Privacy Policy

Last updated: 23 October 2026

We collect as little personal data as possible. This website has no tracking, no analytics, no advertising, no social-media plugins and no third-party fonts or embeds.

Who is responsible

StoryBookBag — full name and address are in the Legal Notice. Email: hello@storybookbag.com.

Visiting this website

The website is hosted by helloly GmbH, Rainerstrasse 25, 4020 Linz, Austria, on servers in Austria. When you visit, the server automatically records technical information that every browser sends (IP address, date and time, page requested, browser type). This is needed to deliver the website and keep it secure (legal basis: Art. 6(1)(f) GDPR — our legitimate interest in a secure, working website). These logs are kept only for a short time and then deleted by the host.

Contact form and email

If you write to us using the contact form or by email, we receive your name, email address and message. We use them only to answer you (legal basis: Art. 6(1)(b) and (f) GDPR). The form sends your message straight to our mailbox; it is not stored on the web server. We delete the conversation once it is no longer needed, at the latest 12 months after it ends, unless the law requires us to keep it longer.

Spam protection

Our forms contain a hidden field that only automated spam programs fill in. Everything you type is checked on our server (length, valid email address) before it is used. Nothing you type is recorded while you type — there is no session recording or keystroke tracking. To stop repeated abuse, the server counts how many messages are sent from one connection per hour. For this it keeps a one-way scrambled code (not your IP address) that cannot be traced back to you and is deleted after one hour.

If you sign up, we store your email address, the date and time of sign-up and confirmation, the consent text you agreed to, and a note that the age check was passed. We use them only to send you occasional news about StoryBookBag (legal basis: your consent, Art. 6(1)(a) GDPR).

Age check: you must be at least 14 to sign up (the age from which you can consent yourself in Austria, § 4 DSG). We ask for your date of birth and check it on our server. We don’t store your date of birth — only the note “age check passed”. Anyone younger is not signed up, and if we learn that someone under 14 has signed up, we delete the address.
Double opt-in: you first receive an email with a confirmation link. Nothing else is sent until you confirm. Unconfirmed sign-ups are deleted automatically after 7 days.
One-click unsubscribe: every email contains an unsubscribe link and our postal address. One click on the link removes and deletes your address — no login, no questions. Email apps that show their own “Unsubscribe” button work too.
Where it is stored: encrypted, on our web server at helloly GmbH in Austria, in a location that can’t be reached from the web. If we later use an email-sending service, we will name it here before any data is passed on.

Cookies and browser storage

We set no cookies. Your browser only remembers that you closed the cookie notice. See the Cookie Policy.

We don’t sell or share your data. Our hosting provider (helloly GmbH, Austria) processes it on our behalf under a data processing agreement. Your data does not leave the EU.

Your rights

You have the right to access, correct and delete your data, to restrict or object to its use, to receive it in a portable format, and to withdraw your consent at any time (this doesn’t affect anything done before you withdrew it).

You can also complain to the Austrian Data Protection Authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

Asking us to delete your data

Email hello@storybookbag.com with the subject “Please delete my data” and the email address concerned. We will delete everything we hold about you and confirm within one month at the latest. For the newsletter you can also simply use the unsubscribe link, which deletes your address immediately.

Changes

We will update this page when anything changes — for example when the shop opens.