Privacy Policy

StoneStories (“we”, “us”) operates stonestories.app, a platform for registering and tracking decorated stones as they travel between finders. This policy explains what information we collect, how we use it, and the choices you have.

Account information. When you sign up, we collect your email address, a username, and a display name. If you sign in with Google, Facebook, or Apple, we receive your name, email address, and profile picture from that provider instead of a password.

Stone and location data. When you register a stone or log a find, we store the stone’s name, description, optional cover photo, and the location you provide (via GPS, a pinned map point, or a manually entered place). Location coordinates are reverse-geocoded into a city/place name using OpenStreetMap’s Nominatim service.

Content you post. Notes, comments, and photos you attach to a stone’s journal are stored and shown publicly on that stone’s page.

Technical data. We log IP addresses for failed find-code attempts to prevent abuse (brute-forcing a stone’s secret code), and use session cookies to keep you signed in.

We use your data to operate the service: to create your account, let you register and track stones, show journeys on the map, and prevent abuse of the find-a-stone flow. We do not sell your personal information, and we do not use it for advertising.

We use the following third-party services to run StoneStories. Each processes a limited slice of your data solely to provide their service to us:

• Supabase — database, authentication, and file storage (EU, Frankfurt)
• Vercel — application hosting
• OpenStreetMap / Nominatim — converts coordinates to place names
• Google, Facebook, Apple — only if you choose to sign in with one of these providers

A stone’s public page (name, cover photo, journey map, and journal entries) is visible to anyone with the link, by design — that’s the point of the platform. Your account email and password are never shown publicly. The secret code written on a physical stone is never stored in a way that’s readable by anyone but you, the creator.

You can toggle a stone’s discoverability (whether it appears on the public Explore map) at any time from the stone’s page. To request deletion of your account or personal data, contact us using the details below.

Questions about this policy or your data? Email us at privacy@stonestories.app.