THE SHORT VERSION
Privacy
We keep an email address so you can sign in, and the coloring you made so it follows you to a new phone. That is the whole story. No ads, no trackers, nothing sold. The rest of this page is the same thing said precisely, because the law asks for precision.
Who is responsible
The business that operates Doodle Colors is the controller of the personal data described here, for the app and for the website at doodlecolors.app. We are established in the European Union, so the GDPR and the national data protection law that implements it govern what we do. We are not required to appoint a data protection officer and have not appointed one. Questions, and requests for our registered details, go to hello@doodlecolors.app.
What we collect, why, and on what legal basis
Account data
Your email address, and either a hashed password or the account identifier Apple or Google hands us when you use one of those buttons. Whether your email has been verified, and when the account was created and last changed. An avatar image, if you pick one. We never see your Apple or Google password.
Your coloring
Which pages you colored and how far you got, which pages you marked as favorites, and the palettes you built. This lives on your device first, so coloring works with no signal, and syncs to your account so a new phone can restore it.
Sign-in security data
Hashed sign-in tokens, hashed one-time tokens for email verification and password resets, and a short-lived counter of failed sign-in attempts tied to an email address, used to lock an account after repeated failures.
Server logs
When the app or the website talks to our servers, the request is logged: IP address, the browser or app agent string, the path requested, the response status, and the time.
Support correspondence
The emails you send us, and our replies.
Purchase data, if you buy something
If the app offers paid features and you buy one, Apple or Google process the payment. We do not receive your card number. We receive a transaction identifier and your subscription status, through our subscription provider, so the app knows what you are entitled to.
We do not ask for a date of birth, a phone number, a postal address, a real name, or anything about the device beyond what is in a normal web request. There is no profiling and no automated decision making that has any legal or similarly significant effect on you.
What we never do
- No advertising, anywhere, ever.
- No third-party trackers, no analytics or advertising SDK in the app, no analytics on this website, no advertising identifiers, no IDFA, no fingerprinting.
- No selling, renting, or sharing of personal data for anyone else's purposes. We have nobody to share it with beyond the providers listed below, who act only on our instructions.
- No reading of anything else on your device. The app asks for the photo library when you save a finished print or pick an avatar, and only then.
- No location data, no contacts, no microphone, no camera roll browsing.
Cookies and local storage
- These marketing pages set no cookies at all, and load no third-party scripts. Fonts are served from our own domain.
- Our internal admin dashboard sets one strictly necessary cookie to keep an admin signed in. It is not used for tracking, and it is exempt from consent requirements.
- The app keeps your sign-in tokens in the operating system's secure storage, and your coloring progress in ordinary app storage on the device. Neither is a cookie, and neither leaves your device except to sync with your account.
Who else touches the data
These providers process data on our behalf, under contract, only on our instructions. They are processors, not recipients free to do as they please.
- Our hosting and database provider: runs the servers and the database holding accounts and coloring progress.
- Cloudflare R2: stores artwork, thumbnails, avatars, and saved prints.
- Our email delivery provider: sends verification and password reset messages, which means it handles your email address.
- Apple and Google: if you sign in with Apple or Google, they authenticate you and hand us an account identifier. They are independent controllers for what happens on their side, under their own privacy policies.
- RevenueCat: if and when the app sells subscriptions, RevenueCat handles entitlement checks and receives an app user identifier and purchase status.
We also disclose data where the law obliges us to, for example to answer a lawful request from an authority, and to our professional advisers where necessary. If the business is ever sold or restructured, account data may transfer with it, and you would be told first.
Data leaving the EEA
Some of those providers are established outside the EEA, mostly in the United States. Where personal data reaches them, the transfer rests on the European Commission's standard contractual clauses, or on an adequacy decision such as the EU-US Data Privacy Framework where the provider is certified under it, together with the additional safeguards in our contracts with them. Ask us and we will tell you which mechanism covers which provider.
How long we keep things
- Account data and coloring progress: While your account exists, then erased within 30 days of a deletion request.
- Sign-in tokens: Until they expire or you sign out, whichever comes first.
- Email verification and reset tokens: Until used or expired, which is a matter of hours.
- Failed sign-in counters: At most 24 hours.
- Server logs: 30 days, then deleted.
- Support email: Up to 24 months after the conversation ends.
- Backups: Rolling backups overwrite themselves within 35 days of a deletion.
- Accounting records for purchases: As long as tax and accounting law requires, which is commonly up to 10 years.
Your rights
Under the GDPR you can ask us to:
- tell you what we hold about you, and give you a copy;
- correct anything wrong;
- erase it;
- restrict what we do with it while a dispute is sorted out;
- hand it to you, or to someone else, in a structured, commonly used, machine readable format;
- stop processing that rests on our legitimate interests, where your situation gives you a reason to object;
- withdraw any consent you gave, without that affecting what came before.
Write to hello@doodlecolors.app from the address on the account. We answer within one month, and tell you if a complex request needs longer. We may ask you to confirm it is really you, which is a protection for you, not an obstacle. None of this costs anything unless a request is clearly excessive or repetitive.
If you think we have handled your data badly, you can complain to a data protection supervisory authority: the one in the country you live in, the one where you work, or the one for the place you think the problem happened. We would rather you wrote to us first, and we will tell you which authority supervises us if you ask.
Children
Doodle Colors is made to be safe for children, and it collects nothing about a child beyond the account items listed above. Under the terms of use an account holder must be at least 13, and where local law sets a higher age for agreeing to online services on your own (up to 16 in parts of the EEA), a parent or guardian holds the account and agrees on the child's behalf.
If you are a parent or guardian and a child's data has reached us in a way you did not agree to, write to hello@doodlecolors.app. We will hand over what we hold, correct it, or erase it, whichever you ask for, without arguing about it.
Security
Passwords are stored only as a hash, never in readable form. Sign-in tokens and one-time email tokens are stored hashed as well, expire, and are rotated. Traffic between the app and our servers is encrypted in transit. Repeated failed sign-ins lock an account temporarily. Access to production systems is limited to the people who need it.
No system is perfectly secure, and we will not claim otherwise. If a breach happens that is likely to put your rights at risk, we will notify the Information Commissioner within 72 hours of becoming aware of it, and tell you directly where the law requires it.
Deleting your account
Write to hello@doodlecolors.app from the address on the account and ask. We erase the account, the progress, the favorites, the palettes, and any avatar, within 30 days. Backups that still hold a copy overwrite themselves on their own schedule, within 35 days. It is not archived and not recoverable afterwards, so be sure before you ask. Anything we are obliged by law to keep, such as accounting records for a purchase, stays for as long as that obligation lasts and is used for nothing else.
If we shut the service down
The terms of use let us end the service at any time. If that happens, we delete the personal data we hold rather than sit on it, apart from anything the law requires us to keep. We are under no obligation to export it for you first, so keep the prints you care about saved to your own photo library as you go.
Changes to this policy
If this policy changes in a way that matters, we will say so in the app before the change takes effect, not quietly on this page, and the date at the top will move.
Contact
Questions, requests, and complaints go to hello@doodlecolors.app and reach a human.