Privacy Policy

Last updated: July 15, 2026

The short version Your .story course files are processed entirely inside your own browser. StoryAudit's servers never receive, see, or store the contents of any file you compare or audit.

1. What we don't collect

StoryAudit's core functionality — comparing, health-checking, and batch-auditing .story files — runs 100% client-side using your browser's built-in capabilities. Your course files, and anything extracted from them (slide text, media, variables, quiz content, etc.), are never transmitted to, or stored on, any server we operate.

2. What we do collect

To provide account access and billing, we use third-party services that collect limited personal information on our behalf:

Account/authentication data (via Clerk): your email address, sign-in method, and basic session information, used to identify you and control access to the Service.
Billing/subscription data (via Clerk's billing integration, backed by Stripe): payment method details are handled directly by Stripe and are not stored on our own servers; we retain a record of your subscription status.
Basic hosting/traffic logs (via our hosting provider): standard web server logs (IP address, browser type, timestamps) generated automatically by hosting infrastructure, used only for security and reliability, not for tracking or profiling.

3. Cookies and local storage

The sign-in and subscription gate uses cookies and browser session storage (via Clerk) to keep you signed in and to prevent redundant page reloads. We do not use advertising or cross-site tracking cookies.

4. Third-party services

StoryAudit is built on top of the following third-party services, each with its own privacy policy governing the data described above:

Clerk (authentication and subscription management)
Stripe (payment processing, via Clerk's billing integration)
Vercel (application hosting)

5. Data retention and deletion

Account and billing data is retained for as long as your account is active, and as needed to comply with legal/tax obligations after cancellation. You can request deletion of your account data by contacting us below.

6. Children's privacy

The Service is not directed to, and is not intended for use by, children under 13 (or the relevant minimum age in your jurisdiction). We do not knowingly collect personal information from children.

7. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

8. Contact

Questions about this Privacy Policy, or requests to access or delete your data, can be sent to safetyeea@gmail.com.