Privacy Policy

Who is responsible for your data

StoryLid is owned and operated by DeepConexión LLC, San Antonio, Texas, USA. DeepConexión LLC is responsible for the personal data described in this policy. Questions: hello@storylid.com.

When someone scans a lid

We record the time, which lid was scanned, an approximate country, region and city derived from the network, the device type (phone, tablet or desktop) and the website that referred the visit, if any. We never store IP addresses, we don't use cookies on the redirect, and we don't build profiles of the people scanning.

Story pages and waves

A Story page is the page a lid owner shows when their code is scanned. It has no third-party trackers and isn't shown in search engines unless the owner allows it. A visitor can send a wave: an anonymous wave carries only the time and the approximate city of the scan. A visitor can choose to add their name, email address, phone number and a short note. We never ask for an address. The page can't read a visitor's contacts; a phone may offer to fill in the fields, and nothing is sent until the visitor taps Send.

Details a visitor shares belong to the lid owner, who alone sees them. We process them on the owner's behalf, keep them for 24 months and then delete them, and we delete them sooner on request: ask the owner, or write to hello@storylid.com. To stop abuse we keep a one-way code derived from the visitor's network and browser, which can't be turned back into an IP address, for rate limits and blocks.

Your account

We store your email, your orders, your designs and uploads, your website address and what we read from it, and your shipping name, address and phone number to design, print and deliver your skins and to support you.

Payments

Payments are handled by our payment provider. We never see or store your full card number.

Who we share with

Only the service providers we need to run StoryLid, each allowed to use the data only for us: our print partner (your artwork and shipping address), our payment provider (Stripe), our hosting and database provider, our email provider, and the AI and image-processing providers that create your designs (your website content and uploaded photos). We may also share data if the law requires it, to protect our rights or users' safety, or as part of a sale of the business. We never sell personal data for money. We do share limited data with Meta to measure and improve our ads, as described under “Ads and measurement” below.

Your choices

You can ask us to export or delete your data at hello@storylid.com. Deleting your account doesn't stop printed QR codes from redirecting unless you ask us to switch them off.

Designs and AI

To create your designs we send your website address, the text and images we read from it, and the photos you upload to AI and image-processing providers. We use them only to make and check your designs, and we don't allow those providers to use them to train their models where we can control this. Photos of people are compared with the generated art only to check the likeness; we don't build face templates or use them to identify anyone.

Emails

We send emails you need: sign-in links, order and shipping updates, renewal reminders and wave notifications. We don't send marketing emails unless you opt in, and every marketing email will have an unsubscribe link.

Cookies and similar technology

We use only what the site needs to work: keeping you signed in, remembering your design in progress and protecting against abuse. On our own marketing and checkout pages we also use Meta's advertising cookies, as described under “Ads and measurement”. Our payment provider sets its own cookies on its checkout page for fraud prevention.

How long we keep data

Account, design and order data: while your account is open, and order and tax records for as long as the law requires (usually 7 years). Waves: 24 months. Scan records: kept as counts for your dashboard; you can ask us to delete a lid's history. Unused designs from visitors without an account: deleted after 12 months.

Security

We use encryption in transit, access controls on every table so each customer sees only their own data, and limited staff access. No system is perfectly secure; if a breach affects your personal data, we will tell you as the law requires.

Children

StoryLid is not for children under 13, and we don't knowingly collect their data. If you believe a child has given us personal data, write to us and we'll delete it.

Your privacy rights

Depending on where you live (for example California, Colorado, Virginia or Texas), you may have the right to know what we hold about you, get a copy, correct it, delete it, and opt out of targeted advertising, including the ad measurement described above (Global Privacy Control is treated as that opt-out). Email hello@storylid.com from your account email; we will reply within 45 days and never treat you differently for asking. You can appeal a decision by replying to our answer. If you use a waves contact as a lid owner, you are responsible for honouring the visitor's requests too.

International visitors

StoryLid is run from the United States and your data is stored and processed in the US and by our providers' servers elsewhere. By using StoryLid from outside the US, you understand your data will be handled there.

Changes to this policy

We will update the date at the top when this policy changes and email account holders about material changes before they take effect.

Contact

DeepConexión LLC, San Antonio, Texas, USA · hello@storylid.com