Privacy Policy
Last Updated: December 1, 2025
Year of Stories (“we,” “us,” or “our”) publishes a monthly online journal of children’s stories at yearofstories.ca. We are committed to protecting the privacy of all visitors, with particular care for the children and families who read our stories.
This Privacy Policy explains what information we collect, how we use it, and the choices you have. We have designed our site to collect as little personal information as possible while still providing a calm, welcoming reading experience.
1. Our Approach to Privacy
Year of Stories is built on principles of restraint and trust. We do not:
- Require user accounts or registration
- Collect personal information from children
- Use social features, comments, or community forums
- Employ gamification, rewards systems, or engagement tactics
- Sell, rent, or trade any visitor information
- Use targeted advertising or behavioral tracking
We believe a children’s story site should be a quiet, safe space—not a platform designed to capture attention or extract data.
2. Information We Collect
2.1 Information Collected Automatically
When you visit our site, certain technical information is collected automatically by our hosting infrastructure and may include:
- Device and browser information: Browser type and version, operating system, device type (desktop, tablet, mobile)
- Connection information: IP address, internet service provider, approximate geographic region (country/city level)
- Usage information: Pages visited, time and date of visit, time spent on pages, referring website (if applicable)
This information is collected through server logs and, if enabled, privacy-respecting analytics tools. It is used in aggregate form to understand how our site is used and to maintain its performance and security.
2.2 Cookies and Similar Technologies
We use a minimal number of cookies necessary for the site to function:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential cookies | Remember language preference, maintain session state | Session or up to 1 year |
| Preference cookies | Store character selection (boy/girl perspective) | Up to 1 year |
We do not use:
- Advertising or marketing cookies
- Third-party tracking cookies
- Cross-site tracking technologies
If we use analytics, we choose privacy-respecting services that do not track individuals across sites or create personal profiles.
2.3 Information You Provide Voluntarily
If you contact us directly (for example, by email), we collect:
- Your email address
- Your name (if provided)
- The content of your message
This information is used solely to respond to your inquiry and is not added to any marketing lists.
2.4 Newsletter or Updates (If Applicable)
If we offer an optional email newsletter in the future, subscription will be:
- Entirely voluntary and clearly separate from site access
- Available only to adults (parents/guardians)
- Managed through a reputable email service provider
- Easy to unsubscribe from at any time
We will never subscribe anyone to communications without explicit consent.
3. How We Use Information
We use collected information only for the following purposes:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide and maintain the website | Legitimate interest |
| Remember your language and character preferences | Legitimate interest / Consent |
| Understand aggregate site usage patterns | Legitimate interest |
| Improve site performance and fix technical issues | Legitimate interest |
| Respond to inquiries you send us | Legitimate interest / Contract |
| Comply with legal obligations | Legal obligation |
We do not use personal information to build profiles, target content, make automated decisions, or for any purpose not described in this policy.
4. Children’s Privacy
Year of Stories is designed for children aged 6–12, with parents and guardians as the primary decision-makers. We take our responsibility to young readers seriously.
4.1 We Do Not Collect Personal Information from Children
Our site does not:
- Require or allow children to create accounts
- Ask children to provide names, email addresses, or any personal details
- Enable children to post content, comments, or messages
- Use interactive features that collect personal information
The site is designed for reading and listening only.
4.2 Compliance with Children’s Privacy Laws
We design our practices to comply with applicable children’s privacy laws, including:
- COPPA (Children’s Online Privacy Protection Act, United States)
- GDPR provisions regarding children (European Union)
- PIPEDA (Personal Information Protection and Electronic Documents Act, Canada)
Because we do not knowingly collect personal information from children, parental consent mechanisms are not required. If we ever become aware that we have inadvertently collected personal information from a child, we will delete it promptly.
4.3 Guidance for Parents and Guardians
We encourage parents and guardians to:
- Read stories together with younger children
- Discuss any questions children have about privacy online
- Contact us with any concerns about our practices
5. Information Sharing and Disclosure
We do not sell, rent, or trade personal information under any circumstances.
We may share information only in the following limited situations:
5.1 Service Providers
We work with trusted service providers who help us operate the site:
| Service Type | Purpose | Data Shared |
|---|---|---|
| Web hosting | Store and serve website content | Server logs, IP addresses |
| Content delivery (CDN) | Deliver content quickly worldwide | IP addresses, request data |
| Analytics (if used) | Understand aggregate usage | Anonymized/aggregated data |
| Email service (if newsletter offered) | Send communications to subscribers | Subscriber email addresses |
All service providers are contractually required to protect information and use it only for the services they provide to us.
5.2 Legal Requirements
We may disclose information if required by law, legal process, or government request, or if we believe in good faith that disclosure is necessary to:
- Comply with applicable law or legal process
- Protect the rights, property, or safety of Year of Stories, our visitors, or others
- Detect, prevent, or address fraud or security issues
5.3 Business Transfers
If Year of Stories is involved in a merger, acquisition, or sale of assets, visitor information may be transferred as part of that transaction. We will notify visitors of any such change through a notice on our website.
