Privacy in this preview

Information we keep

The features you use create account and sign-in records, contact details, saved stories and revisions, group and test-learner records, invitations and suggestions, plan information, and privacy-request records. These support sign-in, saving, permitted access, account management and troubleshooting.

AWS hosts the application, stores its records, handles adult sign-in and delivers verification and invitation emails. Stripe handles sandbox checkout. Use test payment details only. Hosting and payment services receive connection information when you use them.

Support emails and private-request notifications are retained in private AWS storage and delivered to the operator’s email inbox for review. Request text is separate from the technical diagnostic timeline. These copies are part of request and retention handling; a delivered notification is not an erasure receipt.

Sign-in cookies keep your browser signed in. Unsaved story text stays in the open editor until you save or leave; it is not a reliable backup. Text and account downloads create files on your device that FableFlight cannot remove for you. Under-13 learner downloads require parent approval. Download requests retain the request type, a file fingerprint, timing and the parent’s decision; they do not send an unsaved draft’s text to the parent. Expiry stops use of an approval, but does not promise immediate deletion of its record.

Who can see it

Your stories are not published on a public story directory. An accepted invitation gives its recipient access to the permitted saved story and future saved versions until access ends. Suggestion permission lets them propose changes; you decide whether to accept a proposal.

You enter an exact email address when inviting someone. There is no searchable user directory, and sending does not disclose whether that email already has an account. The recipient must use the account whose verified contact email received the invitation.

Withdraw each invitation to end the access it grants. This prevents further access through that invitation but cannot recall words already copied by a reader. How to invite, review and withdraw.

A group’s sign-in page and uploaded background image are public. Its stories are not made public by that page. Authorized supervisors can access ordinary group stories according to their permitted role; paying for a plan or owning a page does not by itself establish supervision authority. Use fictional information and images for this preview.

The project owner can use authorized administration tools to operate the preview and investigate problems. Story access is controlled by the application; it is not end-to-end encryption that excludes the operator.

Troubleshooting information

The app sends a limited technical timeline: screens and known controls used, request outcomes and timings, error categories, coarse browser/device information and layout measurements. These records help investigate problems such as a failed sign-in or an unconfirmed save.

This application diagnostic timeline does not record story text, titles, typed values, email addresses, passwords, codes, screenshots or screen recordings. Delivery is best-effort and can be blocked or dropped. Hosting and security records are separate from this timeline.

The app’s Troubleshooting & privacy section shows a diagnostic ID and a Send recent diagnostics control. Reloading starts a new ID. When reporting a problem, include the ID and approximate time—not your private writing or credentials.

How long it stays

Application diagnostic logs use a seven-day retention setting. The database currently has seven days of automated backups. Those settings do not mean that all account records or uploaded images are automatically deleted after seven days.

Development access is authorized until October 30, 2026 at 04:49 UTC. Data preservation is authorized through November 2, 2026 at 04:49 UTC. These are operating limits, not a promise that every copy will be erased on that date. Further retention or deletion requires an owner decision.

Trash preserves a story and its saved versions. Deactivation prevents ordinary account use but is not deletion. This preview is not a production backup service; keep copies of writing you want to retain.

Your account controls

After signing in, open Account security to manage your contact email, password, sessions, two-step verification, recovery and deactivation. Open Privacy requests to request access, correction or deletion and check the request’s state.

Available downloads cover their named contents. They are not a claim that every operational record has been included or that your entire request is complete. Learner records need separate review. A submitted deletion request does not itself erase data.

If you cannot sign in or need help with a request, use the contact below. Help with account and privacy requests.

Questions and contact

Automatic support-email forwarding and private request forms stop at the development deadline. After that time, email delivery to the operator is not confirmed. Data preservation does not keep these services open. Operator contact details include a postal address and telephone number. Check the preview operating window.

FableFlight, operated by Eldou Group LLC.

Email this address for support, privacy questions or help when you cannot sign in. Include only what is needed to explain your request; never send passwords or authentication codes. Do not put sensitive requests in public reports or development tasks.

Requests receive private human review. Sending a request or receiving a notification does not mean the request has been fulfilled. We do not promise a fixed response time; applicable legal deadlines still apply.