Scope and contact
This policy covers Photo2ColoringPage. Contact [email protected] for privacy questions and access, correction or deletion requests. We may verify your relationship to the account before acting.
Data processed
We process your account identifier and email through Supabase Auth, uploaded photos or written ideas, generation settings, task identifiers and result links, order and credit records, support correspondence and technical request data. Photos can identify adults and children; avoid unnecessary sensitive information and upload only with appropriate permission.
Service providers
Railway hosts the application. Supabase provides authentication and PostgreSQL records. Google may provide sign-in and supplies website fonts and Google Analytics. APIMart and its upstream model service process inputs and generate images. Waffo Pancake and its payment partners process payments; this integration does not receive full card numbers or security codes. Providers may process data outside your country under their applicable terms. We do not claim that upstream AI providers never retain inputs or use data for improvement without verified terms.
Cookies and browser storage
HTTP-only cookies support login and guest trials. Guest trial records are held on the server, with a pseudonymous network hash used to limit repeated trial creation. Signing in transfers the guest results to your account. Clearing guest cookies or switching browsers can prevent access to results that have not been attached to an account. Browser session storage retains selected packs and references for recovering tasks; it does not replace persistent server orders and balances. Google Analytics measures website usage and may use cookies or identifiers. Sandbox pages do not receive the site analytics tag. Browser settings can limit storage and cookies, which may affect functionality.
Use, access and retention
Data supports account access, image delivery, credit accounting, payment reconciliation, fraud prevention, support and service diagnostics. User images are not added to the public demonstration gallery. Completed task downloads require the owning account or guest session; provider image URLs may have their own access and retention behavior. Download expiration is not proof of deletion. We do not promise deletion after an invented fixed period. Account, order and credit records may be retained for operation, disputes and applicable obligations; provider copies and backups may require separate handling. No online system is perfectly secure.
Requests and children
Adults responsible for children’s photos should obtain appropriate permission and minimize personal data. Email [email protected] with an account or task reference for privacy requests or concerns about a child’s data; do not attach sensitive images unnecessarily. Available rights and complaint channels depend on applicable law. Material changes to this policy will be reflected on this page.