Privacy Policy

1. Introduction

Welcome to Yawnosaur ("we", "our", or "us"), operated by IfHighLow.com. We are committed to protecting your privacy and ensuring the safety of your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our service.

By using Yawnosaur, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Your name
• Email address
• Password (stored securely using encryption)
• Language preference

2.2 Mailing List Preferences

We store your mailing list subscription preference:

• Your preference is set to "subscribed" by default when you create an account
• You can change this at any time from your dashboard settings
• This preference only affects marketing emails, not transactional emails

2.3 Parental Controls

We offer a Dashboard PIN feature for parental control. This PIN is:

• Stored securely using encryption
• Used only to restrict access to account settings
• Never shared with third parties

2.4 Payment Information

For subscription payments, we use Stripe as our payment processor. We store:

• Your Stripe customer ID (a reference number, not payment details)
• Last 4 digits of your payment method (for your reference only)
• Subscription status and billing dates

We do not store your full credit card number, CVV, or banking details. All payment processing is handled securely by Stripe. Please refer to Stripe's Privacy Policy for more information.

2.5 Usage Information

To provide you with reading statistics and recommendations, we track:

• Which stories you read
• Your reading progress (pages viewed)
• Story completion status
• Timestamps of your reading sessions
• Your favorite stories selections
• Your playback preferences (such as favorites-only autoplay mode)

2.6 Technical Information

When you use our service, we automatically collect:

• IP address
• Browser type and version
• Device information
• Session data for authentication

3. How We Use Your Information

We use your information solely to:

• Provide and maintain our service
• Process your subscription payments
• Send transactional emails (subscription confirmations, payment receipts, renewal reminders)
• Display your reading statistics and progress
• Improve our service and user experience
• Ensure account security and prevent fraud
• Respond to your enquiries and support requests

4. Analytics and Advertising

4.1 Google Analytics

We use Google Analytics to understand how visitors use our website. Google Analytics collects:

• Pages visited and time spent on pages
• Approximate geographic location (country/city level)
• Device and browser information
• Referral sources (how you found us)

This data is aggregated and anonymised. It helps us understand how to improve our service. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

4.2 Advertising

We display advertisements through our own self-hosted advertising network to users who do not have an active subscription. These ads help support the continued development and maintenance of our service.

Who sees ads:

• Visitors who are not logged in
• Users without an active subscription

Who does NOT see ads:

• Users with an active subscription
• Users on a free trial

Our ad server records an impression and click count for each ad shown. IP addresses are hashed before storage and are not retained in raw form. We do not use third-party advertising cookies and do not profile users across other websites.

5. Information Sharing

We do not sell, trade, or rent your personal information to third parties.

We only share your information with:

• Stripe - Our payment processor, to handle subscription billing securely
• Email Service Provider - To send transactional emails (subscription confirmations, password resets)
• Google Analytics - For anonymised website usage analytics
• Our ad server - A self-hosted advertising network operated by us to display ads to non-subscribed users (see Section 4.2)

These services are essential for operating Yawnosaur and are bound by their own privacy policies and data protection obligations.

We may also disclose information if required by law or to protect our rights and the safety of our users.

6. Cookies and Sessions

We use cookies and similar technologies for:

• Essential Cookies - To keep you logged in and maintain your session
• Security Cookies - To protect against cross-site request forgery
• Preference Cookies - To remember your language preference
• Analytics Cookies - Used by Google Analytics (can be disabled)
• Advertising-related identifiers - Our ad server records impressions and click events to prevent duplicate counting. We do not set advertising cookies in your browser.

Our session cookies expire after 2 hours of inactivity. You can configure your browser to refuse cookies, though this may affect your ability to use our service.

7. Data Security

We implement appropriate security measures to protect your information:

• Passwords and PINs are encrypted using industry-standard hashing
• All data transmission uses HTTPS encryption
• Payment data is handled by PCI-compliant Stripe
• Two-factor authentication is available for additional account security
• Regular security reviews and updates

8. Children's Privacy

Yawnosaur is a family service designed for parents to enjoy with their children. We do not:

• Knowingly collect personal information from children under 13
• Require children to provide any personal data
• Allow children to create their own accounts

Accounts are created and managed by parents or guardians. The Dashboard PIN feature allows parents to control access to account settings.

If you believe we have inadvertently collected information from a child under 13, please contact us immediately.

9. Your Rights

You have the right to:

• Access - Request a copy of your personal data
• Correction - Update or correct your account information
• Deletion - Request deletion of your account and personal data
• Portability - Receive your data in a portable format
• Objection - Object to certain processing of your data

To exercise these rights, please contact us using the details below. We will respond within 30 days.

10. Data Retention

We retain your data for as long as your account is active or as needed to provide our services. Specifically:

• Account information is kept until you delete your account
• Reading history is retained to provide your statistics
• Payment records are kept as required for tax and legal purposes
• Session data expires after 2 hours of inactivity

Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Our service providers (such as Stripe) may process data in various locations. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending an email notification for material changes

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: