STOORY Cookie Policy

1. What cookies are

Cookies are small files or strings of information that may be stored on the user's device while browsing a website. They may be used, for example, to:

• enable the website to function;
• maintain an authenticated session;
• ensure security;
• remember preferences;
• manage consent;
• produce statistics;
• measure use of the website;
• personalise content or communications, where permitted.

Technologies other than cookies may perform similar functions and are subject, where applicable, to the same rules.

2. Technical and strictly necessary cookies

STOORY may use cookies and technical tools necessary to:

• enable browsing;
• manage authentication;
• maintain the session;
• protect accounts;
• manage the library;
• keep strictly necessary preferences;
• ensure security;
• prevent fraud and abuse;
• enable purchase procedures;
• remember cookie preferences.

These tools are necessary to provide the service requested by the user and do not require consent when the conditions laid down by law are met.

3. Analytics cookies

STOORY may use analytics tools to understand, in aggregate form, how the platform is used.

Where analytics cannot be treated as equivalent to technical cookies under applicable law, they are activated only with the user's prior consent.

Where possible, STOORY adopts data minimisation measures and configurations aimed at reducing the identifying capability of analytics tools.

3-bis. Internal aggregate measurement

To understand how many visitors move from one step of the journey to the next (page opening, start of the free trial, choice of genre, first text of the idea, start of sign-in, registration, preview obtained, viewing of plans, start of payment, purchase), STOORY counts events in exclusively aggregate form.

These aggregate counts do not use cookies, browser storage, device fingerprints, advertising click identifiers, email addresses, user identifiers, stored IP addresses or stored user-agents. The free-trial journey, however, is also measured per individual anonymous journey, as described in section 3-ter.

For each step, only the following are recorded: the name of the step, the page, non-identifying campaign parameters (source, medium, campaign, content) and the date with the rounded time.

The data are not sent to Meta, TikTok, OpenAI Ads or other advertising networks, are used only for internal statistics on a daily and per-campaign basis, and are kept for a short, configurable period.

The purposes of this measurement are statistical and service improvement; this description is for information purposes and does not constitute a statement of absolute compliance.

3-ter. Measurement of the free-trial journey

To understand whether the free-trial journey works and at which step people stop (home, start of the trial, choice of service, genre and style, idea, preview request, sign-in or registration, generation and viewing of previews, choice of preview, plans, payment, purchase), STOORY assigns each journey a random anonymous code.

The code does not contain and is not derived from email, name, IP address or device characteristics: STOORY does not use device fingerprinting. Together with the code, only the following are recorded: the name of the step, the page without parameters, the service, date and time, the domain of the referring website and non-identifying campaign parameters (source, medium, campaign, content).

Without your consent to optional cookies, the code remains only in the memory of the open tab: it is not saved in the browser and a full page reload creates a new code. If you request a preview from the home page, the code is saved on the server together with the draft of your idea, so that the journey remains linked even after signing in with Google or through the confirmation link.

If you accept optional cookies (“Accept all”), the code is kept in the browser's local storage (localStorage, first-party) for 30 days, so that a reload does not create a new journey. If you withdraw your choice, the code is no longer read or renewed.

After registration or sign-in, the journey may be linked server-side to your account in order to measure the functioning and conversion of the journey. The link is made through verified sign-in, never through the page address.

These data are not sent to Meta, TikTok, OpenAI Ads or other advertising networks, are consulted only in summary form in the STOORY reserved area and are automatically deleted after 24 months. You may object or request their deletion by writing to info@winnowcommunication.com, as indicated in the Privacy Policy.

4. Profiling and marketing cookies

Any cookies or tools used for:

• personalised advertising;
• remarketing;
• profiling;
• analysis of user behaviour for commercial purposes;
• cross-site tracking;

are installed or activated only after the user's consent has been obtained, where required.

Refusing these cookies does not prevent use of the essential features of STOORY.

5. Third-party cookies and services

Some features may involve external providers.

Payments: the payment process may be handled through Stripe. During checkout, Stripe may use its own technical and anti-fraud tools in accordance with its own documentation and Privacy Policy.

Social services and external content: if STOORY integrates buttons, players, content or features from external platforms, those services may use cookies or other technologies according to their own rules.

Tools that are not strictly necessary are managed, where required, on the basis of consent.

6. Categories used

STOORY organises tracking tools into the following categories:

• Necessary — security, authentication, session and essential features; basis: service requested; always active.
• Preferences — storage of settings and consent; basis: service requested or consent where necessary; activation according to function.
• Analytics — statistics and measurement of use; basis: consent, except in cases equivalent to technical cookies; activated after consent where required.
• Marketing — advertising, remarketing and profiling; basis: consent; activated only after consent.
• Third-party services — external features requested by the user; basis: according to the service; activation according to necessity or consent.

7. Up-to-date list of cookies

Since the names, duration and providers of cookies may change following technical updates to the platform, the up-to-date list of cookies actually present is shown in the STOORY “Cookie preferences” panel, which can be opened from the “Preferences” button in the banner or from the “Review cookie choices” link in the footer.

For each tool, at least the following are indicated:

• name;
• provider;
• purpose;
• category;
• duration;
• first or third party.

The management panel reflects the tools actually used by the website.

8. Consent

On the first visit, when STOORY uses tools that require consent, a banner is shown that allows the user to accept all cookies, refuse non-necessary cookies or manage preferences.

The three choices in the banner — “Necessary only”, “Accept all” and “Preferences” — are given equal prominence; closing with the “X” or the Esc key is equivalent to “Necessary only” and does not activate any marketing tool.

The choice expressed is remembered for 180 days, unless it is withdrawn, the purposes or third parties change substantially, or the browser's local storage is lost: in these cases the banner is shown again.

You can withdraw or change your choice at any time via the “Review cookie choices” link in the website footer.

Failure to give consent does not prevent access to features that do not require the refused cookies.

The following are not considered valid consent:

• simply continuing to browse;
• scrolling;
• pre-ticked boxes;
• user inactivity.

9. Changing or withdrawing consent

The user may change their preferences at any time through a permanent “Review cookie choices” link, located in the website footer or in another easily accessible position.

Withdrawing consent is as easy as giving it.

10. Cookies already present on the device

Withdrawing consent prevents future use of unauthorised tools, but some cookies already stored may need to be deleted through the browser or through the tools made available by the relevant provider.

11. Browser management

The user can configure their browser to:

• block all cookies;
• block third-party cookies;
• delete existing cookies;
• receive notifications before installation.

Disabling technical cookies may impair the proper functioning of some features of the platform.

12. Authenticated users and multiple devices

STOORY may use technical identifiers to ensure:

• account security;
• session management;
• device limits;
• protection of the digital library.

Any cross-device use of browsing data for profiling purposes will take place only when permitted by law and with prior consent, where necessary.

13. Retention

The duration of cookies depends on their function. They may be:

• session cookies, deleted at the end of the session;
• persistent cookies, kept for a set period.

The actual duration of each cookie is indicated in the “Cookie preferences” panel.

14. Updates

This Cookie Policy may be updated following:

• regulatory changes;
• new features;
• changes of providers;
• introduction or removal of tracking tools.

The date of update is indicated at the beginning of the document.

15. Data controller

Winnow Communication — P. IVA 05004790266 — e-mail: info@winnowcommunication.com

For further information on the processing of personal data, please refer to the STOORY Privacy Policy.