Effective date: 6 September 2026
Rivillo, s.r.o. operates https://naratopia.com (“Naratopia” or the “Website”). This Privacy Policy explains what personal data we collect, why we use it, who may receive it, and the choices available to visitors. We process personal data in accordance with applicable data protection law, including the General Data Protection Regulation (“GDPR”).
1. Data Controller
Rivillo, s.r.o.
Bystrická 27, 841 07 Bratislava, Slovakia, European Union
Business ID (IČO): 55657231
Tax ID (DIČ): 2122065902
Email: support@sharetoai.com
Phone: +421 904 288 844
2. Families and Children’s Privacy
Naratopia publishes child-friendly stories and activities intended for families. The Website, its contact forms, newsletter, accounts and shop are operated for parents, caregivers and other adults. Children should use the Website with the involvement of a parent or caregiver and should not submit personal data, create an account, subscribe to the newsletter or make a purchase themselves.
We do not knowingly ask children to provide personal data. If you are a parent or guardian and believe that a child has submitted personal data to us, contact us at support@sharetoai.com. We will review the request and delete the data where required.
3. Personal Data We Collect
- Contact and support: name, email address, subject and message when an adult contacts us.
- Orders and accounts: name, email address, billing address, country, order history and account details supplied by an adult customer.
- Payments: payment status and transaction identifiers received from the payment provider. Complete card details are processed by the payment provider and are not stored by us.
- Newsletter: email address and subscription preferences when an adult chooses to subscribe.
- Technical and usage information: IP address, browser and device information, visited pages, referral source, approximate location derived from the IP address, cookie identifiers and consent choices.
4. Purposes and Legal Bases
- To process orders, payments and delivery of digital products — performance of a contract.
- To provide customer support and protect the Website from misuse — legitimate interests.
- To maintain accounting and other legally required records — legal obligation.
- To measure Website usage and improve our content — consent where required.
- To display and measure advertising — consent and the safeguards described below, where applicable.
- To send newsletters and marketing messages — consent. Every marketing email includes an unsubscribe option.
5. Cookies and Consent Choices
The Website uses necessary cookies for security, shopping functions and remembering privacy choices. With consent, it may also use analytics and advertising technologies. These technologies may include cookies, web beacons, pixels, IP addresses and similar identifiers.
On the first visit, the consent banner allows visitors to accept, reject or customize non-essential cookies. A choice can be changed later through the cookie settings control available on the Website. Browser settings can also be used to delete or block cookies, although this may affect some functions.
6. Google Analytics
With the visitor’s consent where required, we use Google Analytics to understand how adults and families find and use the Website. Google may process information such as cookie identifiers, IP address, device data and page activity. More information is available in Google’s Privacy Policy and on the page How Google uses information from sites or apps that use its services.
7. Google AdSense and Advertising Cookies
We use or may use Google AdSense on selected editorial pages to display advertising. Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this Website or other websites. Google’s use of advertising cookies enables Google and its partners to serve ads based on visits to Naratopia and/or other sites on the Internet.
Third-party advertising vendors and networks may place or read cookies in a visitor’s browser or use web beacons, IP addresses and similar technologies to collect information as a result of ad serving. Visitors can manage personalized advertising in Google Ads Settings and can find additional industry opt-out choices at aboutads.info.
Because Naratopia includes content directed to children and families, AdSense requests on monetized editorial pages are tagged for child-directed treatment. Interest-based advertising based on the past activity of users known to be children, or on activity on child-directed content, is not used. Advertising is not enabled on account, checkout, cart, contact, company-information, privacy, legal, author, search, error, paginated archive or thin-category pages.
8. Service Providers and Data Recipients
We share personal data only where necessary with service providers that support the Website, including hosting and technical-support providers, Google for analytics and advertising, Mailchimp for newsletters, WooCommerce and the payment provider shown during checkout (such as WooPayments or Stripe), and professional or public authorities where required by law. We do not sell personal data.
9. International Transfers
Some providers may process data outside the European Economic Area. Where required, we rely on an adequacy decision, Standard Contractual Clauses or another lawful transfer safeguard. Details about a provider’s processing and safeguards are available in that provider’s privacy documentation.
10. Retention and Security
- Order, invoice and accounting records: for the period required by applicable law.
- Customer account data: while the account is active and for a reasonable period afterwards where needed for legal claims or obligations.
- Support correspondence: until the request is resolved and normally no longer than two years afterwards.
- Newsletter data: until consent is withdrawn or the address is removed.
- Analytics and advertising data: according to the settings and retention periods of the relevant service and the visitor’s consent choice.
We use appropriate technical and organizational safeguards designed to protect personal data against unauthorized access, alteration, disclosure or loss.
11. Your Data Protection Rights
Depending on the circumstances, you may have the right to access, correct or erase your personal data; restrict or object to processing; receive portable data; and withdraw consent at any time without affecting processing performed before withdrawal. To exercise these rights, email support@sharetoai.com.
You may also lodge a complaint with the Office for Personal Data Protection of the Slovak Republic: https://dataprotection.gov.sk.
12. Changes and Contact
We may update this Privacy Policy when our services or legal obligations change. The current version and effective date will remain available on this page. Questions about this policy or our use of personal data can be sent to support@sharetoai.com.