Privacy Policy
Last updated: August 2026
Orastories ("we," "us," "Orastories") is a community platform for reading and publishing books and articles. This page explains what information we collect, why, and what choices you have. It's written in plain language rather than dense legal text - if anything here is unclear, email us at hello@orastories.com.
Information we collect
- Account information: email address, and optionally a display name, username, and bio you choose to add. Passwords are handled entirely by our authentication provider (Supabase) and are never visible to us in plain text.
- Content you submit: books and articles you publish, reviews, ratings, comments, and bookmarks.
- Contact form submissions: name, email, subject, and message, whether you're signed in or not.
- Payment-related records: which books you've purchased or claimed, and your OraCoins wallet balance and transaction history. We never see or store your card details - those go directly to Stripe, our payment processor.
- Basic technical data: IP address, tied to real-money purchase attempts specifically, used to apply a daily rate limit against card-testing fraud. We don't otherwise track or log your browsing activity across the site.
Cookies and local storage
We use your browser's local storage to remember your theme preference (light/dark) and keep you signed in between visits. We don't use third-party advertising or cross-site tracking cookies.
How we use your information
To operate the platform: creating your account, displaying your published content and reviews to other readers, processing purchases and tips, responding to messages you send us, and detecting fraudulent payment attempts. We don't sell your personal information, and we don't use it for advertising.
Who we share it with
We rely on a small number of service providers to run Orastories:
- Supabase - hosts our database, authentication, and file storage.
- Stripe - processes all payments and creator payouts. Stripe has its own privacy policy governing the payment details you give it directly.
- Sentry - receives automatic error reports (e.g. "a page crashed") to help us fix bugs. These reports are about application errors, not your browsing behavior.
We don't share your information with anyone else, except where required by law.
Your content stays yours
Publishing a book, article, or review on Orastories doesn't transfer ownership of it to us - it just gives us the license we need to host and display it to other readers, described further in our Terms of Service.
Data retention and deletion
We keep your account data for as long as your account is active. To request deletion of your account and associated personal data, email hello@orastories.com - we'll confirm what we can remove and any limits (for example, records we're required to retain for tax or fraud-prevention purposes).
Children's privacy
Orastories is not directed at children under 13, and we don't knowingly collect information from them.
Changes to this policy
If we make material changes to this policy, we'll update the date at the top of this page.
Contact
Questions about this policy or your data? Email hello@orastories.com.