Privacy Policy

1. Introduction

Welcome to Yawnosaur ("we", "our", or "us"), operated by IfHighLow.com. We are committed to protecting your privacy and ensuring the safety of your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our service.

By using Yawnosaur, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Your name
• Email address
• Password (stored securely using encryption)
• Language preference

2.2 Mailing List Preferences

We store your mailing list subscription preference:

• Your preference is set to "subscribed" by default when you create an account
• You can change this at any time from your dashboard settings
• This preference only affects marketing emails, not transactional emails

2.3 Parental Controls

We offer a Dashboard PIN feature for parental control. This PIN is:

• Stored securely using encryption
• Used only to restrict access to account settings
• Never shared with third parties

2.4 Payment Information

For subscription payments, we use Stripe as our payment processor. We store:

• Your Stripe customer ID (a reference number, not payment details)
• Last 4 digits of your payment method (for your reference only)
• Subscription status and billing dates

We do not store your full credit card number, CVV, or banking details. All payment processing is handled securely by Stripe. Please refer to Stripe's Privacy Policy for more information.

2.5 Usage Information

To provide you with reading statistics and recommendations, we track:

• Which stories you read
• Your reading progress (pages viewed)
• Story completion status
• Timestamps of your reading sessions
• Your favorite stories selections
• Your playback preferences (such as favorites-only autoplay mode)

2.6 Technical Information

When you use our service, we automatically collect:

• IP address
• Browser type and version
• Device information
• Session data for authentication

3. How We Use Your Information

We use your information solely to:

• Provide and maintain our service
• Process your subscription payments
• Send transactional emails (subscription confirmations, payment receipts, renewal reminders)
• Display your reading statistics and progress
• Improve our service and user experience
• Ensure account security and prevent fraud
• Respond to your enquiries and support requests

4. Analytics and Advertising

4.1 Google Analytics

We use Google Analytics to understand how visitors use our website. Google Analytics collects:

• Pages visited and time spent on pages
• Approximate geographic location (country/city level)
• Device and browser information
• Referral sources (how you found us)

This data is aggregated and anonymised. It helps us understand how to improve our service. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

4.2 Google AdSense

We display advertisements through Google AdSense to users who do not have an active subscription. These ads help support the continued development and maintenance of our service.

Who sees ads:

• Visitors who are not logged in
• Users without an active subscription

Who does NOT see ads:

• Users with an active subscription
• Users on a free trial

Google AdSense may use cookies to serve ads based on your prior visits to our website or other websites. You can opt out of personalised advertising by visiting Google's Ads Settings.

5. Information Sharing

We do not sell, trade, or rent your personal information to third parties.

We only share your information with:

• Stripe - Our payment processor, to handle subscription billing securely
• Email Service Provider - To send transactional emails (subscription confirmations, password resets)
• Google Analytics - For anonymised website usage analytics
• Google AdSense - To display advertisements to non-subscribed users (see Section 4.2)

These services are essential for operating Yawnosaur and are bound by their own privacy policies and data protection obligations.

We may also disclose information if required by law or to protect our rights and the safety of our users.

6. Cookies and Sessions

We use cookies and similar technologies for:

• Essential Cookies - To keep you logged in and maintain your session
• Security Cookies - To protect against cross-site request forgery
• Preference Cookies - To remember your language preference
• Analytics Cookies - Used by Google Analytics (can be disabled)
• Advertising Cookies - Used by Google AdSense to display relevant ads to non-subscribed users (can be disabled via Google's Ads Settings)

Our session cookies expire after 2 hours of inactivity. You can configure your browser to refuse cookies, though this may affect your ability to use our service.

7. Data Security

We implement appropriate security measures to protect your information:

• Passwords and PINs are encrypted using industry-standard hashing
• All data transmission uses HTTPS encryption
• Payment data is handled by PCI-compliant Stripe
• Two-factor authentication is available for additional account security
• Regular security reviews and updates

8. Children's Privacy

Yawnosaur is a family service designed for parents to enjoy with their children. We do not:

• Knowingly collect personal information from children under 13
• Require children to provide any personal data
• Allow children to create their own accounts

Accounts are created and managed by parents or guardians. The Dashboard PIN feature allows parents to control access to account settings.

If you believe we have inadvertently collected information from a child under 13, please contact us immediately.

9. Your Rights

You have the right to:

• Access - Request a copy of your personal data
• Correction - Update or correct your account information
• Deletion - Request deletion of your account and personal data
• Portability - Receive your data in a portable format
• Objection - Object to certain processing of your data

To exercise these rights, please contact us using the details below. We will respond within 30 days.

10. Data Retention

We retain your data for as long as your account is active or as needed to provide our services. Specifically:

• Account information is kept until you delete your account
• Reading history is retained to provide your statistics
• Payment records are kept as required for tax and legal purposes
• Session data expires after 2 hours of inactivity

Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Our service providers (such as Stripe) may process data in various locations. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending an email notification for material changes

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: