Privacy Policy

Your privacy matters to us. This policy explains how we collect, use, and protect your personal data when you use Margostery.

Last updated: January 2025

1. Who We Are

Margostery is an online platform that allows users to create, publish, and explore stories.

For any privacy-related questions, you can contact us at: [email protected]

2. What Data We Collect

A. Account Information

  • Email address
  • Username
  • Encrypted password

B. User Content

  • Stories and content you upload
  • Metadata (timestamps, visibility settings)

C. Technical Data

  • IP address
  • Device and browser type
  • Log data for security purposes

D. Analytics Data (Optional)

If you consent, we collect analytics data via:

  • Google Analytics (GA4) — usage statistics
  • Microsoft Clarity — anonymized session interaction recordings

We do not intentionally collect sensitive personal data.

3. How We Use Your Data

We process your data to:

  • Provide and operate the platform
  • Allow you to create and manage an account
  • Display and host your content
  • Improve platform usability (if analytics consent is given)
  • Ensure security and prevent abuse

4. Legal Basis (GDPR)

Under EU law, we process data based on:

  • Contract – to provide your account and platform services
  • Legitimate Interest – to ensure platform security
  • Consent – for analytics and session recording

You may withdraw consent at any time in Settings → Privacy.

5. Analytics & Session Recording

If you opt in:

  • Google Analytics collects aggregated usage data.
  • Microsoft Clarity may record anonymized interaction sessions.

We:

  • Do not record passwords.
  • Mask sensitive inputs.
  • Do not record private content fields.

6. Payments (Future Use)

If payments are enabled in the future, transactions will be processed by third-party payment providers. Margostery does not store payment card details.

7. Data Retention

We retain:

  • Account data: until deletion
  • Uploaded content: until deletion
  • Security logs: limited retention (typically 30–90 days)
  • Analytics data: per provider retention settings

8. Your Rights (EU Users)

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and content
  • Withdraw consent for analytics

To exercise your rights, contact us at: [email protected]

9. Data Security

We implement reasonable technical and organizational measures, including encryption, secure authentication, and access controls.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page.

Manage your cookie and tracking preferences at any time: