Homefront Stories™ Privacy Policy

Version 2.0.1. Effective date: November 3, 2026. Last updated: November 2026

This version replaces the Waitlist Privacy Policy, version 1.0, for the whole site once the store opens.

1. Who we are

Homefront Stories (homefrontstories.com and heroathomebooks.com) is a product of Thought2Creations LLC, a North Carolina limited liability company (“we,” “us”). We make personalized storybooks for all kinds of families: our signature Military collection and our Everyday collection (such as Moving, New Baby, and First Day of School). We’re responsible for the information described here.

Thought2Creations LLC
P.O. Box 1043, Richlands, NC 28574
contact@thought2creations.com

Homefront Stories is an independent product of Thought2Creations LLC. It isn’t affiliated with, endorsed by, or sponsored by the U.S. Department of Defense (also called the Department of War), any branch of the U.S. Armed Forces, any other government agency, or any military-family nonprofit or support program.

2. Our promises in short

We collect only what we need to make, deliver, and support your book.
Every family detail is picked from a list, except a few short names. We never ask for last names, birthdays or due dates, schools or teachers, home towns or addresses, employers, travel or moving destinations, bases, units, or deployment locations.
We don’t sell or “share” personal information or use it for targeted ads. We don’t collect, use, or sell personal information to train large language models, and we don’t let anyone else train AI on it.
We delete your story details 35 days after delivery.
The site is for adults 18 and older in the United States. Children don’t use it.

3. What we collect

From you, the buyer:

email address (you give it when you start the order form; we use it to complete checkout, to sign in, and for receipts and delivery);
if you check the box when you start your order, your agreement to one reminder email if you don’t finish (when you checked it, and which version of the box text you saw);
payment details, entered on Stripe’s secure checkout (we never see your full card number);
your consent record (what you agreed to and when, plus basic payment facts from Stripe that verify it: card brand, whether it’s credit or debit, and any wallet used, never the card number);
if you use the military family discount, that you checked the box certifying you’re eligible, when, your order number, and the discount applied. We don’t ask for or keep proof, ID, rank, branch, unit, or service records; and
if you choose, your agreement to marketing emails; and
if you choose to rate your order, your 1–5 rating and any comment you write.

About your family, for the book (with parental consent; see section 7):

your child’s first name or nickname and age in years;
up to 4 brothers or sisters, including a new baby: an optional first name or a label like “big sister” or “baby brother,” and age (0 for a baby; we never ask for a due date or birth date);
a role label or nickname for a parent who’s traveling or away (in Military and Parent Travels for Work stories) and for the parent at home (such as “Daddy” or “Mama”);
an optional grandparent label (such as “Nana” or “Papa”);
for Military stories only, the service member’s branch, if you choose it;
story choices from lists (story type, a job in plain words, a favorite toy);
up to 2 pets: type, name, and color;
optional look choices for the characters, picked from lists: hair color and style, eye color, glasses or no glasses, and, for adults, an age look. A skin tone swatch (Tone 1 to Tone 10) is offered only for your child, siblings, and your own character (if you mark either the parent who’s away or the parent at home as “This is me”; only one can be). Other adults, such as the other parent or a grandparent, get no skin tone choice; their characters use your child’s chosen tone or a default.

We don’t ask for or accept photos.

Look choices are drawing choices. We don’t ask about or record race or ethnicity, and we don’t infer it from your choices. We never ask about health or disability (other than glasses), religion, or anything similar. We collect look choices only if you check a separate box agreeing to it (section 8).

On your own device, before you pay: the story details you fill in stay in your browser’s storage on your device. We don’t receive them until your payment goes through. Then your browser sends them to us for your order and clears its copy once we confirm we have them. If you don’t pay, they never reach us. If you come back more than 48 hours after your last change, our site deletes them from your device when the page opens. You can clear them sooner with “Clear my details” on the order form, or by clearing this site’s data in your browser.

Automatically: strictly necessary sign-in and checkout cookies, including a short-lived cookie that returns you to your order after payment and holds no family details, and basic server logs (IP address, browser type, and pages requested) kept by our host for security and fixing errors. We don’t use advertising cookies, tracking pixels, third-party analytics, or session recording on pages where you enter family details. We honor Global Privacy Control signals, though we don’t sell or share data in any case. No other companies collect information about your online activities over time and across other websites through our site. Because we don’t do that kind of tracking, our site works the same way whether or not your browser sends a “Do Not Track” signal.

