Privacy
What data we collect, why, for how long, and how to exercise your rights.
TO BE VALIDATED — draft under legal review.
Last updated: 26 September 2026
Data controller
STORIESPROD SASU, represented by Guillaume Dubois — 60 rue François 1er, 75008 Paris, France. Contact: contact@storiesprod.fr.
Data collected
Booking: first and last name, email, Instagram, phone, race, day, start slot, estimated time, category, how you found us, referrer, music or mood, notes, selected add-ons.
Waitlist: first name, email, Instagram, race, intended pack.
Payment: handled by Stripe. STORIES never sees or stores your card number.
Purposes and legal bases
Fulfilling your booking and filming you (contract). Telling you when a waitlisted race opens (consent). Invoicing and accounting (legal obligation). Publishing images of your race in the STORIES portfolio and social media (consent given at booking, withdrawable at any time).
Retention
Bookings: 5 years after the race. Invoices: 10 years. Waitlist: until the race opens or 12 months without opening. Raw footage: 6 months after delivery, then deleted.
Processors
Vercel (hosting), Supabase (database), Stripe (payment), Resend (email). Some are located outside the EU: transfers rely on the European Commission's standard contractual clauses or the Data Privacy Framework. [To check: Supabase hosting region.]
Cookies
By default, only essential cookies are set (language, payment security). Analytics and the Meta Pixel are only enabled after you agree in the cookie banner, which you can change at any time.
Your rights
Access, rectification, erasure, restriction, objection, portability, withdrawal of consent: email contact@storiesprod.fr, reply within one month. You can also contact the French data protection authority (cnil.fr).