Privacy
Effective from 22 October 2026
What we collect when you make a book with minibooks, why, who we share it with, how long we keep it and how to delete it. We kept it plain.
Who looks after your data
The controller of your data is Marek Wituszyński, Tąpadła 50, 58-111 Tąpadła, Poland, tax id (NIP) 8942767220, REGON 381219039. Write to orders@minibooks.ai about anything on this page.
The short version
- A photo of your child is optional. It is used only to draw the portrait. We delete it when you approve the portrait, or within about a day if you don’t.
- We don’t sell your data.
- There is no password. You sign in with a link sent to your email.
- You can delete a book, or all your data, on your shelf at any time.
- We measure ads with Meta: its pixel runs on our pages whose address doesn’t open a book, and our server tells Meta about a few steps (see below).
What we collect and why
- Email: to send the free Preview (with the heroes, if you didn’t see them on the site), the finished book and audiobook, sign-in links and payment emails. You give it right after describing the story, and we keep it with the book’s draft. Basis: our contract with you.
- The heroes you describe, often your child (name, age, looks, optionally a photo), the story idea, the reader’s age and an optional dedication: to write and illustrate the book. Basis: our contract with you, and our legitimate interest in making the book you ordered.
- The book itself (story, portraits, pictures, PDF, and a share link if you turn one on): so you can read, download and share it. Basis: our contract with you.
- Payment details: amount, currency, time, status, where the visit that led to it came from, and your email. Card and bank details go straight to Stripe; we never see them. Basis: our legal duty to keep accounting and tax records, and our legitimate interest in handling claims.
- Reminders about an unpaid Preview. Basis: our legitimate interest; you can object with the stop link in the reminder.
- News and offers by email. Basis: your consent, which you can withdraw at any time.
- Feedback: your reaction to the portrait email, your rating of the book and page reports in the reader, stored with the book and your email, so we can improve books and answer your report. Basis: our legitimate interest.
- Emails you send us, including complaints. Basis: our contract with you, and our legitimate interest in answering and keeping a record.
- Technical data: your IP address (stored only as a salted hash) and a random id in a cookie, to keep free Previews fair and stop abuse. Basis: our legitimate interest.
- Where you came from and how far you got: source and campaign tags, the referring site, Facebook’s click id and the steps you reach (hero, portrait, Preview, payment), with your email once you give it, the cookie id and the hashed IP. Basis: our legitimate interest in knowing which ads and posts work.
Your child’s photo
- It is optional; a short description always works. Your browser shrinks it before upload.
- On its way it passes through our hosting servers in the USA. We keep it in private storage in the EU, never public. Nobody can open it from the internet.
- To draw the portrait we give it to an AI image service through a private link that works for 10 minutes. It never goes to our backup image service.
- We delete it when you approve the portrait, or within about a day if you don’t. We keep the portrait, not the photo.
- We don’t use photos to train any model. What the image service does with images on its side is governed by its own terms, which is one more reason the photo is optional.
Who we share data with
We use providers that process data on our behalf. Each gets only what its job needs:
- hosting and servers (servers in the USA; they log requests, including your IP address);
- database and file storage (in the EU);
- AI services that write the story (hero descriptions, story idea, dedication, never the photo), draw the portraits and pictures (drawing instructions, approved portraits, and the photo for the portrait only) and record the narration (the book’s text);
- email delivery and our inbox;
- payments: Stripe, which gets your email and keeps its own payment records;
- ad measurement: Meta, described below;
- site analytics: PostHog, described below.
Pictures and PDFs sit at long random addresses nobody can guess, but anyone who has such an address can open it.
Ad measurement with Meta
We advertise on Facebook and Instagram. To know whether those ads work, two things tell Meta Platforms Ireland Ltd. what happened. Meta’s pixel reports that you viewed a page: home, gift and legal pages, the start of making a book and your shelf. Our server (through Meta’s Conversions API) reports when someone gets a Preview, opens the payment page or buys a book. The pixel never runs on a page whose address opens a book, a shared book or a sign-in (those addresses are keys), and those pages don’t pass their address on to the next page.
