Privacy

This describes how Father Story handles a private family interview in this MVP. It is product practice, not legal advice. Last updated 26 August 2026.

What we collect

When you start a conversation we store a private interview record: your name and email, details you give about your father, photos you upload, your answers, consent choices, and a draft story if one can be prepared. The interview is reached through an unguessable link. That link is not listed for search engines.

How it is used

We store what you share so a story can be prepared and privately reviewed. Storage and public publication are separate choices. Publication consent is never pre-checked, and finishing an interview does not publish anything. Drafts stay off the public interview pages.

Photos stay in a private storage bucket and are shown only through the private interview or owner review screens. API keys, the database service role, and the owner secret stay on the server.

Who can see it

You can return with the private link (and the session cookie on the same browser). The project owner can review the interview in an authenticated admin screen. Interviewees do not get accounts. We do not sell this data.

Asking for deletion

You can request deletion from the thank-you page after you finish, using Request deletion. That records a deletion request on the interview. An owner then removes the interview, photos, transcript, and draft.

If you still have the private link, you can also send POST /api/interviews/<your-token>/deletion-request with optional JSON { "reason": "..." }. If you no longer have the link, contact the project owner with the email you used in the interview.

Cookies

We set an httpOnly session cookie so refresh keeps your place. It is not readable by page JavaScript. Owner review uses a separate httpOnly cookie after signing in.