Privacy notice
Last updated:
Browsing and searching
The public coloring library is free to browse, download and print without an account. We do not display advertising. Public pages use Google Analytics 4 for visit and usage statistics and Microsoft Clarity to understand interactions through session recordings. These services may use cookies and receive browsing and device data. Search words and filters are sent to our server and may remain in browser history and server logs. Our own aggregate artwork view, download, export and print-opening counters do not store browser identifiers, IP addresses or entered text.
Temporary print lists and exports
Text and placement are processed in your browser. The temporary print list stays in the current tab and expires after 30 minutes without activity; closing the tab clears it. Using the temporary list does not upload your custom text. Images and PDFs are generated in your browser. Avoid including a child’s name or other personal information in custom text.
Optional adult accounts and Google sign-in
Parents, teachers and other adults can optionally sign in with Google to save their library. Children do not need an account to use the public library. Google processes the sign-in under its own privacy policy. We verify the Google identity and store its account identifier, an internal user ID, account status, necessary timestamps and an optional Google avatar address. Email verification is checked during sign-in; we do not store your Google name, access token or refresh token. We do not request access to Google Drive or Photos.
What you save in My Library
We store your chosen nickname, language, paper size, cover preference, favorites and explicitly saved print combinations. Saving a combination sends its name, page order, paper and cover settings, and any included custom text to our server. The temporary list remains separate. Browsing history is off by default. When enabled, it records actual artwork, guide and activity page openings while signed in, shows up to 100 entries from the last 90 days and does not import anonymous visits. Expired entries are removed when a new visit is recorded; you can clear them at any time. Favorites are limited to 500 and saved combinations to 20, with up to 10 pages each. Account and My Library pages use Google Analytics as described above, but do not load Clarity session recordings.
Sessions, retention and deletion
Essential sign-in cookies maintain your session for up to 365 days. We store a hashed session token, a general browser/device label and session creation, activity and expiry times; no precise location is collected for this feature. You can revoke sessions in account settings, switch off history, clear it or remove saved entries. Turning history off stops new entries; clearing it removes existing history. Other account data remains until removed or the account is deleted. Account deletion requires recent Google authentication and removes your identity link, profile, library and sessions from the live database. A closed internal user ID, status and timestamps remain. Cloudflare provides hosting and database storage; recovery copies may retain deleted data for up to 30 days. Files already downloaded to your device are not deleted.
Account service notifications
We use your Google-verified email address to send a welcome email through Resend when you create an account. The private delivery task stores the recipient and message for retries; completed tasks have these details removed after 30 days, while delivery status remains. Deleting your account removes its delivery tasks from our live database. This does not subscribe you to marketing. Already sent messages and delivery records held by Resend or Feishu are subject to the recipient’s and provider’s retention policies. Internal registration notices sent through Feishu include your Google-verified email address so our support team can investigate account issues. They do not include your photos, Google account identifier or session credentials.
Free conversion on your device
Selecting a file previews it on your device. Free conversion processes the image here, without sending the original photo or temporary result to our image storage or an AI service. HEIC/HEIF still photos are decoded on the device into a JPEG processing copy. The decoding and conversion files are downloaded to the browser as needed. There is no automatic saving of the selected photo or free result. Download the PNG before refreshing or leaving. Sign-in is optional unless you choose to save the result; explicit saving uploads the drawing, not the source photo. If you choose to sign in after selecting a photo, a temporary browser copy can restore it; this expires after ten minutes and is cleared on restoration, dismissal or sign-out, with expired copies cleared when a converter page is next opened.
Saving a free conversion result
Saving is a separate action that requires available library storage. Only the result is uploaded, then checked and stored privately with its dimensions, size, line weight and saving details; the source photo is not uploaded. Saved results have no automatic expiry at present; delete them in My creations.
Sending one photo from your phone
A signed-in computer can display a code that is valid for 3 minutes from creation. The phone does not need Google sign-in. The phone page claims the code once; refreshing, reopening the URL or scanning again cannot restore permission. Permission stays only in that page’s memory and allows one photo to that account, plus transfer status and storage checks. It cannot browse or download the library, generate images or pay. The current page may retry the same photo after a network failure. Successful saving ends permission. Closing the computer dialog or leaving the page does not cancel an unexpired permission; explicit cancellation stops uploads not yet accepted. An accepted upload can finish saving after expiry or departure. The computer displays it automatically only if its original selection is still empty; otherwise it remains saved privately. No photo, filename or transfer credential is sent to analytics or service messages.