4. How we use it

To make your book: an AI model writes the story text from your choices and our own story outlines, AI creates the pictures, and we lay out the pages. Names are never sent to the AI; it writes with placeholders, and we add the names on our own systems.
To deliver it: email your e-book link.
To take payment, prevent fraud, verify parental consent, keep the site secure, and fix problems.
To answer your questions and handle defect reports and refunds.
To keep records the law requires, such as tax records.
To send a thank-you email after your order, and, after delivery, one email asking you to rate your order. Rating is optional, and you can opt out of rating requests with the link in that email. We send the request to every customer who hasn’t opted out, whatever they might think of their book.
To show ratings and comments on our site, as our ratings rules explain. We never show your email address or any family details, and we remove names from comments before showing them.
To send one reminder email if you start an order but don’t finish it, about 24 hours after you last worked on it, only if you checked the box asking for it. We send it once, never after you’ve paid or unsubscribed, and it contains no family details.
To send offers by email, only if you opt in. Marketing emails never include your family’s details.

We don’t use family details for advertising, profiling, or any automated decisions about you. We don’t collect, use, or sell personal information to train large language models or other AI, and our AI provider’s contract bars it from training on what we send.

Only these service providers, under contracts that limit them to providing their services to us:

Provider	What it does	What it receives
xAI	Its AI model writes the story text (with placeholders instead of names) and creates the illustrations	Ages, look choices, and story choices. No names, emails, or addresses. Sent only through its zero-data-retention service
Stripe, Inc.	Payments and fraud prevention	Your payment details, email, and billing address. No family or story details
Resend (Plus Five Five, Inc.)	Sends our emails, including order emails and rating requests	Your email address and message content. No family or story details
Vercel Inc.	Hosts the website	Data passing through the site, and server logs
Cloudflare, Inc.	Runs parts of our site, stores files we make for your order, and protects the site from abuse (for example, limiting repeated sign-in attempts)	Data passing through those parts of the site, including your IP address, and the files we store there
Neon	Stores our database	Order records and story details, encrypted

Stripe also acts on its own behalf for some purposes, such as fraud prevention and legal compliance, under its own privacy policy at https://stripe.com/privacy. Printed books aren’t available yet, so no printer receives any of your information.

We may also disclose information if the law requires it, to protect someone’s safety, or as part of a merger or sale of the business, in which case this policy’s protections go with it. We don’t sell personal information or “share” it for cross-context behavioral advertising, and we never have.

6. Where it’s processed

We offer Homefront Stories only in the United States, and we store your order data with US providers. Some providers may process data in other countries. For example, our AI provider’s terms allow processing “in the United States and other countries where SpaceXSI and its Subprocessors maintain data processing operations.” We use its zero-data-retention service, so it deletes what we send within an hour.

7. Children’s privacy: Notice to Parents

Homefront Stories is for adults. Children don’t use the site, create accounts, or enter information. But our books are about children, so we follow the Children’s Online Privacy Protection Act (COPPA) for every child’s information a parent gives us, including brothers and sisters, whatever their age.

Who collects it: Thought2Creations LLC, P.O. Box 1043, Richlands, NC 28574, contact@thought2creations.com. Our providers listed in section 5 process it only for us.
What we collect and how we use it: listed in sections 3 and 4. A parent provides everything. We don’t make children’s information public, and there are no chat, comments, or sharing features.
Who receives it: xAI (no names), Vercel, Cloudflare, and Neon, only to make and deliver the book. These disclosures are needed to make the book you order. We don’t disclose children’s information for any other purpose, and we’d ask for your separate consent before doing so.
Consent first: we don’t collect a child’s information until a parent or guardian reads our Notice to Parents at checkout, checks the consent box, and pays. The payment verifies consent, and we record it only after our payment provider confirms the charge. Before then, the details you fill in stay only on your device.
Retention: see section 9. Story details are deleted 35 days after delivery. If your story details don’t reach us within 30 days after payment, we refund the order in full and delete what we saved for it.
Your rights: at any time, you can ask to review or get a copy of your child’s information by emailing contact@thought2creations.com. You can delete it, or stop us from collecting or using more of it, in My Books or by email. In My Books, if you’re signed in, withdrawing consent takes effect right away and we email you a receipt; if you aren’t signed in, we email you a link to confirm. To cancel or delete in My Books, you confirm from the email we send you. If you withdraw consent before the book is finished, we may not be able to complete it. We never require more information than a book needs.

8. Look choices and sensitive information

Some state privacy laws treat information “revealing racial or ethnic origin,” and any personal data about a known child, as sensitive data that needs consent. A skin tone swatch is only a drawing color, but to be careful, we treat look choices as sensitive:

they’re all optional, picked from lists, and never labeled with race or ethnicity;
we collect them only after you check a separate box at checkout agreeing to it, never bundled with the Terms;
for children, your parental consent covers them, as COPPA requires;
if you describe another adult, you confirm they agreed;
we use them only to draw the characters in your book, send them to xAI only as drawing instructions without any names, and never analyze or report on them; and
they’re deleted with your story details.

You can withdraw this consent at any time, with no reason needed. In My Books, click “Withdraw look choices” and it takes effect right away; we email you a receipt. If you aren’t signed in, we email you a link to confirm. You can also email contact@thought2creations.com with “Withdraw consent” in the subject line. We stop using the look choices as soon as we can, and no later than 15 days after your request, and your book uses default looks.

Data protection assessment. Before launch, we wrote down how we handle look choices and children’s information, the risks, and the safeguards we use. We review it every year and before any major change.

9. How long we keep it

Information	When we delete it
Story details you fill in before paying	They stay only on your device. Our site deletes them once we confirm we received them after payment, or when the page opens if you come back more than 48 hours after your last change. We never receive them if you don’t pay
Your email, order choices, and reminder-box record from an order you don’t complete (no family details)	72 hours after you start your order
A one-way coded version (hash) of your email, if you unsubscribe from the unfinished-order reminder, used only so we don’t email you again	30 days after you unsubscribe
An order you paid for whose story details never reached us (the saved choices)	30 days after payment, with one reminder email first. At that point we also cancel the order and automatically refund the full amount to your original payment method. If you cancel for a refund before sending your story details, we delete them right away
Story details and look choices (all family fields), pictures, and book files	35 days after delivery. If you report a problem within 30 days of delivery, 30 days after the replacement is delivered
Finished book, if you check “Keep my book”	24 months after your last sign-in, or sooner if you ask. Look choices are never kept with it
Email address	24 months after your last order or sign-in, or sooner if you ask (kept on a do-not-email list if you unsubscribe)
Consent and order records, including your email address, the boxes you checked, and the military family discount checkbox record (no family details)	For the life of the order plus 3 years, as proof of consent. This applies even if you unsubscribe or delete your account; we use the record only for that purpose
Ratings and comments	Until you ask us to remove them, and no longer than 3 years after you send them. Rating-request links expire after 60 days
Tax and accounting records (no family details)	As long as tax law requires
Copies kept by Stripe for its own legal, fraud, and accounting purposes	Under Stripe’s policies
Encrypted database backups	Overwritten automatically on our database provider’s rolling backup schedule
Server logs	Per our hosting providers’ log settings

Delivery means the day we email your e-book link. Our written data retention policy lists these rules in full.

10. Your choices and rights

Unsubscribe from marketing emails, rating requests, and the unfinished-order reminder using the link in any of those emails. We stop right away. You can also leave the reminder box unchecked, and we won’t send it. We’ll still send order emails.
Access, correct, or get a copy of your information by emailing contact@thought2creations.com. Delete it in My Books (you confirm from the email we send you) or by email. We may need to confirm you control the email address on the order.
Withdraw consent for your child’s information or look choices at any time, in My Books or by email (sections 7 and 8).

US state privacy rights. Depending on where you live, state law may give you the right to know, access, correct, delete, or get a copy of your personal information; to opt out of its sale, targeted advertising, or profiling; to limit or withdraw consent to sensitive data; and to appeal if we deny a request. We offer these choices to everyone in the US, whether or not your state requires it. We respond within 45 days. To appeal, reply to our decision or write to contact@thought2creations.com with “Appeal” in the subject line. We’ll answer your appeal in writing within 60 days and explain why. If you’re not satisfied, you can contact your state attorney general. Connecticut residents can file a complaint with the Connecticut Attorney General at https://www.dir.ct.gov/ag/complaint/. We won’t treat you differently for using your rights. You can use an authorized agent where state law allows.

Washington residents. We don’t collect consumer health data. We don’t collect photos, and we don’t create face templates or any other biometric data.

11. Photos and biometrics

We don’t ask for or accept photos. We don’t scan faces or create faceprints, face templates, or other biometric identifiers.

12. Security

We keep a written security program with a named person in charge. Our safeguards include encryption in transit and at rest, limited staff access with two-factor sign-in, review of our providers’ security terms, and testing and yearly review. No system is perfectly secure, and we can’t promise that information will never be accessed without permission.

13. If there’s a security breach

If a breach affects your personal information, we’ll notify you without unreasonable delay, as North Carolina law (N.C. G.S. 75-65) and other applicable laws require. The notice will describe what happened, what information was involved, what we’re doing, and how to contact us, and will give the contact information for the major credit reporting agencies, the Federal Trade Commission, and the North Carolina Attorney General’s Office. We’ll also notify the North Carolina Attorney General, and the credit reporting agencies if more than 1,000 people are affected at once. Our providers must tell us promptly about a breach affecting your information.

14. Changes

We’ll post any update here with a new version number, effective date, and “Last updated” month and year. If we want to use or share a child’s information in a materially different way, we’ll ask parents for new consent first. If we make other material changes, we’ll email you before they take effect.

15. Contact us