🔒 GDPR & CCPA PRIVACY COMPLIANCE

Privacy Policy &
Data Protection Portal

Effective Date: January 1, 2026 • Last Updated: October 2026
Striking Soon respects your creative expression and privacy. This Privacy Portal outlines what data we collect, how it is secured, and how you can exercise full control over your personal records.

1. Information We Collect

We collect only the minimal data required to provide collaborative multiplayer storytelling and AI movie compilation:

  • Authentication Profile: User ID, email address, username handle, and avatar URL provided via Firebase Authentication / Google Sign-In.
  • Story Line Contributions: The fictional sentences you submit to story threads, your sequence position, and turn timestamps.
  • Engagement Metrics: Story upvotes, lines written count, stories created count, and VIP subscription status.
  • Device & Technical Data: IP address, device model, and OS version strictly for abuse prevention, bot detection, and rate limiting.

2. How We Use Your Information

Your information is used strictly to power core gameplay and platform safety:

  • Sequencing story contributions in fair turn order across multiplayer threads.
  • Compiling the canonical 15-comment story into 40–59 second cinematic AI movies.
  • Enforcing Community Guidelines in real time (automatically denying nudity, sex positions, political propaganda, and communal religious degradation).
  • Delivering VIP subscriber streaming keys through Cloudflare R2 with zero latency.
  • We NEVER sell, rent, or trade your personal data to data brokers or third-party advertisers.

3. Data Storage & Security Standards

User and thread records are stored in PostgreSQL on Neon Serverless with TLS 1.3 encrypted connections and AES-256 storage encryption at rest. Generated movie reels are streamed from Cloudflare R2 over HTTPS via expiring 15-minute presigned URLs.

4. Your Rights: Access, Portability & Erasure

Under GDPR, CCPA, and global privacy frameworks, you retain full rights over your data:

  • Right to Access & Portability: Request a full export of your profile and story lines.
  • Right to Rectification: Update your username or bio anytime within your profile settings.
  • Right to be Forgotten: Request complete permanent deletion of your account and disassociation of your contributions.
🗑️ Request Complete Account & Data Deletion

Pursuant to Apple App Store (Guideline 5.1.1) and Google Play Store policies, you may request complete account deletion at any time. Upon submission, all authentication tokens, profile details, and device IDs will be permanently scrubbed from our database within 30 days.

Data Protection Contact

For privacy inquiries, GDPR data requests, or legal notices, contact our Data Protection Officer directly:

Email: contact@strikingsoon.com
Platform: Striking Soon (strikingsoon.com)