Saving your original and generating images
In the signed-in AI workspace, a selected photo is uploaded after validation and saved privately with its processing copy, before you generate. Sending from your phone saves the same kind of private asset. Uploading uses storage, but does not generate an image or spend credits. HEIC/HEIF decoding takes place on your device; the processing copy is oriented and has metadata removed. We retain originals, processing copies, independent results, options, task status and credit records. Your images are not automatically published or used by ColorWillow to train models.
Reusing and deleting originals
Choose an existing original from Uploaded photos in My creations to reuse the same saved asset without storing another copy. Change replaces the current selection; Remove clears that selection. Neither deletes a saved asset. Deleting an original in the library removes its original and processing copy, while generated results remain. An original in use is marked for deletion and cannot be reused; cleanup waits for active tasks to end safely. Space is released after actual cleanup. There is no recycle bin or automatic deletion when credits expire or a plan ends. Account deletion also clears private files after active tasks and payment issues are resolved. Device downloads and external processors’ copies are outside this deletion.
AI processing and content reports
For AI conversion, a processing copy of your selected photo and conversion instructions are sent to third-party AI processing services, and we retrieve the result. ColorWillow does not use your photos or results to train AI models. Free conversion on your device does not send the source photo to an AI service. For content reports, we use only the information needed to investigate, respond and handle a review request.
Payments and service messages
The payment service processes checkout details. We keep order references, amounts, currency, payment and subscription status, credit entries and refund facts; we do not collect full card numbers or security codes through our forms. When service messages are enabled, a verified email contact and message snapshot are kept for delivery through Resend. Internal Feishu notices include your verified email address and limited transaction summaries to help investigate payment issues; they do not include photos, your Google account identifier or card details. Deleting the account clears contact and message snapshots, while necessary transaction and credit records remain associated with the closed internal account ID.
Private workspace analytics
Private creation and payment pages do not use session replay. Page visits are measured using sanitized page addresses; private data pages use our server to send the page type. Where optional analytics are enabled and permitted, they send limited action results, credit quantities, amounts and predefined error categories. Photos, image URLs, filenames, custom text, email addresses and private page addresses are not included.
One-time signup gift records
When the signup gift is enabled, only new registrations are eligible. To prevent another gift after account deletion and re-registration, we retain a keyed digest of the Google identity, an opaque claim reference and its date for as long as this signup offer operates. This record contains no email, raw Google identifier or link to the closed account. Delivery records for an active account show crediting and expiry dates; they are removed on closure. This does not prevent someone creating multiple Google accounts.
Questions and privacy requests
Contact support@colorwillow.com for privacy questions or help. Send only the information needed to explain the request, and do not send passwords or sign-in codes. Information you email is used to respond to your request.
Page visits and usage statistics
Normal pages, including editors, accounts, billing, private libraries and print pages, use Google Analytics 4 in the browser to measure visits and actions. Confirmed business events, such as registration, purchases and refunds, are sent by our server. Statistics can include internal order or artwork IDs, page paths, language and ordinary navigation options. We exclude email addresses, names, sign-in and upload credentials, photos, custom text. Google Analytics may use cookies and receive browser and device data. Collection respects Do Not Track, Global Privacy Control and the site analytics preference.
Your geometric designs
Your drawing stays on this device. No sign-in, upload or payment is needed. Save up to 10 editable drawings automatically in this browser.
ColorWillow Chrome extension
The extension handles only images you deliberately choose. Free conversion runs on your device; Save uploads only the result. AI uploads your selected original and processing copy. The extension does not scan galleries or collect a browsing-history list, and contains no advertising, third-party analytics or session recording.
Read the Chrome extension privacy policy
Limited use of extension data
ColorWillow’s use and transfer of information received through the extension complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use it only to provide, maintain and secure the disclosed image-conversion and account features. We do not sell it or use it for personalized advertising, unrelated profiling, creditworthiness or lending. Transfers are limited to providing these features, security, legal requirements or a permitted business transfer. Human access is limited to permitted cases, including your specific support consent, security investigation or legal obligations.
ColorWillow Firefox extension
The extension handles only images you deliberately choose. Free conversion runs on your device; Save uploads only the result. AI uploads your selected original and processing copy. The extension does not scan galleries or collect a browsing-history list, and contains no advertising, third-party analytics or session recording.
ColorWillow Opera extension
The extension handles only images you deliberately choose. Free conversion runs on your device; Save uploads only the result. AI uploads your selected original and processing copy. The extension does not scan galleries or collect a browsing-history list, and contains no advertising, third-party analytics or session recording.
ColorWillow Microsoft Edge extension
The extension handles only images you deliberately choose. Free conversion runs on your device; Save uploads only the result. AI uploads your selected original and processing copy. The extension does not scan galleries or collect a browsing-history list, and contains no advertising, third-party analytics or session recording.