Nebula Story Privacy Policy

Last Updated: September 24, 2026

1. Scope

By accessing or using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Services.

2. Information We Collect

We may collect the following categories of information:

Information you provide directly

Information collected automatically

Information from third parties

We do not knowingly collect sensitive personal data (such as health, biometric, or precise geolocation data) unless you explicitly provide it and we have a lawful basis to process it.

3. How We Use Your Information

We use the information we collect for the following purposes:

We process personal data only when we have a lawful basis under applicable law (e.g., consent, performance of a contract, legitimate interests, or legal obligation).

4. Sharing of Information

We may share your information with:

We do not sell your personal information.

5. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. Where required by applicable law (including the GDPR), we implement appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms to protect your data.

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When no longer needed, we securely delete or anonymize the data.

7. Your Rights and Choices

Depending on your location and applicable law, you may have the following rights:

To exercise these rights, contact us using the details in the “Contact Us” section below. We will respond in accordance with applicable law.

California residents (CCPA/CPRA): You have additional rights regarding the collection, use, and disclosure of personal information. We do not sell or share personal information for cross-context behavioral advertising. You may exercise your rights by contacting us.

European Economic Area, United Kingdom, and Switzerland: We process personal data in accordance with the GDPR / UK GDPR. Our legal bases include consent, contract performance, legitimate interests, and legal obligations.

8. Cookies and Similar Technologies

We use cookies and similar technologies to operate the Services, remember preferences, and analyze usage. You can manage cookie preferences through your browser settings or our cookie consent tool (where available). Disabling certain cookies may affect functionality.

9. Children’s Privacy

The Services are not directed to children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we learn that we have collected such information, we will delete it promptly. Parents or guardians who believe their child has provided personal information may contact us.

10. Data Security

We implement reasonable technical and organizational measures to protect personal information against unauthorized access, loss, or alteration. However, no method of transmission or storage is completely secure. You use the Services at your own risk.

11. Third-Party Links and Services

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last Updated” date. Material changes will be notified through the Services or by other means as required by law. Continued use of the Services after changes constitutes acceptance of the updated Policy.

13. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]