Privacy policy — Storyblok

Cited by

Facts read from this source

• Entity Report an error

  “Storyblok GmbH (“Storyblok”, “we” or “us”)”

• Effective date Report an error

  “Effective October 06, 2025”

• Applicable laws Report an error

  “We comply with all applicable privacy and data protection laws, including the European General Data Protection Regulation (GDPR), Austrian Data Protection Act (Datenschutzgesetz, DSG), Austrian Telecommunications Act (Telekommunikationsgestz, TKG), California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights and Enforcement Act (CPRA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act, Utah Consumer Privacy Act, and the Connecticut Data Privacy Act.”

• Age restriction Report an error

  “The Storyblok Services are not directed to individuals under the age of 16 years. We do not knowingly collect personal information from individuals under the age of 16 years.”

• Service URL Report an error

  “Our Storyblok Services are made available to our customers on a subscription basis under app.storyblok.com, subject to our Terms.”

• DPA Report an error

  “In such case our Customer agrees to enter into and be bound by the Storyblok Data Processing Agreement and all attachments thereto, which shall govern the processing of personal data included or part of their Customer Content.”

• ISO 27001 Report an error

  “Storyblok Services are provided by a Storyblok entity that has implemented an information security system that complies with ISO 27001 standards. The ISMS is audited and certified to ensure that the appropriate standards are fulfilled.”

• Trust center Report an error

  “Learn more about our security measures in our Trust Center (https://www.storyblok.com/trust-center)”

• Staff training Report an error

  “Our staff has the obligation to secrecy in compliance with applicable law (§ 6 DSG) and undergoes regular training on data protection and confidentiality.”

• Website providers Report an error

  “We use Vercel, AWS and Netlify (see below) for hosting of our website.”

• Datacenter Report an error

  “We share Log Files & Usage Information with our datacenter AWS.”

• Cookie consent Report an error

  “When you visit our website for the first time, a cookie consent banner will pop up and ask you to customize your cookie preferences.”

• Newsletter double opt in Report an error

  “We send newsletters and other electronic notifications only with your expressly consent if you’ve subscribed for it (double opt-in) or which is recorded during registration for a Storyblok account”

• Social media channels Report an error

  “We maintain social media presence on different platforms”

• Applicant privacy policy Report an error

  “For further information please see our Applicant Privacy Policy available under: https://www.storyblok.com/legal/applicants-privacy-policy”

• Account signup fields Report an error

  “When you directly signup within our Storyblok Services, we will require you to enter your first name, last name, email address and a password.”

• SSO supported Report an error

  “In case you use SSO we may only receive your unique identifier from the SSO provider instead of your email, depending on your configuration.”

• Two factor authentication Report an error

  “When you set up two-factor authentication we may ask you to enter a telephone number.”

• Payment card handling Report an error

  “Credit card numbers are not visible to Storyblok and payment information does not touch any Storyblok systems.”

• Feedback channels Report an error

  “The Storyblok Services may also include feature request forms or the option to give feedback, where you may choose to submit information regarding a feature or improvement you are suggesting for the Storyblok Services.”

• Third party cookies Report an error

  “Providers of third-party-cookies on our website are: Greenhouse forms (greenhouse.io) No Cookie Youtube Embeds (https://www.youtube-nocookie.com/) Algolia (algolia.com) Glassdoor star rating (glassdoor.com) Rudderstack's libraries (rudderstack.com) Tito widgets (ti.to)”

• Log data collected Report an error

  “This access data includes: Requested content, the name of the website accessed File, date and time of access/request GMT time zone difference access status / HTTP status code Amount of data transferred Message about successful retrieval browser type, version and language version operating system Referrer URL (the previously visited page) IP address the requesting provider”

18 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Head of Content European sovereignty
• The Head of Content European sovereignty
• The Data Protection Officer European sovereignty
• The Data Protection Officer European sovereignty
• The Localisation Lead European sovereignty
• The Localisation Lead European sovereignty
• The Skeptic European sovereignty
• The Skeptic European sovereignty
• The SME Marketer European sovereignty
• The SME Marketer European sovereignty
• The Web Engineer European sovereignty
• The Web Engineer European sovereignty