Privacy Policy
Last updated: 9 May 2026
Talatal Tales ("we", "our", or "us") operates the talatal.com website and the Talatal Tales Android app (together, the "Service"). This policy explains what data we collect, how we use it, and your rights over it. By using the Service you agree to the practices described here.
1. Data We Collect
Account data
Email address, display name, and profile picture when you register or sign in via Google OAuth or email/password. We store this in Supabase (our database and auth provider).
Reading activity
Chapters you open, your reading position within a chapter, novels you add to your library, and novels or authors you follow. We use this to sync your library across devices and to power personalised recommendations.
Content you create
Comments, reviews, ratings, and (for authors) novels and chapters you write on the platform.
Device and usage data
Crash reports including device model, OS version, and stack traces (collected by Sentry). Anonymised product-usage events such as screen views and feature interactions (collected by PostHog). Neither service links these events to your name or email.
Push notification token
If you grant notification permission in the Android app, we store an Expo push token — a pseudonymous device identifier used solely to deliver in-app notifications (new chapters from authors you follow, etc.). We never use this token for advertising.
2. How We Use Your Data
- Providing and improving the Service (sync, recommendations, notifications)
- Anti-piracy: we embed an invisible per-user watermark in chapter text so we can identify the source of leaked content. The watermark contains only your user ID and is never shown to other users.
- Platform safety: detecting abuse, vote manipulation, and review bombing
- Analytics: understanding which features are used so we can prioritise improvements
- Crash debugging: diagnosing and fixing bugs reported via Sentry
We do not sell your data to third parties. We do not use your data for advertising.
3. Third-Party Services
We share data with the following processors to operate the Service:
| Service | Purpose |
|---|---|
| Supabase | Database, file storage, and authentication |
| Vercel | Web hosting and edge compute |
| Sentry | Crash reporting (EU-hosted) |
| PostHog | Product analytics |
| Expo (Notifications) | Push notification delivery for the Android app |
4. Data Retention
We retain your account and content data for as long as your account is active. When you delete your account (see §5), your profile is soft-deleted within 24 hours and your comments and reviews are anonymised. Crash logs in Sentry are retained for 90 days. Analytics events in PostHog are retained for 12 months.
5. Your Rights
- Delete your account: Open the app or website → Settings → Delete Account. This permanently removes your profile and anonymises your public content.
- Access or export your data: Email us at privacy@talatal.com and we will provide a copy within 30 days.
- Revoke notification permission: Open your Android device settings → Apps → Talatal Tales → Notifications → disable. We will stop sending pushes and the token will be cleared the next time you open the app.
- Opt out of analytics: Email us and we will exclude your account from PostHog tracking.
6. Security
All data in transit is encrypted via TLS. Data at rest is encrypted by Supabase (AES-256). Authentication tokens are stored in your device's secure keystore (Android Keystore on mobile, HttpOnly cookies on web) and are never logged or exposed to client-side JavaScript.
7. Children
The Service is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal information, contact us at privacy@talatal.com and we will delete it promptly.
8. Changes to This Policy
We may update this policy from time to time. We will notify registered users of material changes via in-app notification at least 14 days before the change takes effect. The "Last updated" date at the top of this page always reflects the current version.
9. Contact
Questions or requests about your data? Reach us at privacy@talatal.com. We aim to respond within 5 business days.