1. Introduction
Contes de Lune(“we”) takes the protection of your personal information very seriously. This policy explains what information we collect, how we use it and what rights you have. We comply with Quebec's Act respecting the protection of personal information in the private sector (“Law 25”) and with applicable Canadian laws.
2. Information we collect
- Account information: email address and password (encrypted).
- Profiles you create: the child's first name and date of birth (to keep their age up to date and celebrate their birthday; it is never printed or passed on to our providers, who only receive the age), the look chosen for their character (skin tone, hair, clothes, glasses…), personality traits, current interests, favourite mood, and the family members and imaginary friends you add. We never ask for or keep any photo: the illustrations are drawn from these choices.
- The household's mailing address, for the Le Courrier de Lune subscription. The child's first name and this address are printed on every postcard.
- The stories and cards created for you, and the changes you make to them.
- Payment information: handled directly by Stripe. We never receive or keep your credit card numbers.
- Attribution data at sign-up: where the visit came from (utm parameters, partner code, ad click identifier), the date of arrival, the version of the page seen (A/B test) and the type of device (mobile or computer).
- The messages sent to support and the screenshots you attach to them.
- Your ratings of the cards.
- Basic technical data (logs, device type) for security purposes.
3. How we use the information
We use your information to provide and personalize the Service, manage your subscription, keep the Service secure, and communicate with you about your account. We never sell your personal information.
4. Information about children
Contes de Lune is meant for parents and guardians, not directly for children. Information about a child (first name, date of birth, preferences) is provided by a responsible adult, only to personalize the stories, illustrate their character, address the cards to them by first name and celebrate their birthday. No photo of a child is collected. You can change or delete these profiles at any time from your dashboard.
5. Sharing with third parties
We rely on trusted providers to run the Service, including:
- Supabase: database, authentication and image storage.
- Stripe: payments, subscription portal and promo codes.
- Vercel: hosting of the application.
- Stannp: printing of the cards (in North York, Ontario) and handing them to Canada Post. For each card it receives the child's first name, the mailing address and the card's artwork, only to print and mail it, never for advertising.
- Resend: sending the emails about your account.
- Anthropic (Claude): writing the stories and checking the illustrations. It receives the personalization details it needs (first name, age, character description, interests), never your address or your payment information.
- fal.ai, which uses Google image models (Gemini): illustrations. It receives what it needs to draw (description of the character and the scene, the image of the character already drawn), never your address or your payment information.
- Google: the “Continue with Google” sign-in, if you choose it.
- Smee.io: relay for our internal notifications (a new subscriber's email and plan, messages sent through the contact form).
- Google Analytics and Meta (Facebook): audience measurement and measuring how well our ads work. They receive browsing data (pages viewed, where the visit came from, account creation, subscription), never your child's first name, the content of the stories or your mailing address. See section 9.
These providers process your information only for the purposes described and under their own security commitments. Some may host data outside Quebec.
6. Retention
We keep your information as long as your account is active or as long as needed to provide the Service. You can remove your mailing address at any time from your dashboard. When your account is closed, your information is deleted or anonymized, subject to legal obligations.
7. Security
We use reasonable technical and organizational measures to protect your information, including encryption of passwords and connections.
8. Your rights
Under Law 25, you have the right to access your personal information, to correct it, to have it deleted and to withdraw your consent. You can change your mailing address and the profiles at any time from your dashboard; however, a card already handed to the post office can no longer be recalled. To exercise these rights, write to us at info@contesdelune.com.
9. Cookies and audience measurement
Some cookies are needed for the Service to work, in particular to keep you signed in and, for 30 days, to keep where your visit came from (partner code, campaign parameters) when you go from contesdelune.ca to contesdelune.com. We also use two other kinds:
- Audience measurement: Google Analytics, to understand which pages are viewed and where visitors come from. This data is aggregated.
- Advertising: the Meta (Facebook) pixel, which tells us whether a visit or a subscription came from one of our ads and lets us show our ads to people who have already visited the site. We never send Meta your child's first name, the content of their stories or your mailing address.
You can block these cookies with your browser settings or a blocking extension; the Service keeps working normally. To withdraw your consent, write to us at info@contesdelune.com.
10. Person in charge of the protection of personal information
For any question about the protection of your personal information, or to file a complaint, you can reach the person in charge at info@contesdelune.com.
11. Changes
We may update this policy. Important changes will be communicated to you, and the “last updated” date above will be revised.
12. Contact us
For any question about this policy, write to us at info@contesdelune.com.