Privacy Policy

Pilot draft. Subject to legal review.

Storyline collects only the information needed to run a stewarded Storyline experience.

Storyline is operated by DRKNYT. Georgian Bay Story Project uses the same platform; Save Georgian Bay's collection owner, authorized reviewers, and the Georgian Bay regional administrator can access the submissions, media, contact details and consent records needed for collection administration and review. Developer-only accounts can configure published-story views and embeds, but cannot access private submissions, contact details, consent records or forwarded collection mail. Someone assigned both Reviewer and Developer access has both responsibilities. Support perspectives use sample content and do not expose another contributor's account.

Information we may collect

• Account email addresses.
• Contributor names, display preferences, and contact emails.
• Contributions such as memories, photos, artwork, recordings, documents, links, and notes.
• Steward review notes and status decisions.
• Legal acceptance records showing which document version was accepted and when.
• Support messages, delivery records, and technical request information used to operate and protect the service.

Services that process information

• Vercel hosts the website and may process technical request logs.
• Supabase provides accounts, authentication, story data, and consent records.
• Cloudflare R2 stores uploaded media. Mux processes video when its upload path is used.
• Resend delivers collection notifications, contact messages, operational alerts and sign-in emails. Sign-in branding follows the verified product context; otherwise the shared account uses Storyline branding.
• OpenAI processes text, recordings, and reference photos only when you request an AI tool. Live dictation uses your browser's speech service, which has its own permissions and provider terms.

These services may process information outside Canada. This product notice does not promise Canadian-only storage. Do not submit passwords, financial account details, or other sensitive records in your story or support message. DRKNYT does not sell your personal information.

How information is used

• To run private and public Storylines.
• To let stewards review, approve, hold, reject, or request clarification.
• To prepare outputs such as story pages, packets, presentations, slideshows, printed pieces, or documentary-style drafts.
• To maintain consent, credit, and source records.

What is not public by default

Contributor email addresses, steward notes, private source notes, and internal review decisions are not shown publicly by default.

Approved stories and approved media can appear in public pages, feeds, and embeds. Readers may copy or share them. Anonymous credit hides your public name; it does not remove identifying details from the story or make your contact information anonymous to authorized reviewers.

Browser drafts and accounts

The story form saves a draft in this browser. Avoid using a shared device for private material and clear the draft when finished. Account cookies maintain sign-in, and seven-day media-preview cookies let the uploading browser review its unpublished files. After a preview expires, sign-in or uploading the file again may be needed. Submitting a story does not require an account. A verified sign-in can connect stories submitted with that account email to your workspace.

Operational measurement

We count broad page categories without analytics cookies, visitor identifiers, IP addresses, referrers, search parameters or story text. Browser Do Not Track and Global Privacy Control signals disable these optional page counts. Known crawlers and automated health checks are excluded, but page counts are not unique people and may still include automated or operator use. Verified account use, saved submissions, review decisions and service failures are recorded separately to operate the pilot. Private operator emails contain grouped counts and service conditions, not contributor names, emails or story text. These metrics and accepted operator messages are retained for up to 90 days; account milestone deduplication remains until the account is deleted. Hosting and email providers retain their own service logs.

Optional AI tools

If you choose an AI writing or image tool, the text, visual directions, and reference photos you select are sent to OpenAI to complete that request. Reference photos used only to guide image generation are not attached to your story or stored as Storyline media. Storyline shows three realistic scenes from different parts of your story. You may attach any, all, or none of them. Each attached image is clearly identified as AI-generated, not a real photograph of the event.

AI output may contain mistakes. You can edit or reject it, and writing tools preserve an original that you can restore. Storyline does not claim that choosing anonymous credit removes identifying details before an AI request. Reference photos must be yours to use, with permission from the people depicted for this use. Storyline does not control an AI provider's own retention practices.

Retention, correction, and questions

Submissions, attached media, review history, and consent records are retained to operate the collection and account, resolve support requests, and document permissions. Data removal and media cleanup may require manual handling during the pilot; clicking away or discarding an uploaded draft is not a confirmation that its stored file has been deleted. Provider logs and backups follow their own retention processes.

Ask for access, correction, or deletion, or report a privacy or accessibility concern, at lab@drknyt.com. Include the collection and story details needed to locate the record, and do not email unnecessary sensitive information. Some consent or security records may need to remain after public removal.

Removal requests

Contributors can ask for a contribution to be removed from future online use. During the pilot, contact the collection owner through the story form or email lab@drknyt.com with the collection name and contribution details. Materials already printed, downloaded, exported, shared, or published before the request may not be removable.

Replacing this draft

This plain-language pilot draft is product infrastructure, not final legal advice. It should be replaced or revised by a lawyer-reviewed privacy policy before broader launch.