Skip to content
ChoiceIQStories. Sources. Real tradeoffs.

Privacy notice · first release

What you share. What we store.

This notice describes the functions available in this release. It does not promise automatic email delivery, a private approval portal, or a retention period that has not been established.

Story submissions and consent

We store your first name, email, optional phone, county, optional school name, answers to the three story prompts, number of children, optional child first name, grade band, and receipt time. A separate consent record stores your guardian legal name and relationship, permission choices, assent when required, timestamps, final-text approval state, and a private approval token for a later review workflow.

The question about whether the featured child is 13 or older is used to validate assent; that response and identifying ages are not retained. Please avoid children’s surnames and other sensitive identifying details in your open answers. This release does not accept photo uploads.

Public and private information

Public stories contain only edited, family-approved content, permitted photos, disclosures, and public context. Guardian legal identity, contact details, raw answers, consent tokens, and private records are not included in public story responses. Authorized project operators can access private submissions and consent records in the underlying Teable project.

An email or social-sharing integration is not configured. No approval or notification email is sent by these forms. There is no AI conversation feature or conversation log.

Calculator data

An explicit Calculate action stores anonymized numeric tuition, fees, uniforms, transport, meals, award, child count, and arithmetic results. It does not store names, email, contacts, IP addresses, school identifiers, grade bands, exact ages, or disability flags. It does not save every input change. A short-lived HTTP-only session cookie and a signed result token let the registry handoff update that exact saved run, even if you calculate in another tab; they expire after one hour.

Operational processing

The app uses minimal operation identifiers when a database write is incomplete, without recording submission answers or contacts in operations logs. Public-write throttling uses transient hashed request keys in server memory; it does not store raw IP addresses in Teable. The hosting platform provides routine page analytics and runtime diagnostics. Infrastructure providers may process connection information to deliver the service.

Data is stored in this Teable project. We have not defined a fixed automatic deletion period in this release and do not claim one.

Withdrawal

Use Remove my story with the original submission email and story URL or slug. A match hides the public story and revokes consent without waiting for an editor’s decision. This withdraws publication; it does not claim deletion of all project records or copies held by third parties. Read the story policy for publication safeguards.