Privacy Policy and your photos

Starlit Kid is used by parents and other adults making a book for a child. Children do not use the site, and we don’t ask children for any information. Starlit Kid is run by an independent developer; contact hello@starlitkid.com for anything about your data.

• For the book: the child’s first name, an optional age and dedication, the photos you upload, and the same for up to two extra characters (sibling, friend, grown-up or pet).
• To reach you: your email address, for your preview link, order confirmation and download link.
• Permission record: when you confirm you may share the photos, we store the time and your IP address as proof of that consent.
• Payment: handled entirely by Paddle. We never see or store your card details; we receive only the confirmation that the book is paid.
• Technical: your IP address is used briefly to limit how many previews one connection can start (anti-abuse), and our host keeps standard server logs.

Only to draw your child into your book’s illustrations. When you upload a photo we remove its location and camera data. The photo is then sent to our illustration provider (OpenAI) to draw the pages. Your photos are never used to train AI models, never sold, and never used for anything else.

• Photos: deleted automatically, with the drawing of your child we made from them, as soon as your book is checked and released to you.
• Previews you don’t buy: the preview, photos and email are deleted 30 days after your last visit.
• Orders that can’t be finished: photos are deleted within 30 days.
• Your finished book (the illustrated pages and PDFs) and your email are kept so you can download it again, until you ask us to delete them.
• At our illustration provider: OpenAI may keep data sent through its API for up to 30 days to detect abuse, then deletes it. It does not use API data to train its models.

• OpenAI: drawing the illustrations (your photos and a description of each scene).
• Railway: hosting the site, database and file storage (United States).
• Resend: sending our emails (your email address).
• Paddle: payment, tax and receipts, as merchant of record (your payment details).
• Cloudflare Turnstile: checking that a visitor starting a preview isn’t a bot.
• Google Analytics: visit statistics, only if you accept (see below).

These services are based in or process data in the United States. Each acts on our instructions and under its own data-protection terms.

The site works without any tracking. If you click “Accept” on the cookie banner, we count visits with Google Analytics: which pages are viewed, where visitors come from, and when a preview or order is started. It never receives your child’s name, photos or your email, and we don’t use it for ads. If you say no, nothing is sent. Change your choice

We also keep your cookie choice in your browser, and Paddle and Cloudflare may set the cookies they need to process payment and bot checks.

To make and deliver the book you asked for (performing our contract with you), with your consent for the photos you upload and for analytics, and to prevent abuse and keep records we’re required to keep (legitimate interests and legal obligations).

You can ask to see, correct, download or delete your data, or withdraw consent, at any time by writing to hello@starlitkid.com. We answer within 30 days, and deleting your book removes everything connected to it. If you live in the EU or UK you can also complain to your data-protection authority; California residents have the right to know, delete and correct personal information, and we do not sell or share it for advertising.

If we change how we handle data, we’ll update this page and its date below. See also our terms and refund policy.