Effective date: 11 October 2026
This Privacy Policy explains how The Salty Pistachio LTD (“we”, “us”) handles information when you use CraftStories, a private place to save photos and memories of creative work. We are the controller of the personal information described here.
What you provide
To create an account, you provide an email address and password. When you save a creation, you may add photos, a title, notes, a creation date, categories, and tags. Photos and notes may contain information about you or other people, including children. Please avoid adding identifying details you do not need and only upload images you have the right to use.
How CraftStories works with your information
CraftStories uses your account information to sign you in and sync your creations across devices. Entry details are stored in Google Cloud Firestore and uploaded photos in Cloud Storage for Firebase, within a separate CraftStories Firebase project. A local search index and pending-upload queue are stored on your device. Camera and photo-library access is used only when you choose to add photos and grant the relevant device permission. You can change those permissions in your device settings.
We use Firebase Authentication, Firestore, Cloud Storage, Cloud Functions, and App Check to operate and protect the service. These services may process technical information such as account identifiers, IP address, device or app information, and security signals needed for sign-in, syncing, abuse prevention, and service operation. The current CraftStories app does not include third-party advertising, behavioural analytics, or tracking SDKs, and we do not sell your photos or stories.
Children and family use
CraftStories is designed so adults can keep memories of their own or a child’s creations. An adult must create and manage the account and supervise any child using the app. A child should not submit their own email address or other identifying information to create an account. If you believe a child has created an account without appropriate adult involvement, contact us so we can review and, where appropriate, delete it. We do not use children’s photos for advertising or profiling.
Why we use it
We use account details, entries, and photos to provide the service you request, including sign-in, storage, editing, and cross-device sync (performance of our contract with the account holder). We use limited technical and security information to keep the app reliable and prevent misuse (our legitimate interests in operating a secure service). We may process information where needed to comply with a legal obligation or respond to a valid legal request. We do not make decisions about you or a child solely by automated processing that have legal or similarly significant effects.
Sharing and international processing
Your creations are not displayed in a public feed. We share data with Google as the provider of the Firebase services used to run CraftStories, and with others only if you direct us to, we are legally required to, or it is necessary to protect the service. Google may process information outside the UK; Firebase Authentication is operated in the United States. International transfers are handled under the applicable data-protection terms and safeguards of our service providers. Do not share a photo link if you want the image to remain private.
Retention, deletion, and your choices
You can edit or delete individual creations in the app. Deleting an entry removes its record from your account; associated photo files are removed by a background cleanup process. To delete your CraftStories account in the app, open Profile, choose Delete account, enter your password to verify it is you, and confirm. Your account is deleted immediately; its saved entries and uploaded photos are then removed by a background cleanup process. You can also email hello@saltypistachio.com from your account email address to request deletion or a copy of your information. We may need to verify your identity. Uninstalling the app does not delete information stored in your online account.
We keep account and creation information while your account is active, or until you delete it or ask us to delete it, subject to any legal need to retain limited records. Technical logs and backups may remain for a limited period under the service providers’ normal retention processes. When you delete your account, CraftStories clears its journal index, pending changes and retained photo files on that device. Some cached data may remain until you uninstall the app, including on other devices where you used the account, subject to your device backup settings.
Your rights and security
Depending on where you live, you may have rights to access, correct, erase, restrict, object to, or receive a copy of your personal information. Contact us to exercise them. UK users may also complain to the Information Commissioner’s Office. We use account-based access rules and the security features of Firebase to protect stored entries and photos, but no online service can guarantee absolute security. Keep your account credentials and devices secure.
Changes and contact
We may update this policy if CraftStories or legal requirements change. We will post the revised policy here and update the effective date. For privacy questions or requests, email hello@saltypistachio.com. The Salty Pistachio LTD, company number 10788917, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
For help using the app, visit CraftStories support. The Terms of Service describe the rules for using CraftStories.