Legal · GDPR
Privacy & cookie policy
Last updated: 2026
The One Storied cares about protecting your personal data. This page explains, transparently, what data we collect, why, who it is shared with, and how to exercise your rights.
1. Data controller
The data controller is The One Storied. For any question about your personal data, you can contact us at: contact@theonestoried.com.
2. Data collected
- Newsletter subscription: your email address. It is only recorded after a double opt-in confirmation (a confirmation email is sent to you; until you click the link, your address is not active).
- Audience measurement: we use Google Analytics 4, only after your consent. No audience-measurement data is collected until you have clicked “Accept” in the cookie banner.
- Technical connection data: like any website, connection logs (server logs, IP address, browser type) may be kept temporarily by the host to ensure the proper operation and security of the site.
3. Purposes & legal bases
- Newsletter — purpose: to send you an email with every new episode. Legal basis: your consent.
- Audience measurement — purpose: to understand how the site is used in order to improve it. Legal basis: your consent.
- Operation and security of the site — purpose: to serve the pages, prevent abuse. Legal basis: our legitimate interest.
4. Cookies
No audience-measurement cookie is set until you have clicked “Accept” in the consent banner. Without consent, only the cookies strictly necessary for the operation of the site are used.
You can decline from the start, or withdraw your consent at any time: your choice is stored locally in your browser, and resetting it (by clearing the site's data) lets you see the banner again and change your decision.
5. Processors & hosts
To operate, the site relies on technical providers that may process certain data on our behalf:
- Vercel — hosting of the site.
- Supabase — database and storage of audio files.
- Cloudflare — DNS and content delivery network (CDN).
- Resend — sending of newsletter emails.
- Google — Google Analytics 4 (audience measurement, after consent).
Since some of these providers may operate outside the European Union, transfers of data outside the EU may occur. They are then governed by the European Commission's standard contractual clauses, ensuring an adequate level of protection.
6. Retention period
- Newsletter emails: kept until you unsubscribe.
- Audience data: kept according to Google Analytics 4's retention settings.
7. Your rights
In accordance with the GDPR, you have a right of access, rectification, erasure, restriction, portability, as well as a right to object to the processing of your data.
To exercise these rights, write to us at contact@theonestoried.com. You also have the right to lodge a complaint with the CNIL (www.cnil.fr).
8. Unsubscribing from the newsletter
An unsubscribe link is included in every email we send you. You can also request it by email at contact@theonestoried.com: your address will then be removed from our list.