Privacy Policy
Effective August 19, 2026
Donastoria is operated by Neon Zombie Inc., which is responsible for the personal information described in this policy. This policy explains how Donastoria handles information through this website, its beta application process, direct purchases and the Donastoria iOS app. The information we process depends on which parts of Donastoria you use.
Information you provide on the website
When you apply for beta access, we collect your first and last name, email address and the application responses you choose to provide, including your country, iPhone model, general family composition and age ranges, family viewing and reading habits, product priorities, pricing feedback and willingness to participate in testing. Please do not provide names, exact birthdates or other identifying details about children in the beta application.
When you purchase Founding Access through Stripe, Stripe processes your payment details. Donastoria receives and retains limited transaction information needed to confirm and support the purchase, including a purchaser email address, checkout and payment identifiers, purchase amount, currency and purchase date. Donastoria does not receive your complete payment-card number.
Account and authentication information
The iOS app uses Supabase for account authentication and backend services. Depending on how you sign in, we may process your email address, account identifier, authentication provider, session information and the name or relay email you choose to share through Sign in with Apple. Supabase and Apple may also process security and authentication logs, including IP address, user agent, device or browser information, and sign-in events.
Family archive information
The app processes the information an adult account holder chooses to add to a family archive. This may include household and membership records, invitations, child profile names, birthdays or due dates, saved titles, personal intentions, stories, reactions, participants, dates and other memory-entry details.
Current versions sync normalized archive records to Supabase in a form that Donastoria's service systems can read as needed to provide, secure and support the app. The app also maintains a separate compatibility snapshot that is encrypted on the device before it is uploaded. That encrypted snapshot does not make every synchronized archive record end-to-end encrypted.
Catalog searches and images
When you search the app's media catalog, the search terms, media category and applicable filters are sent directly from your device to third-party catalog services. Donastoria currently uses TMDB for movie and television information and Apple's iTunes Search API for music, books and certain television information. Those providers receive the request and ordinary network information such as your IP address. Poster, cover and backdrop images may be loaded from TMDB or Apple content-delivery systems. If you save a result, catalog details and image links may become part of your archive record. See our Data Sources & Credits page for attribution and source information.
Website technology and device storage
Cloudflare hosts and protects the website and may process IP addresses, browser and device information, request details and security logs. Cloudflare D1 stores beta applications and the limited Founding Access transaction records described above. The private preview uses a necessary signed access cookie that lasts for up to 30 days. The beta application creates a random session identifier in session storage and records which application steps that session reaches so we can understand completion and drop-off. Those progress events do not contain the answers entered into the form. The browser copy of the identifier is removed when the session ends; anonymous server-side progress events are retained for up to 90 days. The beta flow may also store a local marker in your browser when you indicate that you are already a founding member. You can remove that marker by clearing this site's browser storage.
How we use information
- To review and respond to beta applications and recruit a useful mix of test families.
- To create accounts, authenticate users and operate shared family archives.
- To provide catalog search, save records, synchronize authorized devices and support household collaboration.
- To confirm purchases, activate entitlements and provide customer support.
- To send beta, account, purchase and launch communications, including the promised App Store offer code.
- To send product news where permitted or when you have chosen to receive it.
- To understand product fit, improve Donastoria, prevent misuse, secure the services and troubleshoot problems.
- To comply with legal obligations and enforce applicable terms.
Service providers and disclosures
We do not sell personal information or use it for cross-context behavioral advertising. We use the following providers to operate Donastoria:
- Supabase for authentication, database, backend and related app infrastructure.
- Cloudflare for website hosting, security and D1 data storage.
- Stripe for Founding Access checkout, payment processing and fraud prevention.
- Resend for beta confirmation and other transactional email delivery.
- Apple for Sign in with Apple and iTunes Search catalog requests.
- TMDB for movie and television catalog requests and images.
These providers process information under their own terms and privacy notices and may use subprocessors. We may also disclose information when required by law, to protect people or the service, or as part of a merger, financing, acquisition, reorganization or sale of assets. If a business transfer occurs, this policy will continue to apply to the transferred information unless you are notified otherwise.
Retention and deletion
We retain information only for as long as reasonably necessary for the purposes described above. The period depends on the kind of information: beta applications may be kept while the beta and related launch activities are active and for a reasonable period afterward; account and archive information is generally kept while the account remains active; security logs are kept according to operational needs and provider settings; and purchase records may be kept longer where needed for tax, accounting, fraud prevention, dispute or legal obligations. Residual copies may remain temporarily in backups after deletion.
To request access to, correction of or deletion of your information, email support@donastoria.com. App account controls may also provide a deletion request when available. Deleting an account does not require us to erase transaction records or other information that we must retain by law, and it may not remove information independently retained by a third-party catalog or payment provider.
Your choices and rights
You can opt out using the instructions in a marketing email or by contacting support, without affecting necessary account, purchase or service messages. Depending on where you live, you may have rights concerning access, correction, deletion, portability, restriction or objection. Contact us to make a request. We may need to verify your identity before completing it.
Children and family profiles
The website, beta application and adult accounts are intended for adults age 18 and older; Donastoria is not directed to children. A parent, guardian or other authorized adult may create a child profile and enter information about a child for a private family archive. The adult is responsible for having authority to provide that information and for deciding what is appropriate to record. Children should not submit information or create accounts themselves.
Security and international processing
We use reasonable technical and organizational safeguards, including encrypted network connections, service access controls and the separately encrypted compatibility snapshot described above. No internet service can guarantee absolute security. Donastoria and its providers may process information in the United States and other countries, whose data protection laws may differ from those where you live. Where applicable, providers use contractual or other recognized safeguards for international transfers.
Changes and contact
We may update this policy as the product and its providers develop. We will revise the effective date when we do and provide additional notice when required. Questions or privacy requests may be sent to support@donastoria.com.