Privacy Policy of Stringtale

Effective Date: August 26, 2025
Version: 1.0

Article 1: Introduction

1.1 Purpose and Scope:

This Privacy Policy explains how Stringtale collects, uses, and protects your personal data when you access or use our service. It outlines our commitment to data protection and compliance with the General Data Protection Regulation (GDPR).

1.2 Data Protection Commitment:

We are committed to safeguarding your personal data and ensuring transparency in our data processing practices. This policy details the types of data we collect, the purposes for which we collect it, and your rights regarding your data.

1.3 Applicability:

These privacy terms apply to all users of the Stringtale service, including individuals and entities using the service for personal, commercial, or professional purposes. By using Stringtale, you agree to the collection and use of information in accordance with this policy.

1.4 Updates and Changes:

We reserve the right to modify this privacy policy at any time. Any changes will be communicated through the service, and we encourage you to review the policy periodically to stay informed of any updates.

Article 2: Definitions

In this privacy policy, the following terms have the following meanings:

2.1 Service: "Service" refers to Stringtale, the Software-as-a-Service (SaaS) tool provided by Stringtale for managing static text in web projects.

2.2 User: A "User" is any individual or entity that accesses or uses Stringtale, whether for personal, commercial, or professional purposes.

2.3 Account: An "Account" is the personal or organizational account registered by a User to access and use Stringtale.

2.4 Personal Data: "Personal Data" includes all information relating to an identified or identifiable individual, such as name, email address, payment details, and IP address, processed by Stringtale.

2.5 Data Controller: The Data Controller responsible for the processing of Personal Data is De Monsters, based in Amsterdam, the Netherlands.

2.6 Data Processor: "Data Processor" refers to any third party that processes Personal Data on behalf of the Data Controller.

2.7 Processing: "Processing" refers to any operation performed on Personal Data, including collection, storage, use, transfer, and deletion.

2.8 Consent: "Consent" refers to the User's freely given, specific, informed, and unambiguous agreement to the processing of their Personal Data.

2.9 Cookies: "Cookies" are small data files stored on a User's device by the web browser, used to track and enhance User experience.

2.10 Third-Party Services: "Third-Party Services" are external services or tools integrated with Stringtale that are not provided by Stringtale.

2.11 Data Subject: "Data Subject" is the individual whose Personal Data is processed.

Article 3: Data Collection

3.1 Data We Collect:

  • Account Registration Data: Name, email address, and IP address.
  • Payment Information: Billing address and payment method.
  • Contact Information: Name, email address, and any details you provide when contacting us.
  • Usage Data: IP address, browser type, and usage patterns.

3.2 Legal Basis for Data Collection:

  • Contractual Necessity: To provide the service.
  • Consent: For newsletters and marketing.
  • Legitimate Interests: To improve the service and ensure security.

3.3 Data Retention:

We retain personal data only as long as necessary or as required by law. Examples:

  • Account Data: Until account closure.
  • Payment Data: As required by tax law.
  • Usage Data: For service improvement, typically anonymized after a set period.

For details see Article 7 (Data Retention and Deletion).

3.4 How We Collect Data:

  • Direct Interactions: e.g. registration, subscription, contacting us.
  • Automated Technologies: cookies, server logs.

Article 4: Data Use

  • Providing the Service: account, payments, functionality.
  • Customer Support: answering inquiries.
  • Improving the Service: usage analysis.
  • Marketing: newsletters/promotions (with consent).

Legal bases: Contractual Necessity, Consent, Legitimate Interests.

No automated decision-making with legal effect. Profiling only with consent.

Article 5: User Rights

  • Access
  • Rectification
  • Erasure (“Right to be Forgotten”)
  • Restriction
  • Portability
  • Object
  • Withdraw Consent

Requests can be made via contact details in this Privacy Policy. We respond within one month (extendable by two months for complex cases).

Article 6: Data Sharing

  • TransIP: Hosting (EEA only).
  • Cloudflare: Traffic/security (outside EEA possible, SCCs in place).
  • Stripe: Payments (outside EEA possible, SCCs).
  • SendGrid: Transactional emails.
  • Buttondown: Newsletters (opt-in only).
  • Google Analytics: Usage analytics.
  • Hotjar: UX analytics.
  • Bugsnag: Error monitoring.
  • Cookiebot: Cookie consent tool (future use).

No sale of personal data. Disclosure only if legally required.

Article 7: Data Retention and Deletion

  • Account Data: Until closure.
  • Payment Data: Required by tax law.
  • Newsletter Data: Until unsubscribe.
  • Contact Data: Until resolved.

Upon request or closure, data is deleted unless law requires retention. Where immediate deletion is not possible, data is anonymized. Users may always request deletion/anonymization.

Article 8: International Data Transfers

Transfers outside the EEA are safeguarded with EU-approved SCCs or equivalent mechanisms. Where required, additional measures such as encryption or pseudonymization are applied. Users may request details of safeguards.

Article 9: Data Security

Stringtale applies encryption, access controls, audits, and anonymization. Access is restricted to authorized staff. Breach notifications will be made without undue delay. Third-party providers must meet our standards. Users must protect their credentials.

Article 10: Cookies and Tracking

Types: Essential, Analytical, Functional, Marketing. Non-essential cookies are disabled by default. Preferences can be managed via browser. A consent tool may be added later. Third-party cookies (Google Analytics, Hotjar) may apply. Consent can be withdrawn anytime.

Article 11: Complaints and Dispute Resolution

Users can complain directly to Stringtale or to a data protection authority (NL: Autoriteit Persoonsgegevens). We commit to resolving issues promptly.

Article 12: Updates to this Privacy Policy

We may update this policy at any time. Significant changes will be notified via service or email. Historical versions are archived. Changes are effective upon posting unless otherwise specified.

Article 13: Miscellaneous

Governed by Dutch law. Disputes in Amsterdam courts. If any clause is invalid, the rest remains effective. This Privacy Policy is the full agreement on data processing between you and Stringtale.