This notice explains what data OutaStory GmbH processes when you sign up and use OutaStory as a member — reading, following authors, commenting and managing your account. It is one of three role-specific privacy notices.
Who this notice covers
It covers registered members and readers. General website use is described in the Website Privacy Notice; and publishing your own stories is described in the Writer Privacy Notice.
Account data
To run your account we process your email address, display name, date of birth (to calculate your age) and the authentication identifier from our sign-in provider, Auth0. Your email is used for sign-in and important notices and is never shown to other members.
Reading activity
So the service works as you expect, we store your reading progress, favourites, ratings and any comments you post. Comments and ratings are visible to other members under your display name; reading progress and favourites are private to you.
Notifications
If you opt in, we send push notifications (through OneSignal) and transactional or newsletter emails (through SendGrid / Twilio). You can change notification preferences or unsubscribe at any time in your settings or via the unsubscribe link in every email.
Members under 16
OutaStory may be used by minors. We collect your birthday to determine your age and, where required, to gate accounts of under-16 users behind verifiable parental consent. More detail is in our youth-protection statement.
Subscriptions and payments
If you take out a premium subscription, payment is handled by Stripe. We store your subscription status and the minimum billing data needed to manage it; full card details are processed by Stripe, not by us.
Retention and deletion
We keep your account data while your account is active. You can export or delete your data at any time; deletion runs through a short grace window and then permanently removes or anonymises your personal data. See deleting your account.
Your rights
Under the GDPR you have the right to access, rectification, erasure, restriction, objection and data portability, and the right to lodge a complaint with a supervisory authority. You can exercise access and erasure directly from your privacy settings.
The full picture
This notice is a focused summary for members. The complete privacy policy, with every data category, legal basis, retention period and processor, is the comprehensive privacy policy.