What we hold, and for how long.

KokkoTales, Malé, Maldives, decides what is collected here and why. To ask anything about this page, or to have your data sent to you, corrected or deleted, write to studio@kokkotales.com.

If you send us a photograph so we can draw your child, it is used for that and nothing else. It is never shown on the site, never used in marketing, and never shared.

It is destroyed the moment your book is delivered. Not archived, not moved — deleted, and the record of the deletion is written only once the file is actually gone, so our records cannot claim a deletion that did not happen.

While it exists, only the studio can open it — and only after re-entering a password, so a signed-in session left open on a borrowed machine is not enough. Not other customers, and not you: there is no route by which anybody but us can fetch it back.

A photograph is optional. A brief without one is still a brief, and we will ask you to describe your child instead.

The drawing we make of your child is kept, so a second book can start from it rather than asking you to send another photograph. It is our illustration, not a picture of your child, and only you can see it on your account.

You can ask us to delete it at any time and we will.

Your account — your name and email address, and your password stored only as a scrypt hash, which cannot be turned back into your password. Needed to know an order is yours.

Your order — what you bought, what you paid, and the delivery address and phone number if something is being posted. A courier needs a name and a number.

The child in the story — their name, age, pronouns, appearance details and your dedication. This is what the book is made from.

Your transfer slip — a banking document, stored outside the public site under a name we generate, so it cannot be found by guessing a URL. Two parties can read it: the studio, and you, signed in to the account that placed the order. A guest order has no account to prove ownership, so only the studio can open it.

Where you are in a book — the page number you reached, so a story opens in the right place on your phone and your laptop. The page, and nothing else: not how long you read, not when, not how often.

Messages — what you write to us, and a copy of the emails we send you about your order.

No analytics, no advertising, no third-party pixels, no fingerprinting. Nothing on this site reports your visit to anybody. There are four things stored, and here is all of them.

kt_session — keeps you signed in. Without it there is no way to know an order is yours. 30 days, or 12 hours for a studio login. Essential, so it is not optional.

kt_currency — remembers whether you read prices in rufiyaa or dollars. A year.

kt_consent — remembers the choice you make below, so we stop asking. A year.

kt_reader_… — stored in your browser, not sent to us; remembers the page of a book you reached on this device. While you are signed in we keep that page against your account as well, which is the row described above.

No advertiser, no data broker, and nobody who is not working on your order. We do not sell data. What we do rely on is infrastructure, and naming it is more honest than claiming nobody else is involved:

Render hosts the application and its storage, on servers in Singapore. Your data therefore leaves the Maldives and is held there.

Resend delivers our email. It handles the message and nothing more.

Your bank and ours see the transfer itself, as they would for any payment.

Traffic is encrypted in transit. Passwords are hashed, never stored. Uploaded files live outside the public site under generated names and are served only through checks that ask who you are. The most sensitive read in the system — a child’s photograph — needs the studio password re-entered even from a signed-in session, and every such read is logged.

No system is perfectly secure, and we will not pretend otherwise. What we can say is that the amount held is deliberately small, and the most sensitive item is deleted rather than accumulated.

Photographs — destroyed when the book is delivered.

Order records — kept, because they are your receipt and our accounts.

Everything else — kept while your account exists, and removed when you close it.

You can ask us for a copy of what we hold, have it corrected, have it deleted, or tell us to stop sending you anything. You can unsubscribe from our letters from any letter, without signing in.

Write to studio@kokkotales.com and a person will answer. If you ask us to delete your account we keep only what an order record legally has to contain.

KokkoTales is bought by adults for children. Accounts are for grown-ups and we do not knowingly let a child create one.

The personal details of the child a book is about are given to us by their parent or guardian, for the single purpose of making that book. If you believe a child’s details have reached us without that permission, write to us and we will delete them.

If what we do changes, this page changes with it and the date at the top moves. A privacy claim is a promise with an expiry date — whoever changes the behaviour owns the sentence.