Privacy Policy

Version 2026-10-09

This policy explains what personal data Story Refill processes, why, and what rights you have. We built the service to keep as little data as possible and to encrypt what we keep.

1. Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 (LOPDGDD) is Tent Softlab SL, Carrer de Marià Cuber, 17, 46011 València, Spain, CIF B75590059. Contact for all privacy matters: hello@tentsoftlab.com.

2. What we process and why

Data	Purpose	Legal basis	Kept for
Your email address	Sending sign-in codes, running your account, and service messages about refills	Contract (Art. 6(1)(b) GDPR)	Until you delete your account
One-time sign-in codes and links	Signing you in without a password	Contract (Art. 6(1)(b))	15 minutes of validity; spent codes are kept only as irreversible hashes
Session cookie	Keeping you signed in	Contract (Art. 6(1)(b)); strictly necessary cookie	Up to 30 days, or until you sign out
Your Tonies email and password (see section 3)	Reading your Creative Tonies and putting episodes on them	Contract (Art. 6(1)(b)); for storage on our servers, your consent (Art. 6(1)(a))	Until you delete it, switch mode, or delete your account
Your Creative Tonies and podcast choices	Providing the refill service	Contract (Art. 6(1)(b))	Until you delete your account
A keyed hash of your IP address	Rate limits that protect you and others from abuse and password guessing	Legitimate interest in security (Art. 6(1)(f))	24 hours
Technical request logs at our host	Operating and securing the service	Legitimate interest (Art. 6(1)(f))	Short periods set by our host, typically days
Cookieless visitor statistics (section 5)	Understanding how many people use which pages	Legitimate interest (Art. 6(1)(f))	Aggregated; no individual profile

We do not sell your data, use it for advertising, or build profiles. We make no automated decisions about you.

To reach your Creative Tonies we need your Tonies email and password. You choose where they are kept:

Only this browser. The login is encrypted with AES-256-GCM and stored in a secure, HttpOnly cookie on your device. We do not keep it on our servers. It is decrypted on our server only for the moment it is needed to talk to Tonies, while you use the site.
On Story Refill, for automatic refills. Only if you tick the separate consent box: “I want Story Refill to store my Tonies email and password, encrypted, on its servers so it can refill my Creative Tonies automatically while I'm away. I can delete them at any time, which ends automatic refills.” The login is then encrypted with AES-256-GCM and stored in our database. The key is held separately from the database, in our hosting provider’s secret store. We record when you gave consent.

You can withdraw consent at any time with Delete stored login in the app. This deletes the stored login immediately and does not affect anything done before. We use your Tonies login only to read your Creative Tonies and manage the episodes on them, never for anything else.

4. How we store your email address

We look up your account by a keyed hash of your address. The address itself is stored only in encrypted form, so that we can email you about your refills.

5. Statistics without cookies

We use Vercel Web Analytics to count page views. It sets no cookies and stores nothing on your device. It does not track you across websites. Visitors are told apart for at most one day by a short-lived hash of the request. Before anything is sent we strip query strings, and we replace sign-in links with a generic route name.

6. Cookies

We use only cookies that are strictly necessary for the service, so no consent banner is needed:

__Host-sr_session: keeps you signed in (up to 30 days).
__Host-sr_tonies: your encrypted Tonies login, only if you chose “Only this browser” (up to 180 days).

7. Service providers

We use these providers, each bound by a data processing agreement under Art. 28 GDPR:

Vercel Inc. (USA): hosting, request handling and cookieless statistics. Our servers run in the EU (Dublin, Ireland).
Turso / ChiselStrike Inc. (USA): database, hosted in the EU (Dublin, Ireland).
Resend Inc. (USA): sending sign-in and service emails.

Where data may reach the USA, transfers rely on the EU–U.S. Data Privacy Framework where the provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses (Art. 46 GDPR).

When you use the service, we pass your Tonies login and the selected episodes to tonies, the operator of the Tonies cloud, on your instruction. tonies processes that data as its own controller under its own privacy policy.

Podcast searches are sent from our server to Apple’s public podcast directory. Apple receives only the search words, nothing that identifies you. We fetch podcast feeds and audio from their publishers from our server, so publishers do not learn who you are. Feeds are cached and shared between all users.

8. Security

Data in transit is protected with TLS. Secrets are encrypted at rest with AES-256-GCM, and the keys are kept apart from the data. Sign-in codes and sessions are stored only as hashes. Requests are rate-limited, and access to production systems is restricted. If a breach puts your rights at risk, we will notify the supervisory authority and, where required, you.

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time (Art. 15–21 GDPR). You can delete your account yourself in the app. For anything else, write to hello@tentsoftlab.com.

You can also complain to a supervisory authority: in Spain the Agencia Española de Protección de Datos (aepd.es), or the authority where you live.

10. Children

Story Refill is for parents and guardians aged 18 or over. We do not knowingly process children’s personal data. The service only handles audio that adults choose for their household.

11. Changes

If we change this policy materially, we will update the version above and ask for your agreement the next time you sign in. See also our Terms.