Privacy Policy

Last updated: October 24, 2026

This policy applies to the following websites, all operated by Story Foundry Limited: pulptale.com and pulpdrama.com.

This Privacy Policy explains how Story Foundry Limited ("we," "us," or "our") collects, uses, and discloses information when you use the websites listed above and any related applications or services (collectively, the "Service").

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly, including:

• Account information: your email address. We do not use passwords; we sign you in with a one-time link sent to that address.
• Support requests and any other communications you send to us, including via support@pulptale.com.

1.2 Payment Information

Payments are processed by third-party payment processors ("Payment Processors"). We do not collect or store your full card number, card expiration date, or card security code. The Payment Processors handle that information under their own privacy policies. We receive limited transaction data from them, such as a transaction identifier, amount, currency, and payment status, which we use to grant membership access and provide support.

1.3 Information Collected Automatically

When you use the Service, we and our service providers automatically collect:

• Device and usage data: IP address, browser type, operating system, pages and chapters viewed, referring URLs, and timestamps.
• Cookies and similar technologies, as described in Section 4.

1.4 Information from Third Parties

We may receive information from advertising and analytics partners (Section 4) about how you interact with our advertisements on other services.

2. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including delivering chapters and managing membership access.
• Process payments and prevent fraud.
• Communicate with you about your account, purchases, and support requests.
• Improve and develop the Service, including analyzing which stories are read.
• Measure and optimize advertising, including through the Meta Pixel and the Meta Conversions API.
• Comply with legal obligations and enforce our Terms of Service.

3. How We Share Information

We share information with:

• Payment Processors, to process transactions.
• Service providers who perform functions on our behalf, such as hosting and email delivery, under contractual confidentiality obligations.
• Advertising partners (Meta), via the pixel and server-side events described in Section 4.
• Legal and safety recipients, where required to comply with law, a valid legal process, or to protect the rights, property, or safety of Story Foundry Limited, our users, or the public.
• A successor entity, in connection with a merger, acquisition, or sale of assets, subject to this Policy or a policy that provides comparable protections.

We do not sell your personal information for money. To the extent applicable law (such as the CCPA) defines certain sharing for advertising as a "sale" or "share," see Section 7 for your choices.

4. Cookies and Tracking Technologies

We respect Global Privacy Control signals and do not share your data with advertising partners when this signal is on.

We and our partners use cookies, pixels, and similar technologies to:

• Keep you signed in and remember your reading position, text size, and theme and preferred story types (essential).
• Measure how the Service is used, so we know which stories readers finish (analytics).
• Measure and optimize advertising. Where advertising measurement is switched on, this includes the Meta Pixel in your browser and the Meta Conversions API from our servers. Both may use cookies and device identifiers to measure ad conversions and build audiences. The server-side events we send to Meta include a hashed (irreversible) form of your email address where you have an account, a hashed identifier for your browsing session, your IP address, and your browser user agent.

Where required by law, we ask for your consent before setting non-essential cookies, and you may withdraw consent at any time through the cookie banner or your browser settings. Disabling non-essential cookies does not limit your ability to read.

5. Data Retention

We retain personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Purchase and membership records are retained for at least 7 years to support refund and audit requirements.

6. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16 without verified parental consent, we will delete that information. If you believe a child has provided us personal information, contact support@pulptale.com.

7. Your Rights

7.1 GDPR (European Economic Area / UK)

If you are located in the EEA or UK, you have the right to:

• Access, correct, or delete your personal data.
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time (without affecting prior processing).
• Lodge a complaint with your local data protection authority.

Our legal bases for processing include performance of a contract (to deliver the membership you bought), legitimate interests (Service security and improvement), consent (advertising cookies), and legal obligation.

7.2 CCPA/CPRA (California)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose.
• Request deletion of personal information, subject to exceptions.
• Correct inaccurate personal information.
• Opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising.
• Non-discrimination for exercising your rights.

To exercise these rights, contact support@pulptale.com. We will verify your request using information associated with your account.

7.3 Other Jurisdictions

Residents of other jurisdictions with data protection laws may have similar rights. Contact support@pulptale.com to make a request, and we will respond in accordance with applicable law.

7.4 Deleting Your Account

You can delete your account yourself, without contacting us: sign in, open your account page, and choose "Delete my account". You will be asked to confirm once. When you confirm, we:

• Cancel any active membership immediately, so there are no further charges. Access ends at that moment.
• Remove your email address from your account (it is replaced with an anonymous placeholder), so it can no longer be used to sign in and is no longer associated with you.
• Delete your reading progress, email preferences, and any push notification subscriptions.
• Invalidate any sign-in links that were sent to you.
• Remove your IP address, browser user agent, and advertising cookie identifiers from the records of your visits, purchases, and any problem reports you sent, and delete the text you wrote in those reports. We also remove your email address from our email delivery error logs.
• Cancel any advertising measurement events about you that have not yet been sent to our advertising partners.

We keep purchase and membership records (order identifiers, plan, amounts, currency, dates, payment status, and payment-processor references) for the retention period described in Section 5, because we need them for refunds, accounting, and tax obligations. These records no longer contain your email address, IP address, or browser details.

We also keep usage records, such as which pages and chapters were opened and when, and the type and chapter of any problem report, with your email address and network identifiers removed. They stay linked to an internal account number, the same one used on the purchase records above, and to random session identifiers. We use them only to produce aggregate statistics about how the Service is used.

Deletion cannot be undone. If you sign up again later with the same email address, you start with a new, empty account.

8. International Data Transfers

We may transfer, store, and process information in countries other than your own, including Singapore. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for such transfers.

9. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date above. Material changes will be notified through the Service or by email where required by law.

11. Contact Us

Questions about this Privacy Policy can be sent to:

• Story Foundry Limited
• support@pulptale.com
• Unit 29, 10/F, Corporation Park, No. 11 On Lai Street, Sha Tin, New Territories, Hong Kong

For data protection inquiries specifically, contact privacy@pulptale.com.