Homefront Stories™: Written Children’s Data Retention Policy
Version 1.0.1. Effective date: November 3, 2026. Last updated: November 2026
Why we keep your child’s information
We collect a child’s information only to make the personalized book you ordered, deliver it, and fix it if something’s wrong. We keep it only as long as we need it for that, and never indefinitely. We don’t use it for advertising, and we don’t collect, use, or sell personal information to train large language models.
How long we keep it
| Information | Why we keep it | When we delete it |
|---|---|---|
| Story details you fill in before paying | To let you finish your order and pay | We don’t receive them before payment: they stay only on your device. Our site deletes them once we confirm we received them after payment, or when the page opens if you come back more than 48 hours after your last change. You can clear them sooner with “Clear my details” on the order form, or by clearing this site’s data in your browser. |
| Your email, order choices, and reminder-box record from an order you don’t complete (no child information) | To complete checkout, get your consent, and send one reminder only if you asked for it | 72 hours after you start your order |
| A one-way coded version (hash) of your email, if you unsubscribe from the unfinished-order reminder (no child information) | So we don’t email you again | 30 days after you unsubscribe |
| A paid order whose story details never reached us (saved choices) | To let you add your story details | 30 days after payment. We send one reminder email 7 days before. At day 30 we cancel the order, automatically refund the full amount to your original payment method, and email you. If you cancel for a refund before sending your story details, we delete them right away. |
| All story details: names, ages, look choices, story choices, illustrations, and book files | To make, deliver, and fix your book | 35 days after delivery. If you report a problem within 30 days of delivery, 30 days after the replacement is delivered. E-book delivery is the day we send the link. |
| Your finished book, if you choose “Keep my book” | So you can download it again | When you delete it, or 24 months after your last sign-in. We email you 30 days before. |
| Order and tax records (no child information) | Tax and accounting law | For as long as tax law requires |
| Consent record, including the parent’s email (no child information) | To prove we got a parent’s consent | Life of the order plus 3 years, even after you unsubscribe or delete your account. We use it for nothing else. |
| Ratings and comments (no child information) | To show honest ratings | When you ask us to remove them, or 3 years after you submit them |
| Backups | Disaster recovery | Copies age out on our database provider’s backup schedule |
Our providers don’t keep your child’s information for their own use. The AI provider, xAI, works under a zero-data-retention setting. Stripe keeps its own payment records under its own policies.
How we delete it
Deletion is automatic, by scheduled jobs. We delete data so it can’t be read or rebuilt, and we log each deletion by order number only. We check monthly that the jobs ran (coppa-security-program.md, section 5).
Deleting sooner
You can ask us to delete your child’s information at any time: use My Books (you confirm from the email we send you) or email contact@thought2creations.com. We’ll delete it within 10 business days after we confirm you’re the parent who placed the order. If we haven’t made or delivered the book yet, we can’t finish it without that information; refunds follow the Terms of Sale.
Reviews of this policy
We review this policy at least once a year and whenever we change what we collect. If we change it, we’ll update the “Last updated” date.