Privacy at TaleBloom
Effective 8 October 2026
TaleBloom is an independent interactive picture-book reader run by an individual developer. Children can read and listen to the free books without creating an account. Optional accounts are for parents and other adults.
What the app uses
Parents sign in with Google or with a one-time code sent to their email address. With Google sign-in, Google shares your basic profile: your email address, account identifier, name and profile picture. We keep your email address, name and profile picture link with your account and use them to create and authenticate it. We do not keep Google access tokens, and the app does not request access to Gmail, contacts, Drive or other Google content.
With email sign-in, we use your email address to send a six-digit code and to create or find your account; an address that already belongs to an account signs in to that same account. The code works for 10 minutes and we store only a hashed form of it. To prevent abuse, we count the codes sent each day using a keyed hash of the address instead of the address itself.
Signed-in parents can create up to three reader profiles using a nickname and a story-character avatar, with an optional birthday to show their age. We store each reader’s profile details, current book page, page stars, collected pins, remembered vocabulary, completed books, quiz completion and best scores in our account database under the parent’s account. Achievement pins and game points are based on these records. Please use a nickname instead of a child’s full name; we do not ask for a child’s email address or photo; the birthday field is optional.
Guests can read the free books without an account. Guest progress is not saved as an account history. If you choose to sign in while reading, we temporarily keep this visit’s reading in this browser tab for up to 30 minutes so we can add it to your account after sign-in. Display and audio preferences stay on your device.
Signing in sets secure session cookies that keep you signed in on this device for up to 60 days. With each session we record when it started and a short description of the browser and device; we do not store your IP address with it. Signing out ends this device’s session and stops showing the account’s reading on this device.
Services that make the app work
Cloudflare hosts the website and the app’s servers, stores account and reading data, and delivers book media through its global network. Tencent Cloud EdgeOne delivers the site and its media at cn.talebloom.page, the address for visitors in mainland China, and passes requests on to Cloudflare. Google handles Google sign-in. Brevo sends sign-in code emails; it processes the recipient address and delivery records for this and may record whether an email was opened. Cloudflare Turnstile checks that a sign-in code request comes from a person rather than an automated script, using signals from your browser and device. Dodo Payments handles membership payments, as described below. These services receive information needed to provide their service, such as network addresses, requests and security logs, and may process it outside your country.
The app has no advertising or user-upload feature. Google Analytics is described below. Reader profiles use optional nicknames. The app does not request a child’s email, voice recording or location. Please use an adult’s details when signing in or contacting us.
Payments and membership
If you buy a membership, Dodo Payments, our merchant of record, handles payment details on its hosted checkout and customer billing portal, and processes your name, email address, billing address and payment information under its own privacy policy. To open checkout, we send Dodo Payments your account email address and name. Dodo Payments then sends us payment notifications with the payment reference, your account identifier, the plan, amount, currency and payment status. We keep the payment reference, plan, membership status and membership dates in our account database to confirm and manage your membership. We do not store your full card number or security code. Transaction records may need to be retained after account closure for accounting, refunds, disputes or legal obligations.
WEBSITE ANALYTICS
Understanding visits to TaleBloom
TaleBloom uses Google Analytics to measure visits to public pages automatically. You do not need to sign in or enable analytics first.
Google receives the public page title and address, a randomly assigned browser identifier, basic device information, and approximate location derived from your network address. We do not send account names, email addresses, sign-in codes, payment details, or individual reading progress. Query strings and referrers are excluded. Google Analytics also records when a page is scrolled to the end, when a file such as a printable activity sheet is downloaded, and when a link to another website is followed, including the file or link address. Form interactions, site searches and in-page address changes are not recorded. Advertising personalization and Google signals are disabled.
We also record a few steps of signing in and buying a membership, such as opening the sign-in window, choosing a sign-in method, signing in successfully or not, viewing membership prices and starting checkout. These events carry only the step, the place in the app, the plan chosen or the kind of error; they never include an email address, account identifier or reading history.
Analytics cookies expire after one day. Google may process analytics data outside your country. Your browser’s cookie controls, tracking protection, or content blockers may limit collection. How Google uses data.
Your choices and account data
You can use the books without signing in and sign out at any time. Account information, reader profiles, reading progress and quiz records are retained while the account exists. To request access, correction or deletion of your account information, email support from the account’s email address. Service logs and backups may remain for the providers’ retention periods. You can also revoke Google access in your Google Account settings.
If you believe a child has submitted personal information, contact the same address so we can review and remove it. This page will be updated when the app’s data practices change.
This page is also available in French, Spanish, Japanese and Chinese for convenience. If a translation differs from this English version, the English version applies, unless the law where you live requires otherwise.