collect

Account information: When you sign in with Google, we receive your name, email address, and profile picture. You may also choose a unique handle for your profile.

Content you create: Story prompts you type or dictate, images you upload, and the AI-generated stories (text and illustrations) produced from them.

Voice recordings: If you use the microphone feature, your audio is sent to OpenAI Whisper for transcription. The audio is processed in real time and is not stored by Sprinkles after transcription is complete.

Usage data: We collect anonymous usage analytics (page views, story views) via Vercel Analytics to understand how the Service is used.

2. How We Use Your Information

  • To authenticate you and maintain your login session.
  • To generate AI-created stories and illustrations based on your prompts.
  • To display your public profile (name, handle, picture) and stories to other users.
  • To improve the Service and understand usage patterns.
  • To enforce our Terms of Use and protect the safety of our community.

3. Third-Party Services

We rely on the following third-party services to operate Sprinkles. Each service receives only the data necessary for its function:

  • Google OAuth 2.0: Handles authentication. Your Google account information is shared during sign-in.
  • Google Vertex AI (Gemini): Your prompts and any uploaded images are sent to Google's Gemini models to generate story text and illustrations.
  • OpenAI Whisper: Voice recordings are sent to OpenAI for transcription. Audio is not retained after processing.
  • Microsoft Azure Blob Storage: Generated story images are stored on Azure. These images are publicly accessible by URL.
  • MongoDB Atlas: Your account data, stories, and episodes are stored in MongoDB's cloud database service.
  • Vercel Analytics: Collects anonymous usage analytics to help us understand traffic patterns.

Each third-party service is governed by its own privacy policy. We encourage you to review them.

4. Cookies and Session Management

We use a single HTTP-only session cookie, signed with HMAC-SHA256, to keep you logged in. This cookie does not track you across websites and is essential for the Service to function. We do not use advertising or tracking cookies. Third-party analytics services may use their own cookies as described in their respective privacy policies.

5. Data Storage and Security

  • User account data and stories are stored in MongoDB Atlas.
  • Story images are stored in Azure Blob Storage.
  • Session cookies are cryptographically signed with HMAC-SHA256.
  • All communication between your browser and our servers is encrypted via HTTPS.

While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Public Content

Stories you create on Sprinkles are public by default and viewable by anyone with the link.

  • You can unlist stories from the public feed via your dashboard. Unlisted stories remain accessible by direct URL.
  • Other users may fork (branch) your publicly listed stories to create their own continuations. Forked stories are independent copies.
  • Your public profile — including your display name, handle, and profile picture — is visible alongside your stories.

7. Children's Privacy

Sprinkles is designed for creating children's stories but is not directed at children under 13 as account holders. Users under 13 should use the Service only with parental consent and supervision. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe a child under 13 has provided us with personal information without parental consent, please contact us and we will take steps to remove that information.

8. Your Rights

  • You can view and manage your stories through your dashboard.
  • You can unlist stories to remove them from public browsing.
  • You can request deletion of your account and associated data by contacting us.

9. Data Retention

Your account data is retained as long as your account remains active. Stories and associated images are retained unless you request their deletion. If you delete your account, we will remove your personal information, though previously published stories may remain accessible in anonymized form.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

11. Contact

If you have questions about this Privacy Policy, please contact us at hello@sprinklestory.com.

See also our Terms of Use.