Introduction
We, Little Stories (operated by T-Rex & Tiara Holdings LLC), 30 N Gould St Ste N, Sheridan, WY 82801, United States – EIN: 42-1851459, (hereinafter 'we', 'us' or 'our'), highly value your privacy and handle your personal data with care. This privacy policy is intended to inform you about what data we collect when you use our website https://littlestories.online (hereinafter: 'the Website'), place an order, or otherwise contact us. We explain how we use this data, how it is stored, with whom it may be shared, and what rights you have regarding your data. By using our Website, you agree to the terms of this privacy policy.
1. Collected Personal Data
We collect various types of personal data to provide and improve our services:
1.1 Data you provide directly to us
- Contact and Account Details: Your name, email address, password (encrypted) when you create an account.
- Order Details: Address details (billing and shipping address) for the shipment of physical books.
- Personalization Data for the book: The name(s) for the book, chosen story steps, and any other textual input you provide for personalizing the product.
- Uploaded images: Photos you upload to personalize the illustrations in the children's books. These are used by our AI systems to generate the characters.
- Communication Data: Data you provide when you contact us via email or other communication channels.
- Payment Details: These are not stored directly by us but processed by our external payment provider. We only receive a confirmation of the payment.
1.2 Data collected automatically
When you visit our Website, we may automatically collect certain data via cookies and similar tracking technologies:
- Technical data: IP address, browser type and operating system, device data.
- Usage data: Pages visited, click behavior, the duration of your visit, and interactions on the Website.
2. Purposes of Data Processing
We process your personal data exclusively for the following purposes:
- Creating and managing your account.
- Processing, producing, and handling your orders.
- Generating personalized children's books (both eBooks and physical books) using AI technology, based on the personalization data and uploaded images you provide.
- Shipping your ordered products (physical books) and making digital e-books available for download.
- Communicating with you about your order, answering your questions, or providing customer service.
- Sending service-oriented emails (e.g., order confirmations, shipping notifications).
- Improving our products, services, and the functionality of our Website.
- Analyzing website usage to optimize usability (anonymized where possible).
- Complying with legal obligations, such as fiscal retention duties.
- Preventing fraud and misuse of our services.
3. Legal Bases for Processing
We process your personal data based on the following legal grounds (GDPR):
- Performance of the contract (Art. 6(1)(b) GDPR): For processing your order, delivering the products, and managing your account.
- Consent (Art. 6(1)(a) GDPR): For the use of the photos you upload and specific personalization data for creating the children's books. You give this consent when uploading and confirming your choices. You have the right to withdraw this consent at any time.
- Legal obligation (Art. 6(1)(c) GDPR): For complying with our administrative and fiscal obligations.
- Legitimate interest (Art. 6(1)(f) GDPR): For improving our services, website analysis (analytics), direct marketing (if permitted and with opt-out possibility), and fraud prevention.
4. Sharing Personal Data with Third Parties
We do not sell your personal data to third parties. We only share your data with third parties if this is necessary for the execution of our services, to comply with a legal obligation, or based on your consent. This concerns the following categories:
- Payment providers: For the secure processing of your payments.
- Shipping partners: For the delivery of physical products.
- Printers: For the production of the physical books.
- Hosting and IT service providers: For hosting the Website, data storage, and maintenance of our IT systems.
- AI technology suppliers: For generating the texts and illustrations for the personalized children's books.
- Analysis services (e.g., Google Analytics): For analyzing website visits and usage, as much as possible on an anonymized basis.
- Authorities: If we are legally obliged to do so.
5. Retention Periods
We do not store your personal data longer than is strictly necessary:
- Account Data: As long as your account is active, or until you request deletion.
- Order and Invoice Data: Minimum 7 years, in accordance with statutory retention obligations.
- Data for Personalization (Photos and eBooks): The photos you have uploaded and the digital eBooks generated from them are stored for a maximum of 3 months. After this period:
- Ordering a Physical Book: After this period, it is no longer possible to order a Physical Book, as the necessary files no longer exist.
- Downloading eBook: The digital eBook is no longer available for download after 3 months.
We strongly advise you to download your digital eBook immediately after purchase and to make your own backup.
- Communication Data: Up to 2 years after handling, unless a longer retention period is necessary.
6. Cookies and Tracking Technologies
We use cookies and similar technologies to analyze the use of our Website, improve functionality, and, with your consent, for marketing purposes. We use the following types:
- Functional (necessary) cookies: Essential for the proper functioning of the Website.
- Analytical cookies: Help us understand how visitors use the Website. Data is anonymized as much as possible.
- Marketing cookies (if applicable): Only placed after your explicit consent.
You can change your cookie settings at any time via your browser settings. Disabling cookies may affect the functionality of the Website.
7. Security of Personal Data
We take the protection of your personal data seriously and take appropriate technical and organizational measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unauthorized modification. This includes encryption (SSL/TLS), secure servers, access control, and regular security updates.
8. Your Rights (Rights of Data Subjects)
Under the GDPR, you have the following rights:
- Right of access (Art. 15): Request an overview of your personal data.
- Right to rectification (Art. 16): Have incorrect data corrected.
- Right to erasure (Art. 17): Have your data deleted.
- Right to restriction (Art. 18): Restrict the processing of your data.
- Right to data portability (Art. 20): Receive your data in a machine-readable format.
- Right to object (Art. 21): Object to processing based on legitimate interest.
To exercise any of these rights, contact us via the details below. We will respond within one month.
9. Consent for Processing and Use of Images
By placing an order and uploading images, you give us explicit consent to use these images for creating the ordered product using our AI systems. If you upload photos of third parties, you guarantee that you are entitled to do so.
10. Children's Data
Our products are aimed at children but are ordered by adults. We do not knowingly collect personal data directly from children without the consent of a parent or legal guardian. Children's personal data are only processed for the purpose of personalizing the product, based on the input and consent of the adult Buyer.
11. Changes to the Privacy Policy
We reserve the right to change this privacy policy. Changes will be published on our Website. In the event of significant changes, we will actively inform you.
12. Contact Details
If you have questions about this privacy policy or wish to exercise your rights, contact us via email: info@littlestories.online.
Company details:
T-Rex & Tiara Holdings LLC
30 N Gould St Ste N
Sheridan, WY 82801
United States
EIN: 42-1851459
This privacy policy was last updated on April 11, 2026.