Privacy policy

Last updated 7 September 2026

01Who holds the data

Leo Sterling, operator of GiggleDeck, at leo@leosterling.net. That address reaches a person, not a ticket queue.

02What is stored

Everything GiggleDeck holds about you sits in one small database on the server that runs the app. It is a short list, and this is all of it:

• Your email address — it is your login.
• Your name, if you chose to enter one. It can be left blank.
• Your password, as a one-way hash. The password itself is never written down anywhere. Nobody, including us, can read it back out — a lost password is reset, never looked up.
• Which upgrades you own, and when each one was unlocked.
• The book plans you save: the keyword you typed, the page count and the settings you picked. This is the plan for a book, not the book.
• When you last logged in, and the date the account was created.
• Agency Pack only: the brand name, colour and logo you upload to put your own name on the app, and the client name you file a project under.
• Login attempts by IP address, briefly, so that nobody can sit there guessing passwords at your account. Nothing else is logged against an IP, and these rows are cleared as they age out.
• An admin note field, used only to record something like an order number when you have written in about a purchase.

03What is never stored

• Your artwork. The pictures are generated in your ChatGPT account and you save them to your own machine. When the app builds your interior and cover PDFs it does so inside your browser, on your computer. The images are never uploaded here and we could not look at them if we wanted to.
• Card or bank details. Payment is handled entirely by the marketplace you bought through. No card number, no bank detail and no billing address ever touches this app.
• Tracking of any kind. No analytics package, no advertising pixel, no session recorder, no third-party script watching what you click. There is nothing here to track you with.

04Why each piece is kept

Your email and password hash exist so you can log in. The record of what you own exists so the app knows which parts to open. Your saved plans exist so you can close the tab and come back to a half-finished book. The login-attempt log exists to stop password guessing. There is no other purpose, and nothing is kept "in case it is useful later".

Nothing is sold, rented, shared or handed to a marketing list — not your email, not your keywords, not anything. Your data would only ever be disclosed if the law actually required it.

05Cookies

One cookie, and it is the session cookie that keeps you logged in as you move between pages. It carries no personal information, expires when your session does, and there is nothing to consent to because there is nothing else on the page. No advertising cookies, no cross-site cookies, no third-party cookies.

06Other companies involved

• The marketplace you bought through takes the payment and sends us your email address so the account can be opened. Their own privacy policy governs what they hold.
• Google Fonts. The app's typeface is served from Google's font servers, which means your browser requests a file from fonts.googleapis.com and Google sees your IP address in that request, as it would for any site using their fonts. It is the only outside request any page here makes.
• The web host that runs the server keeps standard access logs, as every web host does.

That is the complete list. There is no fourth party.

07What you paste into ChatGPT

This is worth being clear about, because it is the one place your material leaves your control and it is not us that receives it. GiggleDeck writes prompts; you paste them into your own ChatGPT account. From that moment, what happens to that text and to the pictures it produces is governed by OpenAI's privacy policy and terms, not by this one. We never see any of it, and we have no connection to OpenAI. If you care how ChatGPT uses your conversations, that is a setting in your ChatGPT account and worth checking.

08Where it lives and how long

The database is a single SQLite file on the server that hosts the app, kept outside the publicly reachable part of the site. Access is over HTTPS. Your data stays for as long as you have an account, because the account is what it is for.

Ask us to delete it and it is deleted — the account, the plans, the lot, permanently, normally within a few days. What we cannot delete is the payment record held by the marketplace, since that is theirs and they must keep it.

09Your rights

You can ask for any of the following at leo@leosterling.net, at any time, without giving a reason:

• A copy of everything held about you.
• A correction to anything that is wrong.
• Deletion of your account and everything in it.
• An explanation of anything on this page that is not clear.

These are rights you have under laws such as the UK GDPR and the EU GDPR, and they are honoured here regardless of where you live. Requests are answered within 30 days, usually much sooner. If you are in the UK or the EU and think a request has been handled badly, you may complain to your national data protection authority — but please write to us first.

10Children

GiggleDeck makes books for children; it is not sold to them. It is a publishing tool for adults and accounts are not knowingly opened for anyone under 18.

11Changes

If this policy changes, the date at the top changes with it. If a change ever meant collecting something genuinely new, you would be told by email rather than left to notice a date.

12Contact

Leo Sterling
leo@leosterling.net