Privacy Policy

1. Who we are

Six Minute Story (sixminutestory.com) is operated by Galen Sanford. Questions or requests about this policy can be sent to [email protected].

2. What data we collect

If you write without an account

You can write and submit a story without registering. We receive the story text, the prompt you wrote to, and standard server log data (IP address, browser type, timestamp). We do not link this to any persistent identity.

If you create an account

• Email address — used to log in, send transactional emails (confirmations, notifications), and contact you if there's a problem with your account.
• Username / display name — shown publicly next to your stories and comments.
• Stories, comments, and votes — content you create on the site.
• Google account info — if you sign in with Google, we receive your Google email address. We do not receive your Google password.

Usage and analytics data

We collect anonymized analytics to understand how the site is used (pages visited, referrers, approximate location by country). See the third-party services section for details.

3. How we use your data

• To operate your account and show your content on the site.
• To send transactional emails (account confirmation, password reset, comment notifications if enabled).
• To understand aggregate usage patterns and improve the site.
• To monitor for errors and keep the site running reliably.

We do not sell, rent, or trade your personal data to any third party.

4. Third-party services

We use the following external services. Each has its own privacy policy, linked below.

5. Cookies

We use cookies for:

• Session management — keeping you logged in.
• Analytics — Google Analytics sets cookies to track visits over time.
• Third-party features — ShareThis may set cookies related to the sharing buttons.

You can disable cookies in your browser settings. Disabling session cookies will prevent you from logging in.

6. Data retention

We keep your account and content for as long as your account is active. If you delete your account, we remove your personal information from our active systems within 30 days. Stories you published may remain on the site attributed to "anonymous" unless you request full removal. Server logs are retained for up to 90 days.

7. Your rights (including GDPR)

If you are in the European Economic Area (EEA), UK, or another jurisdiction with applicable privacy law, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interests (e.g. analytics).
• Withdraw consent — where processing is based on consent, you can withdraw at any time.

To exercise any of these rights, email [email protected]. We will respond within 30 days.

The legal bases we rely on under GDPR are: contract (operating your account), legitimate interest (error monitoring, security), and consent (analytics cookies). You may opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

8. Children

Six Minute Story is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have done so, please contact us and we will delete the information promptly.

9. Changes to this policy

We may update this policy from time to time. Material changes will be announced on the site. Continued use of Six Minute Story after an update constitutes acceptance of the revised policy.