6. Data Retention
We retain information only as long as necessary for the purposes described in this policy:
| Data Type | Retention Period |
|---|---|
| Server logs | Up to 90 days |
| Analytics data (aggregated) | Up to 26 months |
| Contact inquiries | Until resolved, then up to 2 years |
| Newsletter subscriptions | Until unsubscribed, then deleted promptly |
| Preference cookies | Up to 1 year (refreshed on return visits) |
We regularly review stored data and delete information that is no longer needed.
7. Data Security
We implement appropriate technical and organizational measures to protect information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Secure HTTPS encryption for all site connections
- Regular security updates to our website platform
- Access controls limiting who can access server infrastructure
- Careful selection of reputable service providers
No method of transmission or storage is completely secure. While we strive to protect information, we cannot guarantee absolute security.
8. International Data Transfers
Year of Stories is based in Canada. If you access our site from outside Canada, your information may be transferred to and processed in Canada or other countries where our service providers operate.
For visitors from the European Economic Area (EEA), United Kingdom, or Switzerland: We ensure that any international transfers of personal data comply with applicable data protection laws, including through the use of Standard Contractual Clauses or other approved mechanisms where required.
9. Your Rights and Choices
9.1 Cookie Preferences
Most web browsers allow you to control cookies through settings. You can:
- Block all cookies (note: this may affect language/character preferences)
- Delete cookies after each visit
- Set preferences for specific types of cookies
Because we use only essential and preference cookies, blocking them will not significantly affect your access to stories but may require you to re-select your language or character each visit.
9.2 Analytics Opt-Out
If we use analytics, we will provide a simple way to opt out on our site, or you may use browser extensions that block analytics scripts.
9.3 Rights Under GDPR (EEA Visitors)
If you are located in the European Economic Area, you have the right to:
- Access: Request a copy of personal data we hold about you
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data (“right to be forgotten”)
- Restriction: Request we limit how we use your data
- Portability: Receive your data in a portable format
- Objection: Object to processing based on legitimate interests
- Withdraw consent: Where processing is based on consent
To exercise these rights, please contact us using the information below. We will respond within one month.
You also have the right to lodge a complaint with your local data protection supervisory authority.
9.4 Rights Under Canadian Law (PIPEDA)
Canadian visitors have the right to:
- Access personal information we hold about you
- Request correction of inaccurate information
- Withdraw consent for collection, use, or disclosure
To exercise these rights, please contact our Privacy Officer using the information below.
9.5 Rights Under US State Laws
Depending on your state of residence, you may have additional rights regarding your personal information. California residents may have rights under the CCPA/CPRA. Because we do not sell personal information, do not share it for targeted advertising, and collect minimal data, most provisions do not apply to our practices. However, you may still contact us with questions or requests.
10. Third-Party Links
Our site may occasionally include links to external resources (such as libraries, publishers, or educational materials). These links are provided for convenience and do not imply endorsement.
We are not responsible for the privacy practices of external sites. We encourage you to review the privacy policies of any site you visit.
11. Future iOS Application
We are developing an iOS application that will allow families to read and listen to stories on Apple devices. When the app is released:
- This Privacy Policy will be updated to address app-specific data practices
- The app will follow the same privacy principles as our website
- We will comply with Apple’s App Store guidelines and App Tracking Transparency requirements
- The app will not collect additional personal information beyond what is described here
- Audio narration features will not require personal data collection
We will notify users of significant changes to our privacy practices.
12. Audio Narration
Our stories include or will include professional audio narration. The audio features:
- Do not collect personal information
- Do not use voice recognition or any listening capabilities
- Are one-directional (playback only)
- Do not require account creation or login
Audio playback preferences (such as last position) may be stored locally on your device or through preference cookies and are not transmitted to us in identifiable form.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make changes:
- We will update the “Last Updated” date at the top of this policy
- For significant changes, we will provide prominent notice on our website
- We will not reduce protections for previously collected information without consent
We encourage you to review this policy periodically.
14. Contact Us
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about our practices, please contact us.
We aim to respond to all inquiries within 30 days.
For complaints regarding our handling of your personal information, you may also contact:
Office of the Privacy Commissioner of Canada 30 Victoria Street Gatineau, Quebec K1A 1H3 Toll-free: 1-800-282-1376 Website: www.priv.gc.ca
15. Language
This Privacy Policy is provided in English and may be translated into other languages. In the event of any conflict between the English version and a translated version, the English version shall govern.
Year of Stories is a project dedicated to bringing one quiet, beautiful story to families each month. Our privacy practices reflect our belief that the best children’s content respects both young readers and their families – online and off.