Privacy Policy

Last updated: [DATE]

DoodleDrop ("we", "us") is operated by [LEGAL BUSINESS NAME], [ADDRESS]. This policy explains what we collect when you use DoodleDrop and how we use it.

Who DoodleDrop is for

DoodleDrop is a service for parents, guardians and teachers (18+) to create coloring pages to use with children. Accounts may only be created by adults. Children do not create accounts and we do not knowingly collect personal information from children under 13. Children may type a drawing idea and color pages while supervised by an adult; these ideas are not linked to the child's identity and kids are asked not to type names or personal details.

What we collect

  • Account details (parents): email address and a securely hashed password; confirmation that you are 18+.
  • Drawing ideas and pages: the short text idea typed in, the generated page, and artwork saved to your fridge.
  • Payments: handled by Stripe. We receive your plan, status and a Stripe customer ID — never your full card number.
  • Technical data: a random guest cookie (to give one free try), a session cookie when logged in, and a one-way hash of your IP address for abuse prevention and rate limiting.
  • Analytics (if enabled): [Plausible / Google Analytics / Meta Pixel / Pinterest Tag — list the ones you turn on]. Advertising pixels are not loaded on the coloring and fridge screens children use.

How we use it

To create and store your pages, run your account and subscription, keep the service kid-safe (ideas are checked by an automated filter, which may include sending the text to our AI provider's moderation service), prevent abuse, and send account emails such as password resets.

Service providers

We share data only with providers that help run DoodleDrop: [Vercel (hosting)], [Neon / database host], [OpenAI (image generation and safety checks — ideas only, no account details)], [Stripe (payments)], [Resend (email)], and any analytics tools listed above. We do not sell personal information.

Retention and deletion

We keep your account and pages until you delete them or ask us to. Email hello@doodledrop.app to delete your account and all saved pages; we'll do so within [30] days. Guest pages without an account are deleted after [90] days.

Your rights

Depending on where you live (e.g. GDPR, UK GDPR, CCPA), you may have rights to access, correct, delete or export your data. Contact us at hello@doodledrop.app.

Children's privacy (COPPA)

If you believe a child under 13 has given us personal information, contact us and we will delete it. [Have counsel confirm your COPPA posture, especially if you enable ad pixels or let children use the site unsupervised.]

Contact

[LEGAL BUSINESS NAME] · [ADDRESS] · hello@doodledrop.app