Privacy Policy
Sovalu is a website with audio fairy tales and bedtime stories. We have no accounts, no forms and no ads, and we want to know as little about you as possible. Here's what we do learn, and why.
Effective from: 14 November 2026
Who is responsible
Controller: Ing. Jan Kočí, sole trader, company ID (IČO) 76629660, Němčice 239, 533 52 Němčice, Czech Republic.
Email: [email protected]
We don't have a Data Protection Officer because the law doesn't require one for us.
What data we process
1. Visitor statistics (Google Analytics), only with your consent
If you click "Accept" in the banner, we use Google Analytics 4. It shows us which stories people listen to, which countries visitors come from, and whether the site works well on phones.
- What is stored: the cookies
_gaand_ga_…, which hold a random browser identifier (valid for 12 months), plus information about the pages you visit, stories you play, your device and browser type, and your approximate location (country or region). - IP address: according to Google, for visitors from the EU the IP address is used only to estimate approximate location and is then discarded, not stored.
- What we keep switched off: Google signals, advertising features, remarketing and any link to Google Ads.
- How long: detailed Google Analytics data is deleted after 2 months. Only aggregated statistics remain, and they aren't linked to any individual.
- Legal basis: your consent (Art. 6(1)(a) GDPR and Section 89(3) of the Czech Electronic Communications Act).
- You can withdraw consent at any time via the "Cookie settings" link in the footer by clicking "Reject". Withdrawing is as easy as giving consent. It doesn't affect measurement that took place before.
If you click "Reject" or simply ignore the banner, Google Analytics isn't loaded at all and the site works exactly the same. We remember your choice in your browser (local storage) for 12 months so we don't keep asking.
2. Running and securing the website (Cloudflare)
The site runs on Cloudflare. Every visit transmits technical data: IP address, time, requested page, browser and device. Without this the page couldn't be delivered or protected against attacks. If traffic looks suspicious, Cloudflare may set a strictly necessary security cookie (e.g. __cf_bm, valid for 30 minutes).
- Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).
- How long: briefly, according to Cloudflare's security practices. We don't review or analyse these records ourselves.
3. When you email us
When you write to [email protected], we receive your email address, your name (if you include it) and your message. We use them only to reply. Please don't send anything we don't need, and especially no information about children.
- Legal basis: our legitimate interest in answering your message (Art. 6(1)(f) GDPR).
- How long: until your request is handled, then no longer than 12 months after the last message, unless we need it longer to resolve a specific matter.
- Technically: your email is received by Cloudflare Email Routing and forwarded to a mailbox hosted by Google (Gmail).
4. What we don't process
No user accounts, sign-ups, forms, newsletter or ads. We only link to YouTube videos. Nothing is embedded, so YouTube loads only once you click a link, and from then on Google's own rules apply.
Who receives data
- Google Ireland Limited (Ireland) and Google LLC (USA): Google Analytics (only with consent) and the Gmail mailbox.
- Cloudflare, Inc. (USA) and its affiliates: hosting, website delivery, attack protection and email forwarding.
Both providers process data under data processing agreements. Data may be transferred to the USA. Google LLC and Cloudflare, Inc. are certified under the EU–US Data Privacy Framework, which is covered by a European Commission adequacy decision. EU Standard Contractual Clauses are used in addition.
We don't sell your data or share it with anyone else.
Children
The stories are for children, but the website is meant for parents and other adults. We don't want any personal data from children, so please don't let children write to us themselves. If we find out a child has sent us personal data, we'll delete it.
Your rights
You have the right to:
- know what data we hold about you and get a copy,
- have it corrected,
- have it erased,
- restrict its processing,
- object to processing based on legitimate interest,
- data portability for data processed on the basis of consent,
- withdraw your consent at any time (via "Cookie settings").
Just email [email protected]. We'll reply within one month. Google Analytics data is stored under a random identifier, so we often can't link it to you. The quickest option is to withdraw consent and clear your browser cookies.
If you're unhappy with how we handle your data, you can lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz, or with the supervisory authority in your country.
Changes
If we change this policy, we'll update the date at the top. If something important changes (for example, we add another tool), we'll ask for your consent again.