We handle your data with care and in accordance with the Swiss Data Protection Act (FADP). To the extent that customers in the EU are addressed, we additionally structure processing in conformity with the GDPR.
1. Responsible party
Sarah Schwarzgruber
Gweerhofstrasse 13, Lachen, Switzerland
Contact: hello@littlestory.ch
2. Data we process
- Account data: email address, role (registered user).
- Baby profile: baby's name, date of birth, optional email for reminders.
- Photos and texts you upload for designing (personal content).
- Delivery address: first name, last name, street, house number, postal code, city, country.
- Order and payment status (the payment data itself is processed by Stripe (payment provider)).
3. Purposes and legal bases
We process your data to fulfil the contract (designing, producing and delivering the photo book), to provide the application, and to fulfil statutory retention obligations.
4. Photos as particularly sensitive content
Photos are personal content worthy of particular protection. Access is strictly limited to the owner (record-level ownership control). No other user can view your photos.
5. Sharing with third-party providers
- Stripe (payment provider): payment processing (processor).
- Prodigi (print-on-demand, United Kingdom): production and shipping (print data, delivery address).
- Base44 (hosting / data processing): hosting and data processing.
- Google Gmail (email and transactional service provider): sending transactional emails.
6. Retention and deletion
You can delete your album and the associated photos. For orders already produced, we retain the necessary data for the statutory retention period. Photos may be deleted after an appropriate period.
7. Your rights
You may request information, rectification and deletion, as well as restriction of processing. Contact: hello@littlestory.ch.
8. Security
API keys and secrets are managed exclusively server-side. Print-ready production PDFs are not made publicly accessible. The online preview is watermarked and does not contain print-ready original resolution.
9. Storage and Protection of Baby Photos
- Baby photos uploaded to Little Story are stored through our technical service provider Base44 in cloud infrastructure located in the United States. Base44 uses Amazon Web Services (AWS), among other providers, for its infrastructure.
- Photos are stored in private, access-controlled storage. Data is encrypted both in transit and at rest.
- Your photos are processed solely to provide Little Story's services, including the creation, storage and production of your personalised photo products. The necessary print files are transferred to our printing partner, Prodigi, for order fulfilment.
- Your baby photos will not be published or used for advertising or marketing purposes without your explicit consent.
- Personal data is retained and deleted in accordance with applicable data protection laws.
10. Meta Pixel (advertising measurement)
- Purpose: On our public pages we use the Meta Pixel of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), pixel ID 1846082676741699, to measure the effectiveness of our advertising (conversion measurement) and to improve our ads.
- Consent: The Meta Pixel is loaded only with your explicit consent. A cookie banner appears on your first visit. Without your consent no pixel script is loaded and no data is transmitted to Meta. The legal basis is your consent (Art. 6(1)(a) GDPR where the GDPR applies; Art. 6(1) and Art. 6(6) FADP).
- Data transmitted: With your consent, technical information such as your IP address, browser and device information, the pages visited and identifiers is transmitted to Meta when pages are opened and for certain actions (for example registration, starting checkout, completed order). For orders, the order value, the currency and an order identifier are also transmitted. Your photos, name, address and email address are not transmitted to Meta.
- Transfer to third countries: Meta Platforms Ireland Limited may transfer data to Meta Platforms, Inc. in the USA and to other affiliated companies. Transfers to the USA are based on the EU-US Data Privacy Framework or on Meta's standard contractual clauses.
- Cookies and identifiers: The Meta Pixel sets cookies or comparable identifiers (for example _fbp) that allow your browser to be recognised. These cookies are set only with your consent.
- Withdrawal: You can withdraw or change your consent at any time via the "Cookie settings" link in the footer. After withdrawal, no pixel script is loaded and no data is transmitted to Meta. Cookies that have already been set can also be deleted in your browser settings.