Privacy policy

Fabliko takes care with your data, and even more with your child’s. We collect as little as possible: no photos, no date of birth, only a first name. This policy explains what data we process, why, who we share it with, how long we keep it and what your rights are.

Who we are

Fabliko is published by Peace of Mind Media, which is responsible for processing your personal data on this site.

Peace of Mind Media
Entrada 401
1115 SC Amsterdam
The Netherlands
info@fabliko.com

What data we process

Your account

• your name and email address;
• your password, stored encrypted (we can’t read it);
• whether you want to receive the weekly email;
• the language of the site where you signed up, so we can email you in that language.

Your child’s profile, filled in by you:

• first name;
• whether stories are about a boy or a girl;
• the avatar choices: skin tone, hairstyle, hair colour, eye colour, glasses, freckles;
• reading language, reading level and interests;
• which stories are on the bookshelf and which stories your child has finished (with the date).

Trying Fabliko without an account
If you read a story without an account, your own browser keeps what you fill in (first name, avatar, age), so you can carry on where you left off. We only receive that data when you create an account.

Fabliko Plus and gifts

• which subscription or gift you buy, the amount, the date and whether the payment went through;
• for a gift: your email address and the gift code, and who redeemed the code;
• a customer number at Mollie, our payment provider. We don’t store your bank or card details: they go straight to Mollie.

Invitations
If you create an account through another parent’s invite link, we remember who invited you. That way we can give you both a month of Plus.

Contact form and email

• your name, email address, subject and message;
• an encrypted code of your IP address, to limit spam. We don’t store the IP address itself.

Technical

• a functional cookie that keeps you signed in, and one that remembers the country you chose in the flag menu (see our cookie page);
• your IP address and browser, which our hosting needs to send you the page and to block attacks;
• usage statistics through Google Analytics, set up in a privacy-friendly way (see below).

Why we use your data, and on what basis

Purpose	Data	Legal basis
Your account and your children’s profiles, showing stories at the right level, reading history and certificates	Account, your child’s profile	Contract
Providing Fabliko Plus and gifts, and processing payments	Purchases, customer number at Mollie	Contract
Keeping payment records for the accounts	Purchases	Legal obligation
Giving a month of Plus for an invitation	Who invited whom	Contract
The weekly email with the story of the week	Email address, your child’s profile	Consent (you switch it on yourself and can switch it off at any time)
Answering your question	Contact message	Legitimate interest: helping you
Delivering the site, keeping it secure and preventing abuse and spam	Technical data, encrypted IP code	Legitimate interest: a safe, working website
Seeing which pages are used, to improve Fabliko	Google Analytics (privacy-friendly)	Legitimate interest: improving the site

We don’t use your data for advertising, we don’t sell it and we don’t build marketing profiles.

Analytics

We use Google Analytics, set up in a privacy-friendly way:

• we have a data processing agreement with Google;
• we don’t share data with Google for its own purposes;
• Google signals is off;
• advertising features are off;
• no exact location or device data is collected;
• IP addresses are not stored;
• data is kept for 2 months.

We never send names, email addresses, story titles or your child’s details to Google Analytics. Because of these settings, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) does not require your consent, so you won’t see a cookie banner. Which cookies this places is on our cookie page.

Children’s data

Accounts are created by a parent or carer; children don’t have their own account. You fill in your child’s details yourself. We deliberately ask only for a first name: no photo, no surname, no school and no date of birth. We use your child’s name only to make the stories and prints for you. If you want something about your child deleted, delete the profile in Account or email us.

Links in the weekly email

The print links in the weekly email work without logging in, so you can easily open them on any device. They are personal, secured and expire after 14 days. So don’t forward the email if you don’t want others to use them.

Who we share data with

We never sell your data. We work with these service providers:

Provider	What for	Where
Vercel	Hosting the website	Servers in Paris, worldwide network to deliver pages quickly
MongoDB Atlas	The database with accounts and profiles	Paris
Mollie	Payments for Plus and gifts	Netherlands
Google	Analytics (as above)	EU and US

Mollie processes your payment as an independent party, under its own privacy policy.

Vercel, MongoDB and Google may process data outside the European Economic Area. They are certified under the EU-US Data Privacy Framework, which the European Commission has recognised as providing adequate protection.

We only give data to others, such as the police, when the law requires us to.

How long we keep your data

Data	How long
Your account, your children’s profiles and their reading history	As long as your account exists. If you delete your account, we delete all of this.
Login session	30 days, or until you log out
Link to reset your password	60 minutes
Print links in the weekly email	14 days
Purchases and payments	7 years, because the law requires it for the accounts
Contact messages and emails to us	As long as needed to deal with your question
Google Analytics data	2 months

Your rights

You have the right to:

• see the personal data we hold about you;
• have it corrected;
• have it deleted;
• object to how we use it;
• have its use restricted;
• receive it in a format you can take to another service.

You can do a lot yourself: edit or delete profiles, switch off the weekly email and delete your account in Account. For anything else, email info@fabliko.com from your account’s email address, so we can check it’s you. We answer within one month.

If you’re not happy with how we handle your data, please tell us first. You also have the right to complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or to the data protection authority where you live.

Changes to this policy

When we change how we handle personal data, we update this page. You can see at the bottom when that last happened.