Terms & Privacy
Terms of Service and Privacy Notice for Fablemancer.
Terms of Service
Last updated: 2026-08-22
1. Acceptance of Terms
These Terms govern your access to and use of Fablemancer, a web-based immersive reading service provided by Moonridge AB ("Fablemancer", "we", "us", or "our"). By creating an account or using the service, you agree to these Terms.
If you use Fablemancer with a child, you confirm that you are the child's parent or legal guardian, or that you have permission from the parent or legal guardian to supervise that use. Accounts are intended for adults, not for children to create independently.
2. Service Status
Fablemancer is in an early launch stage. Features, content, pricing, availability, and technical behavior may change as we develop the service.
We aim to provide a stable and careful service, but we do not guarantee that it will always be uninterrupted, error-free, or available on every device or network.
3. Accounts and Security
You may sign in with an email and password or, if you choose, with Google. You are responsible for keeping your sign-in method secure and for activity that happens through your account. You should use an email address or Google Account that you control and tell us promptly if you suspect unauthorized access.
We may restrict or suspend access if we reasonably believe an account is being misused, creates security risk, violates these Terms, or is required to comply with law.
4. Parent and Guardian Use
Fablemancer is built for family reading experiences, but the account holder remains responsible for supervising any child who uses the service.
Do not submit child names, ages, school information, or other child personal data unless we have introduced a specific feature that asks for it and explains how it will be handled.
5. Content and Intellectual Property
The service, software, artwork, audio, text, designs, and other content are owned by us or our licensors and are protected by intellectual-property laws.
We grant you a limited, personal, non-exclusive, non-transferable right to use Fablemancer for its intended reading experience. You may not copy, redistribute, sell, publicly perform, reverse engineer, or create derivative services from the service or content except where we expressly permit it. A media file being technically reachable through a public delivery URL does not grant any additional permission to use or redistribute it.
6. Acceptable Use
You agree not to:
- Use the service unlawfully or in a way that infringes another person's rights.
- Attempt to bypass access controls, security controls, or role restrictions.
- Interfere with the service, scrape it at scale, or overload its infrastructure.
- Upload or submit content unless a feature explicitly allows it.
7. Payments and Paid Features
Payment processing is not part of the current launch implementation. If we introduce paid books, subscriptions, or other paid features, we will use a payment provider, hosted checkout/customer portal, or equivalent provider-managed flow where practical so that payment-card details are handled by the provider rather than by Fablemancer.
Before paid features launch, we will publish the applicable price, renewal, cancellation, refund, tax, receipt, and consumer-rights information. Additional terms may apply to paid features.
8. Disclaimers and Liability
Fablemancer is provided on an "as is" and "as available" basis during its early launch. To the extent permitted by law, we disclaim implied warranties of availability, fitness for a particular purpose, and non-infringement.
Nothing in these Terms limits rights that cannot be limited under mandatory consumer law. To the extent permitted by law, our liability is limited to direct losses that were reasonably foreseeable and caused by our breach of these Terms.
9. Changes to the Service or Terms
We may update the service and these Terms as Fablemancer develops. Material changes will be reflected by updating this page and, where appropriate, giving additional notice.
If you continue using the service after updated Terms take effect, the updated Terms apply to your continued use.
10. Governing Law and Contact
These Terms are governed by Swedish law, except where mandatory consumer-protection rules give you additional rights in your country of residence. Disputes should first be raised with us so we can try to resolve them informally.
Email: mans.fristedt@gmail.com
Privacy Notice
Last updated: 2026-08-22
1. Who We Are
Moonridge AB is the controller for personal data processed through Fablemancer. Fablemancer is an immersive reading service for parent- or guardian-led family reading.
This Privacy Notice explains what we process at launch, why we process it, the legal bases we rely on, how long we keep it, and the rights you have under the GDPR.
2. Launch Data We Process
We currently keep data collection narrow:
2.1 Account and authentication
We process your email address, password/authentication credentials handled by Supabase, session tokens, sign-in state, and password reset information so you can create and access your account. If you choose Google sign-in, Google and Supabase provide us with a Google account identifier, your email address and verification status, and basic profile information such as your name and profile picture where available. Fablemancer does not receive your Google password, request access to Gmail, Contacts, Drive, or other Google services, or intentionally retain Google provider access or refresh tokens for API use. Legal basis: performance of a contract.
2.2 Profile and preferences
We process your user ID, role, and reader/audio settings such as preferred audio level, volume defaults, and marker-control mode. Legal basis: performance of a contract and our legitimate interest in providing a reliable, role-aware service.
