Privacy Policy

At Coloring.at, we collect the following types of information:

• Account Information: Name, email address, and authentication data provided through Clerk
• Original uploads: Photos and drawings are temporarily processed for the transformation and are not saved in your Gallery.
• Generated results: The coloring pages, colorized images, and character images we create are stored in your private Gallery until you delete them.
• Usage Data: Activity in your account, such as when you signed up, whether a generation succeeded or failed, checkouts you started, and purchase history
• Payment Information: Billing data processed securely through Stripe (we don't store payment details)

• Provide and improve our AI transformation services
• Process payments and add credits to your account
• Track credits, generations, and purchase history
• Measure in aggregate how accounts move from signup to a first creation and a purchase, so we can fix the steps where people get stuck. These records stay on our own servers, use no cookies, and are not shared with Google
• Send important updates about our service
• Send a welcome email with tips after you sign up and, if you have not created anything after three days, one reminder. Every product email has a one-click unsubscribe link
• Respond to customer support requests and improve our service

• Images are processed using OpenAI's API for transformation
• Original uploads are temporarily processed and are not saved in your Gallery
• AI-generated results are saved to your private Gallery until you delete them
• We never use your images or generated content for training or any other purposes

Free preview without an account

You can create one preview before signing up. We show you a small, blurred copy and keep the full result privately for up to 24 hours, so it can be added to your Gallery if you create an account. If you do not, it is deleted automatically.

To allow one preview per device and to prevent abuse, we set the strictly necessary cookie coloring_trial_device (a random ID, kept for 30 days) when you start a preview, and store only salted hashes of that ID and of your IP address for up to 30 days. Before a preview runs, Cloudflare Turnstile checks that the request comes from a person rather than a bot; it processes technical browser data such as your IP address. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, which is certified under the EU–U.S. Data Privacy Framework. We rely on our legitimate interest in offering the preview securely and preventing misuse (Art. 6(1)(f) GDPR).

We keep cookies to a minimum. Only the cookies needed to run the site are set automatically — everything else waits for your permission.

Strictly necessary cookies

These are required for the website to work and cannot be switched off. We rely on our legitimate interest in providing a functioning, secure service and on the performance of our contract with you (Art. 6(1)(f) and Art. 6(1)(b) GDPR).

• Authentication: session cookies set by Clerk to keep you signed in
• Payments: cookies set by Stripe during checkout for fraud prevention
• Free preview: coloring_trial_device, set only when you start a preview without an account, so each device gets one preview (30 days)
• Your cookie choice: stored in your browser under coloring-at:cookie-consent so we do not ask you again on every visit

Analytics cookies (optional)

When you accept analytics, a first-party cookie can remember the launch directory and landing path for up to 30 days. If you sign in during that period, we associate that first-touch source with your account to measure campaign signups and purchases. Choosing to reject analytics clears the browser attribution cookie and removes the source from your account.

We use Google Analytics 4 to understand which pages families find useful. These cookies are only set after you select “Accept analytics” in our cookie banner, on the basis of your consent (Art. 6(1)(a) GDPR, § 165 para. 3 TKG 2021). If you reject or ignore the banner, Google Analytics is never loaded.

Google Analytics gives us aggregated reports: which pages were viewed, approximate location at country or city level, device and browser type, and how visitors reached the site. It also receives a few anonymous milestones — account created, image generated, checkout started, and purchase completed with the package and amount — so we can see which pages lead to them. It never receives your name, email address, or images. Google shortens IP addresses before storing them. We do not use Google Analytics for advertising — advertising storage and ad personalisation stay switched off at all times through Google Consent Mode. Analytics data is retained in our property for a maximum of 14 months, after which Google deletes it.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU–U.S. Data Privacy Framework, and transfers are additionally safeguarded by the EU Standard Contractual Clauses.

Changing your mind

You can grant or withdraw consent at any time via the Cookie Settings link in the footer of every page. Withdrawing stops Google Analytics and deletes the analytics cookies from your browser. Withdrawal does not affect the lawfulness of processing carried out beforehand. You can also install Google's opt-out browser add-on, or block cookies in your browser settings.

Data Sharing

We do not sell, rent, or share your personal information except:

• With service providers (Clerk for auth, Stripe for payments, OpenAI for processing, and — only with your consent — Google for analytics)
• When required by law or to protect our rights
• With your explicit consent

Your Rights

Under the GDPR you have the right to:

• Access and update your account information
• Delete your account and associated data
• Request information about data we've collected, and receive it in a portable format
• Ask us to restrict or object to processing based on our legitimate interests
• Withdraw your cookie consent at any time via Cookie Settings in the footer, with effect for the future

You also have the right to lodge a complaint with a supervisory authority. Ours is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria — dsb@dsb.gv.at.

Children's Privacy

While our service is family-friendly and designed for transforming children's art, our platform is intended for use by adults (parents/guardians). We do not knowingly collect personal information from children under 13.

Contact Us

If you have questions about this Privacy Policy, please contact us at: