Privacy Policy

FableAuri is operated by Mardis Studio LLC, doing business as FableAuri, in Texas, United States. Questions about this policy: hello@fableauri.com.

Marketing site. If you use the contact form, we collect your name, email address, and message so we can reply. If bot protection is enabled, Cloudflare Turnstile processes a verification token.

Accounts. When you create or join a library we collect your email address, display name, library name, password (stored as a hash), and role (for example owner, admin, or listener). Account holders may also create household listening profiles (for example for children). Those profiles store a display name only — no separate email or password.

Billing. Paid subscriptions are processed by Stripe. Stripe collects payment card and billing details. We receive subscription status, plan, and related identifiers. We do not store full card numbers.

Library content. Files and metadata you upload (audiobooks, artwork, titles, authors, and similar catalog data) are stored so we can host and play them for authorized members of your library.

Usage. We store playback progress per listening profile so listening can resume across devices. Server logs may include IP address, browser type, and timestamps for security and reliability.

Invites.If you invite a household listener, we collect the invitee’s email address to send the invite.

Device copies. If you install the app or save titles for offline listening, copies and related data may be stored on your device. That storage is under your control.

We use information to:

• Provide, maintain, and secure the Service
• Create accounts, authenticate you, and manage household seats
• Process subscriptions, invoices, and cancellations
• Host and play your library for authorized listeners
• Respond to support and contact-form messages
• Detect abuse, fraud, and copyright complaints
• Comply with law and enforce our terms

Where GDPR or similar laws apply, we rely on these lawful bases:

• Contract — to create your account, host your library, process subscriptions, and provide the player.
• Legitimate interests — to secure the Service, prevent abuse, improve reliability, and respond to support requests, balanced against your rights.
• Consent — where you opt in to non-essential cookies or marketing (if offered), and where you accept our terms at signup.
• Legal obligation — to comply with tax, billing, and law-enforcement requirements.

We share information with service providers who help us operate:

• Cloudflare — hosting, storage (R2), database (D1), bot protection, and related infrastructure
• Stripe — payment processing and the customer billing portal
• Resend — transactional email such as invites and account notices

We may also disclose information if required by law, to protect the Service or other people, or in connection with a merger, sale, or similar transaction. Household members you invite can see library content available to that library.

The marketing site does not rely on non-essential cookies. Flarelytics analytics, when enabled, does not use cookies or persistent fingerprinting; daily visitor hashes reset every 24 hours. A cookie banner appears only if we enable additional non-essential cookies.

The portal uses an essential session cookie so you can stay signed in. That cookie is required for the Service to work. Stripe may set its own cookies on checkout and billing pages.

When enabled on the marketing site, we use Flarelytics (self-hosted on Cloudflare) for privacy-first traffic analytics. It does not use cookies or persistent fingerprinting.

We keep account and library data while your subscription is active. After a subscription ends, hosted library files may be retained for up to 30 days and then deleted. Contact-form messages and password-reset requests are kept up to 90 days, then deleted automatically. We may retain limited records (billing, security, legal holds) as required by law.

We use industry-standard measures appropriate to a hosted audio service, including hashed passwords, HTTPS, and access controls. No method of transmission or storage is completely secure.

You can update your display name and password in Settings. Account owners can manage household listeners and billing through the portal and Stripe. Cancel a paid subscription in Settings via the Stripe billing portal. That stops renewal; it does not by itself delete the library. To request access, correction, or deletion of personal information, or to ask us to close a library, email hello@fableauri.com. FableAuri staff can close a library. We do not sell personal information. If you are a California resident, that includes the “sale” and “sharing” definitions under the CCPA/CPRA.

You must be at least 18 to create a paid FableAuri account. Invited listeners with their own login must be at least 13.

Account holders may create household listening profiles for family members, including children under 13. Those profiles do not have their own login. We collect only the profile display name and playback progress under the parent account. The account holder controls kid profiles, including which titles are hidden from them, and is responsible for their use.

FableAuri is not directed to children as a standalone audience. To remove a child profile or request deletion of its data, contact hello@fableauri.com.

We process information in the United States through Cloudflare and other providers. If you use the Service from another country, you understand that your information may be processed in the United States.

We may update this policy. The “Last updated” date above will change when we do. Continued use of the Service after an update means you accept the revised policy.

Privacy questions: hello@fableauri.com. Copyright notices belong on our DMCA / Copyright Policy, not the contact form.