Privacy Policy

CrayonColoring ("we", "the site") is an AI coloring page generator for kids and families. This policy explains the information used for accounts, credits, purchases, AI generation and analytics, and how it is handled.

What we collect

• Prompts you type. The text you enter into the generator is first screened for content safety (by Waffo), then sent to our AI image provider, fal.ai, to create your coloring page. We disable fal.ai request-history storage in our API requests. Prompts for generations charged to paid subscription or pack credits are not included in our prompt logs. For historical text generations charged to promotional free credits, including the sign-in bonus, we collected prompt text and aggregate counts, the day, whether the visitor was a guest or signed in, and whether the page was delivered or blocked by the safety check. These log entries are not linked to an account ID, email address, IP address, browser identifier or image. They expire after about 35 days and help us choose new gallery content. A prompt can itself contain personal information, so avoid entering personal or sensitive details.
• Photos you upload (Photo to Coloring Page). We process photos in memory on our server and send them to fal.ai for safety checks and conversion — see Photos you upload below.
• Account data (only if you sign in). The free gallery is public. You sign in to buy a plan or credit pack and use your paid access across devices. For an account we store your email address, your Google account ID if you use Google sign-in, and when the account was created and last used. We use them to sign you in, to keep your credits, plan and purchases with your account, and to answer support requests. We also store a randomly assigned account ID, sign-in provider information, email hashes used for account lookup and legacy purchase linking, and session records. Account records do not include your name, profile photo or a password; sign-in is passwordless.
• Usage counters. To enforce credit limits we count usage on our server. We count paid usage under your account or legacy purchase identifier. Historical guest counters use a hash of your IP address and browser user agent. Historical guest and sign-up bonus counters are kept long-term. Daily anti-abuse counters expire after about 2 days.
• Credit-use records. Each time credits are deducted for a generation, we add one record under the same account, guest bucket or legacy purchase identifier that was charged. A record contains the time of the deduction, whether it was a text generation or a photo conversion, and how many credits were taken. It does not contain your prompt, your photo, your email address, your IP address or your browser identifier. These records are kept for about 90 days and are then deleted automatically. They let us answer support questions about charges, and they record the charge only — a later refund does not rewrite the original record.
• Purchase and subscription records. Payments take place through Waffo's hosted checkout. We send Waffo your account ID, email address and selected product to link a purchase to your account. We receive order and subscription information through payment notifications and order lookups, including order identifiers, buyer email, product or plan, payment or refund status and subscription dates. Our server stores checkout records, order ownership, credited purchases, credit balances, subscription plans and paid-through and refill dates. These records support access, renewals, refunds and prevention of duplicate credit grants. Full card numbers are not part of our account or credit records.
• Purchases made before accounts existed. If you activated a purchase with your email and order number, we keep a hash of that email to hold your credits or plan. When you sign in with the same address, they move into your account.

Account access across devices

You can sign in with Google or with a one-time code or link sent to your email. Google and email sign-in with the same verified email address use the same account. Account details, promotional bonus usage, purchased credit balances and subscription records are stored in our server-side data store, using Upstash Redis when configured. Signing in to the same account on another device retrieves those records; your browser is not the only place where purchase status is kept. Your account page displays your email, plan and available credits. Guest credits remain separate from account credits and do not transfer when you sign in.

Sign in with Google

If you choose "Continue with Google", we request only basic sign-in information: your email address, verification status and a Google account identifier. The requested scopes are OpenID, email and profile; our account records retain your email and Google identifier rather than your name or profile photo. This sign-in integration does not request Gmail, Google Drive or contacts access. For Google's requirements, see the Google API Services User Data Policy, including its Limited Use requirements. You can remove CrayonColoring's access at any time in your Google Account under "Third-party apps & services".

Emails we send

We use Resend to send the sign-in codes and links you request. Resend receives your email address and the message needed to complete sign-in. Codes and links work once and expire after 15 minutes. Our sign-in email template contains no tracking pixels. Waffo may send purchase receipts and subscription messages as part of its payment service.

Photos you upload

When you use Photo to Coloring Page, your photo is processed for automated safety screening and conversion into line art. We do not save uploaded photos or their converted pages to disk, a database or a gallery.

• Processed in memory only, then discarded. Your photo exists only in the working memory of the request on our server while it is checked and converted. Our application does not retain the photo after processing.
• Never written to disk. We do not save your photo, or the coloring page made from it, to disk, to a database, to logs, or to any gallery or public list. The finished page is sent straight back to your browser, so download it before you leave the page — we cannot recover it later.
• Hidden details removed first. Before uploading, your browser shrinks the photo and re-saves it, which strips metadata such as GPS location and camera details. Our server removes any metadata that remains.
• Third-party AI processing. We send the photo to fal.ai for safety checks and conversion. Our requests disable input/output storage in fal.ai's request history and ask for the converted page inline rather than as a hosted file. These settings describe our integration; fal.ai's own data handling is governed by its policies, linked below.
• Automatic safety check. Each photo is checked by an automated classifier to block inappropriate images. Our conversion workflow has no manual photo-review step or face-recognition feature.
• Only photos you may use. Upload only photos you have the right to use. If other people appear in a photo, you must have their permission — or, for children, the permission of a parent or guardian.

Cookies and data stored on your device

• Sign-in cookie. When you sign in we set one first-party cookie that keeps you signed in for up to 30 days of inactivity (180 days at most). While a sign-in is in progress, a short-lived cookie supports that flow. We also use a cookie after signing out to prevent an old activation credential from restoring paid access in that browser. These are functional account cookies.
• Analytics. Vercel Web Analytics reports anonymous, aggregated visit statistics (such as which pages are viewed) without third-party cookies. We do not run session recording: your visits are not replayed, and form fields are not collected as part of any session recording. Other parts of the service still handle what you type for their own purposes — for example, a prompt you enter is sent to our image provider to draw a picture, and account or purchase details are stored to run your account. See the provider link below for its data and cookie information.
• Session recording, and what we used before. Until October 2026 we also loaded Microsoft Clarity, which recorded sessions on this site. We have stopped loading it, so no new Clarity recordings are made. We deleted the Clarity project in the dashboard on October 11, 2026. Historical data held by Microsoft remains subject to its applicable deletion and retention processes. Deleting the project does not confirm immediate or complete erasure of all historical data or backups held by Microsoft.
• Browser storage. localStorage can hold a legacy purchase activation credential and cached credit or plan indicators used for display. The server remains the source of truth for credit balances and subscriptions. Signing out clears these legacy values; signing in clears a legacy activation that has been linked to your account. Clearing browser site data removes local credentials and caches, but does not delete your server-side account or purchase records.

How long we keep data

• Account records remain in the server-side store until the account is deleted.
• Free-tier prompt text and aggregate counts expire after about 35 days.
• One-time free-credit counters are kept long-term so the allowances do not refresh monthly. Purchase and credit records have separate lifetimes; deleting an account does not remove every bookkeeping record.
• When you delete your account (on your account page), the deletion workflow ends your sessions and removes your account record and sign-in indexes. Remaining credits are forfeited. Credit ledgers, usage counters and order ownership or redemption records may remain under account IDs or email hashes for payment and refund bookkeeping. These identifiers are not a guarantee of anonymity. Deletion is blocked while a subscription is still paid up: cancel it with Waffo and wait for the paid-through period to end before deleting your account.
• Service providers, including Waffo, handle and retain their own records under their policies. Deleting a CrayonColoring account does not itself delete those provider records.

Your data rights

You have the right to access the personal data we hold about you and to request its deletion. You can delete your account yourself on your account page. For a copy of your data, or anything else, email support@crayoncoloring.com . Payment and billing details entered at Waffo's hosted checkout are handled by Waffo; we receive the order and subscription information described above.

Third-party processors

• fal.ai — processes prompts and uploaded photos for image generation and photo safety checks. Our requests disable request-history input/output storage. Text-to-image results use fal.ai-hosted image URLs; photo conversions request inline results. Provider processing is described in fal.ai's privacy policy.
• Waffo (Waffo Pancake) — our Merchant of Record: it processes your payment details at checkout and performs a content-safety scan on text prompts before generation. It receives account identifiers and email addresses for checkout and sends us order, subscription and refund information.
• Google — only if you choose Google sign-in, to confirm who you are.
• Resend — delivers our sign-in emails.
• Upstash — Redis storage for server-side accounts, sessions, credits, subscriptions, checkout and order records, usage counters and free-tier prompt logs.
• Vercel — site hosting and page-view analytics. See its Web Analytics privacy documentation.

Children's privacy

The site is designed to be used by parents, teachers, and caregivers together with children. No account is needed to use the generator. Accounts are for adults (18+) only — children must not create one. We do not knowingly collect personal information from children, and we delete any account we learn belongs to a child.

Changes

If this policy changes, the updated version will be posted on this page with a new "last updated" date.

Contact

Questions about privacy? Email us at support@crayoncoloring.com.