Effective date: 17 September 2026
Rivillo, s.r.o. operates https://naratopia.com (“Naratopia” or the “Website”). This Privacy Policy explains what personal data we collect, why we use it, who may receive it, and the choices available to visitors. We process personal data in accordance with applicable data protection law, including the General Data Protection Regulation (“GDPR”).
1. Data Controller
Rivillo, s.r.o.
Bystrická 27, 841 07 Bratislava, Slovakia, European Union
Business ID (IČO): 55657231
Tax ID (DIČ): 2122065902
Email: support@sharetoai.com
Phone: +421 904 288 844
2. Families and Children’s Privacy
Naratopia is a website for parents and other adults, offering bedtime stories for kids, fairy tales and family activities. Children should use the Website with the involvement of a parent, caregiver or other responsible adult and should not submit personal data, create an account, subscribe or make a purchase themselves.
We do not knowingly ask children to provide personal data. If you are a parent or guardian and believe that a child has submitted personal data to us, contact us at support@sharetoai.com. We will review the request and delete the data where required.
3. Personal Data We Collect
- Contact and support: name, email address, subject and message when an adult contacts us.
- Orders and accounts: name, email address, billing address, country, order history and account details supplied by an adult customer.
- Payments: payment status and transaction identifiers received from the payment provider. Complete card details are processed by the payment provider and are not stored by us.
- Newsletter: email address and subscription preferences when an adult chooses to subscribe.
- Technical and usage information: IP address, browser and device information, visited pages, referral source, approximate location derived from the IP address, cookie identifiers and consent choices.
4. Purposes and Legal Bases
- To process orders, payments and delivery of digital products — performance of a contract.
- To provide customer support and protect the Website from misuse — legitimate interests.
- To maintain accounting and other legally required records — legal obligation.
- To measure Website usage and improve our content — consent where required.
- To display and measure advertising — consent and the safeguards described below, where applicable.
- To send newsletters and marketing messages — consent. Every marketing email includes an unsubscribe option.
5. Cookies and Consent Choices
The Website uses necessary cookies for security, shopping functions and remembering privacy choices. With consent, it may also use analytics and advertising technologies. These technologies may include cookies, web beacons, pixels, IP addresses and similar identifiers.
On the first visit, the consent banner allows visitors to accept, reject or customize non-essential cookies. A choice can be changed later through the cookie settings control available on the Website. Browser settings can also be used to delete or block cookies, although this may affect some functions.
6. Google Analytics
With the visitor’s consent where required, we use Google Analytics to understand how adults and families find and use the Website. Google may process information such as cookie identifiers, IP address, device data and page activity. More information is available in Google’s Privacy Policy and on the page How Google uses information from sites or apps that use its services.
7. Google AdSense and Advertising Technologies
We use or may use Google AdSense only on the English Naratopia homepage and selected substantial English-language articles, including stories and articles for parents. Advertising is not enabled on short or image-focused posts, automatically translated pages, including Spanish and Slovak mirrors, category or tag archives, account, checkout, cart, shop, product, contact, company-information, privacy, legal, author, search, error or other system pages.
Every AdSense request permitted on Naratopia uses Google’s age-treatment setting for child-directed content. This instructs Google to disable interest-based advertising and remarketing on that content. Ads may instead be selected using contextual information, such as the content of the current page, and Google may use limited data for purposes such as fraud prevention, frequency capping and aggregated advertising measurement.
AdSense is not loaded until the visitor explicitly accepts the Advertisement cookie category. Rejecting that category keeps AdSense disabled. Visitors can accept, reject or customize optional cookies through the consent banner and can change their choice later using the Cookie Settings button. If advertising consent is withdrawn while ads are loaded, the page reloads to stop the active advertising code. Refusing optional cookies does not prevent reading stories or using the shop. Google advertising cookies that may be used after consent, such as __gads and __gpi, are described in Cookie Settings. More information about Google’s processing is available in Google’s Privacy Policy and on How Google uses information from sites or apps that use its services.
8. Service Providers and Data Recipients
We share personal data only where necessary with service providers that support the Website, including hosting and technical-support providers, Google for analytics and advertising, Mailchimp for newsletters, WooCommerce and the payment provider shown during checkout (such as WooPayments or Stripe), and professional or public authorities where required by law. We do not sell personal data.
9. International Transfers
Some providers may process data outside the European Economic Area. Where required, we rely on an adequacy decision, Standard Contractual Clauses or another lawful transfer safeguard. Details about a provider’s processing and safeguards are available in that provider’s privacy documentation.
10. Retention and Security
- Order, invoice and accounting records: for the period required by applicable law.
- Customer account data: while the account is active and for a reasonable period afterwards where needed for legal claims or obligations.
- Support correspondence: until the request is resolved and normally no longer than two years afterwards.
- Newsletter data: until consent is withdrawn or the address is removed.
- Analytics and advertising data: according to the settings and retention periods of the relevant service and the visitor’s consent choice.
We use appropriate technical and organizational safeguards designed to protect personal data against unauthorized access, alteration, disclosure or loss.
11. Your Data Protection Rights
Depending on the circumstances, you may have the right to access, correct or erase your personal data; restrict or object to processing; receive portable data; and withdraw consent at any time without affecting processing performed before withdrawal. To exercise these rights, email support@sharetoai.com.
You may also lodge a complaint with the Office for Personal Data Protection of the Slovak Republic: https://dataprotection.gov.sk.
12. Changes and Contact
We may update this Privacy Policy when our services or legal obligations change. The current version and effective date will remain available on this page. Questions about this policy or our use of personal data can be sent to support@sharetoai.com.