In short: we keep only what Storia needs to work — your email, name, a securely hashed password and the stories you write. Your stories are private to you, we never sell data, and you can delete everything from your account at any time.
Who we are
Storia (https://storia.live/) is made by César Martins Lima under the name Subversive Symmetry, who is the data controller for the information described here. For any privacy question or request, write to hello@storia.live.
What we collect and why
- Account details — your name, email address and password. The password is stored only as a one-way hash; we can't read it. Used to create your account, log you in and send account emails such as password resets. Legal basis: performing our contract with you.
- Your writing — story titles, text and writing-goal progress, saved to your account so you can use Storia on any device. Legal basis: contract.
- Usage records — how many AI requests you have made, sign-in sessions and a short log of account events (for example “password changed”). IP addresses are stored only as salted hashes, used for security and abuse limits. Legal basis: contract and our legitimate interest in keeping Storia secure.
- Subscription details — if you upgrade, your Gumroad license key and its status. We never see your card details. Legal basis: contract.
The AI assistant
When you use Storyx, the passage you are working on (and an image, if you upload one) is sent to our AI provider, Groq, to generate the reply. We don't store your prompts or the AI's answers on our server beyond what you choose to keep in your stories.
Who else processes data
- Hostinger — hosts the website, database and our email service.
- Groq — runs the AI model for Storyx requests.
- Gumroad — handles Storia Pro payments and license keys under their own privacy policy.
- Google Fonts — serves the typeface, which means your browser contacts Google’s servers.
Some of these providers are located outside the European Economic Area; where that happens, transfers rely on the safeguards those providers offer, such as the EU Standard Contractual Clauses.
Cookies and storage on your device
Storia uses one essential cookie to keep you signed in. The app also stores a copy of your stories and preferences (theme, panels) in your browser so you can write offline. There are no advertising or tracking cookies.
How long we keep data
Your account and stories are kept until you delete them. Deleting your account (Account → Delete account) removes your profile, stories and sessions immediately. Activity records are removed after a few months. Backups made by our host may take a short while longer to roll over.
Your rights
Under the GDPR you can access, correct, export or delete your data, object to or restrict how it's used, and withdraw consent. Most of this you can do yourself in the app — edit your name, download a full backup of your stories, or delete your account — or email hello@storia.live and we'll answer within a month. You can also complain to your data protection authority; in Portugal that is the CNPD (cnpd.pt).
Security
Connections use HTTPS, passwords are hashed, sign-in sessions can be ended from your account, and reset links expire after one hour and work only once.
Children
Storia is not intended for children under 16. If you believe a child has created an account, contact us and we'll delete it.
Changes
If we change this policy in a way that matters, we'll update the date above and let account holders know.