The pixel sends from your browser: the page address and the address you came from, your IP address, browser type and Meta’s own cookies (below), and a hashed cookie id (the same one our server sends). Our server sends: your hashed email and hashed cookie id, Meta’s own cookie ids (_fbp, _fbc), your IP address, browser type (user agent), Facebook’s click id, and for a payment its amount and currency. We never send your child’s details, the story or the photo.
Basis: our legitimate interest in measuring our ads. Meta handles this data under its own privacy policy. You can object by writing to orders@minibooks.ai, and we stop sending your events from our server; to stop the pixel, block trackers in your browser. To keep your objection even after you delete your data, we keep only a hashed copy of your email.
Site analytics with PostHog
To see where the site is slow or confusing, we use PostHog (PostHog Inc., data stored in the EU). It records page views, clicks, page load times and the steps you reach, and may record a replay of a visit (what you see on the screen). We record replays on our public pages (home, gift pages, legal pages) and on the page where you make a book, with every field you type into hidden; on the page where you make a book all text, pictures and names are hidden too. We never record the pages where you read or share a book.
PostHog gets: a cookie id (a hashed copy of mb_browser), your IP address, browser and device type, the address you came from and its campaign tags, and your email once you give it. Never your child’s photo, name, the story or your feedback comments.
The secret part of links that open a book or sign you in is removed before anything reaches PostHog. Deleting all your data on your shelf also deletes your PostHog profile with its events and replays.
Basis: our legitimate interest in improving the site. You can object by writing to orders@minibooks.ai.
Emails we send
Always: the Preview or a note that it couldn’t be finished, a payment confirmation with these terms attached, the finished book, the finished audiobook, sign-in links, refunds.
If you leave before seeing the portraits: after 10 minutes we approve them for you and send one email with the heroes and the Preview.
The buttons in the book-ready and audiobook-ready emails sign you in without a password. Each works for 72 hours.
After an unpaid Preview, at most two reminders, each with a link to stop them. If you agreed to news and offers, the second may include a discount.
News and offers only if you tick the box on your shelf. Untick it there, or use the link in any such email.
How long we keep things
- Your child’s photo: until you approve the portrait, at most about a day.
- Paid books, their heroes, feedback and your email: until you delete them on your shelf or ask us to.
- Unpaid Previews and drafts: about 6 months after they were last created, generated or taken to checkout.
- Free-Preview limit records (email, cookie id, hashed IP): 48 hours.
- Sign-in links: 30 minutes (72 hours in the book-ready and audiobook-ready emails). Shelf sessions: 30 days.
- Where you came from and how far you got: 13 months.
- Server logs (including IP addresses): as long as the hosting provider’s terms set.
- IP address and browser type for Meta: until the event is sent, at most about two days.
- Site analytics in PostHog: events up to 1 year, visit replays 30 days.
- Your objection to ad measurement: a hashed copy of your email, until you ask us to withdraw it.
- Payment records: as long as accounting and tax law requires, and as long as a claim is possible. If you delete everything, we remove your email from them and keep the amount, date, status and source. Stripe keeps its own records under its own terms.
Data outside the European Economic Area
Some providers are based or have servers outside the EEA, mostly in the USA. This includes some that keep our data in the EU: their staff may reach it from another country.
The safeguard is the EU Standard Contractual Clauses or the EU-US Data Privacy Framework, where the provider offers them. For some providers no safeguard is named, including the service that draws the portrait from the photo. The photo goes there only if you add one.
A copy of the safeguards is available on request at orders@minibooks.ai.
Your rights
You have the right to access, correct and delete your data, to restrict how we use it and to get it in a portable file. You can object to uses based on our legitimate interest, such as ad measurement, and withdraw any consent at any time.
The quickest way to delete is on your shelf. For anything else, write to us; we answer within a month.
We make no decisions about you by automated means that have legal or similarly significant effects.
You can complain to a data protection authority. In Poland that is the President of the Personal Data Protection Office (UODO, uodo.gov.pl).
Children
minibooks is for adults. A parent or another adult makes the book. Add a child’s photo or details only if you are their parent or guardian or have their permission.
Changes
If we change how we handle data, we update this page and the date at the top. For bigger changes we also tell you by email.