Privacy Policy

Effective date: August 25, 2026

Crayon Wish ("we," "us") is operated by CTF Designs. This policy explains what we collect when you use crayonwish.com and what we do with it. The short version: we collect the minimum needed to run a coloring-page generator, we don't sell your data, and we never share or sell mobile information.

Who Crayon Wish is for

Crayon Wish is designed for parents, guardians, and educators. Creating an account requires you to be at least 18 years old (or the age of majority where you live). A child can never create their own Crayon Wish account, and we do not knowingly collect personal information from a child except through Kid Mode, which only a signed-in parent can turn on — see the next section. If you believe a child has created an account on their own, contact us at the address below and we will delete it.

Kid Mode and children's privacy (COPPA)

Kid Mode lets a parent create up to three child profiles so a child can make and color pages on a shared tablet without using the parent's account. It is off by default and can only be switched on by a signed-in adult account holder.

• Consent. Creating a child profile is an act by the parent, from inside their own verified account. That is our verifiable parental consent, and this section is the direct notice that goes with it. A parent who does not want us to collect anything about their child simply does not create a profile.
• What we collect about a child. Only what the profile needs: a display name (a first name or nickname — it does not have to be their real name), a username, an emoji avatar, a password the parent sets, and a record of the pages that profile created. That's the whole list.
• What we never collect about a child. No email address, no phone number, no date of birth, no photograph, no contacts, no location, no free-text writing. A child cannot type a prompt: Kid Mode offers a fixed picture menu, and the child taps from it.
• No tracking in Kid Mode. Analytics do not load in Kid Mode. We do not build a profile of a child, do not use persistent identifiers for advertising, and do not target any advertising at children.
• What a child can reach. Only the pages their own family made. Kid Mode cannot open the public gallery, upload a photo, see billing, change the account, or leave Kid Mode without an adult typing the account password.
• What leaves our systems. The picture choices a child taps are assembled into a short description and sent to OpenAI to generate the page, exactly as an adult's prompt would be. Nothing identifying the child — not their name, username, or profile — is sent with it.
• Parent controls. From your account you can, at any time: see what each child has made, set how many pages they can make per hour and per day, pause a child's access, change their password, and delete the profile and its data. We never condition a child's use of Kid Mode on collecting more than is necessary for it to work.
• Deletion. Deleting a child profile removes that child's profile data. Deleting your account removes every child profile under it. You can also email us and we will do it for you.

If you are a parent and want to review or delete what we hold about your child, email roman@ctfdesigns.com from the address on the account and we will act within 30 days.

What we collect

• Account info: your email address and a hashed password, stored with our database provider (Supabase). We use your email only to verify your account and send essential service messages.
• Prompts and generated images: the text prompts you type and the coloring pages generated from them. Pages made from text prompts are added to the public gallery and may be indexed by search engines (see the Terms of Use). Don't put personal information in prompts — they may be visible to other users. Pages made from a photo you upload are private: stored in a separate access-controlled bucket, reachable only by you through short-lived signed links, and never listed publicly or in our sitemap.
• Payment info: if you subscribe to a paid plan, Stripe collects and processes your payment details. We never receive or store your full card number — we keep only a Stripe customer/subscription reference, your plan, and its status.
• Editor drafts: the design editor saves your in-progress design in your own browser's localStorage so you don't lose work on refresh. It stays on your device and is not sent to us.
• Usage analytics: if you accept analytics cookies, we use PostHog to understand how the site is used (pages viewed, features clicked). This is gated behind the cookie banner — decline and it never loads. Analytics never load in Kid Mode, whatever the cookie choice was.
• Child profiles: if you turn on Kid Mode, the child profiles you create and what those profiles make. See the Kid Mode section above for the exact list.
• Technical basics: our host (Cloudflare) processes IP addresses and request logs to serve the site, prevent abuse, and enforce rate limits.

How prompts are processed

Prompts are sent to OpenAI to (1) screen them for kid-safe content and (2) generate the coloring page. Prompts are processed under OpenAI's API terms, which do not permit OpenAI to train models on this data.

Photo conversion: if you choose the photo-to-coloring-page feature, the uploaded photo is sent directly to OpenAI for safety screening and one-time conversion. Crayon Wish does not save the original photo. Only the resulting coloring page is stored, privately in your account. Do not upload a photo unless you have the right and permission to use it.

Service providers

We use a small set of processors to run the service: Supabase (database & authentication), Cloudflare (hosting & security), OpenAI (image generation & content moderation), Stripe (payment processing and subscription billing), Resend (verification and service emails), and PostHog (analytics, only with your consent). Each receives only what it needs to do its job.

What we don't do

• We do not sell or rent your personal information.
• We do not share or sell mobile numbers or mobile information; text-messaging originator opt-in data and consent are never shared with third parties.
• We do not run third-party advertising on Crayon Wish today. If that ever changes, this policy and the cookie banner will be updated first.

Your rights

Depending on where you live (including California under CCPA/CPRA and the EU/UK under GDPR), you may have rights to access, correct, delete, or export your personal information, and to opt out of analytics. You can delete your account and associated personal data yourself at any time from your account settings on crayonwish.com, or by emailing us. We respond to verified requests within 30 days and do not discriminate against you for exercising your rights.

Data retention

Account data is kept while your account is active and deleted on request. Uploaded photos are never stored at all — they are used once for conversion and discarded.

Child profiles are deleted when you remove them or delete your account. Pages a child made stay in your family gallery, no longer linked to a profile; tell us if you want those removed too and we will.

Private photo-derived pages are permanently deleted when you delete your account, both the image files and the database rows. Deleting your account also cancels any active subscription. Images you generated from text prompts and shared to the public gallery may remain after deletion (they are not linked publicly to your identity), but we will remove those on request too. We keep basic billing records for as long as tax and accounting law requires.

Security

Traffic is encrypted (HTTPS), passwords are hashed, database access is restricted with row-level security, and API keys are never exposed to the browser. No system is perfect — if we learn of a breach affecting your data, we will notify you as required by law.

Changes

We'll post any changes here with a new effective date. Material changes get a notice on the homepage.

Contact

CTF Designs — roman@ctfdesigns.com