2.3 Technical, security, and support data
We process technical logs, request metadata, device/browser information, errors, and support messages where needed to operate, secure, debug, and support the service. Legal basis: legitimate interests and, where applicable, legal obligation.
2.4 Analytics and performance
We use privacy-preserving product analytics and performance measurements to understand route-level use, reliability, and performance. URLs are sanitized in the app before analytics events are sent, and we do not intentionally send email addresses, user IDs, child data, free text, or raw reading content as analytics payloads. Legal basis: legitimate interests in improving and securing the service.
2.5 Transactional email
Supabase uses Resend as our email-delivery provider for account confirmation, password reset, and other necessary service messages. Resend processes the recipient email address, message content and headers, delivery events, and technical logs needed to send, troubleshoot, and secure those messages. Legal basis: performance of a contract and our legitimate interests in reliable and secure delivery.
2.6 Payments
Payment processing is not implemented at launch. If paid features are introduced, a payment provider will handle payment details where practical. Fablemancer should only store payment-provider references and status needed for access, accounting, support, fraud prevention, and legal compliance. Legal basis will normally be performance of a contract and legal obligation.
3. Children and Family Use
Accounts are intended for parents or legal guardians. Children may use the reading experience with adult supervision, but we do not ask children to create accounts and we do not intentionally collect child names, ages, school information, or child profiles at launch.
If you believe a child has provided personal data directly to us without appropriate adult involvement, contact us so we can review and delete it where required.
4. Cookies, Local Storage, and Similar Technologies
We use cookies, localStorage, and similar browser storage for necessary service functions: authentication/session handling, language preference, theme preference, safe sign-in redirects, logout consistency, and privacy-preserving analytics/performance measurement.
If you choose Google sign-in, you leave Fablemancer for Google's authentication page. Google may use its own cookies or similar technologies there under Google's privacy terms; Fablemancer does not place Google advertising or analytics scripts on its own pages for this sign-in flow.
We do not currently use marketing cookies, remarketing pixels, or advertising trackers. If we introduce non-essential tracking or persistent analytics identifiers, we will review whether consent and a preferences control are required before enabling them.
5. Processors and Sharing
We do not sell personal data. We share personal data only where needed to provide, secure, support, or comply with legal obligations for the service.
Current providers include Supabase for authentication and the database; Vercel for web hosting, analytics, performance measurement, and public Blob media storage; Resend for transactional email; and Google as an optional independent sign-in provider chosen by the user. A payment provider may be added later for paid features. We aim to use providers under appropriate data-processing, confidentiality, security, and transfer terms.
Story images and audio are stored in a public Blob store for efficient delivery. Anyone who obtains an exact direct Blob URL can technically access that file. At launch these files contain Fablemancer story media, not account/profile data or ordinary user uploads.
6. International Transfers
Fablemancer's primary Supabase authentication and database project is located in Stockholm, Sweden. This improves proximity and keeps primary account/database storage in the EU, but it does not mean every provider operation stays in Sweden.
Resend's primary processing and account-data storage, including email metadata and delivery logs, takes place in the United States. Google, Vercel, and provider subprocessors may also process data outside Sweden or the EEA. Where a restricted transfer occurs, we rely on applicable safeguards such as EU adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.
7. Retention
We keep personal data only for as long as needed for the purposes described in this notice. Account, Google sign-in linkage, profile, and settings data are kept while your account is active. Transactional email delivery records, support data, and security records are kept according to the active provider settings and only as long as needed for delivery, support, security, legal claims, fraud prevention, or legal obligations.
If payment features are introduced, some billing records may need to be kept for tax, accounting, consumer-rights, and legal-compliance periods even after account closure.
8. Your GDPR Rights
Subject to the GDPR's conditions and limits, you may have the right to:
- Access personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete data or ask us to restrict processing.
- Object to processing based on legitimate interests.
- Receive data portability where applicable.
- Withdraw consent where processing is based on consent.
To exercise these rights, contact us at the address below. You also have the right to lodge a complaint with Integritetsskyddsmyndigheten (IMY), the Swedish Authority for Privacy Protection.
9. Security
We use technical and organizational measures intended to protect personal data, including account authentication, server-side access controls, row-level database policies, role checks for creator/admin features, minimized analytics payloads, and a separate server-only token for the active media store. Public story-media URLs are not treated as an access-control mechanism. No service can be guaranteed perfectly secure, but we design for data minimization and controlled access.
10. Changes and Contact
We will update this notice when our data practices materially change, including before introducing payment processing, child profiles, ordinary user-generated content, marketing tracking, or broader analytics.
For privacy questions or rights requests, contact us via:
Email: mans.fristedt@gmail.com