Privacy and children's data

• The account belongs to the parent or guardian. Children never sign in.
• The only thing we know about your child is a first name, and only if you type one in for the cover.
• Drawings are stored privately. They are never public, never used to train any model, and never shown to anyone else.
• There is no analytics tool, no advertising pixel, and no embedded third-party script anywhere in this product.
• Nothing is sold, rented, or shared for marketing. Ever.
• One button deletes your account, every drawing, and every file, immediately and permanently.

This is the complete list. There is nothing collected that is not on it.

Not collected: your child’s age, birthday, surname, school, photograph, voice, location, contacts, or device identifiers. No advertising ID. No cross-site tracking of any kind.

Doodlepedia is a tool for a parent. The activity itself happens on paper, away from a screen. There is no child login, no child profile, no messaging, no comments, no public gallery, and nothing your child can post anywhere.

A child can reach the free drawing-ideas pages and the printable sheets. Those pages are static: no scripts from other companies run on them, nothing is recorded about who visited, and there is no way to type anything into them.

When you upload a photo, it is sent to Google’s Gemini image service to do one job: make the paper read as white and lift the line contrast, so a photo taken under a kitchen light looks like a scan. The model is instructed not to redraw, smooth, complete, restyle, or add anything, and the composition of the page happens in our own code afterwards, not by AI.

Google processes that image to return a result and does not use it to train its models under the terms we use the service on. We never publish your drawings, never use them in marketing without asking you first in writing, and never use them to train anything of our own.

The cover background is the one picture in this product a model creates. It is a background only. Your child’s drawing is placed on top of it by code and is never painted over.

These are the only companies that touch your data, and each one does a single job:

• Supabase: the database and private file storage, plus the sign-in email.
• Vercel: hosting and delivery of the site.
• Google (Gemini): the paper cleanup step and the cover background.
• Stripe: payment. Card details go straight to Stripe and never reach us.

None of them is an advertising company acting on our behalf. We do not use analytics providers, tag managers, session recorders, heatmaps, A/B testing tools, chat widgets, or social embeds.

• Original camera photos are deleted automatically 90 days after your booklet PDF is built. This runs on a schedule; you do not have to ask.
• Cleaned drawings and finished books stay in your account until you delete them, because they are the thing you came for.
• Download links expire after 30 days. You can generate a fresh one from your account at no cost.
• Payment records are kept for as long as tax law requires, even after you delete your account. That record is a date, an amount, and a plan name.

Go to your account page and press the delete button. It asks you to type a confirmation, then it hard deletes your profile, your booklets, every page, every uploaded photo, every cleaned drawing, every cover, and every generated PDF. There is no recycle bin and no soft-delete flag. It cannot be undone and we cannot recover it for you.

If you would rather ask a person, email privacy@doodlepedia.com from the address on the account and we will do it within 30 days.

You can ask us to show you everything we hold, correct it, delete it, or hand it over in a portable file. You can withdraw consent at any time by deleting the account. Exercising any of these will never cost you anything and will never get you worse service. Write to privacy@doodlepedia.com and we will answer within 30 days.

If you live in the EEA or the UK and you think we have got it wrong, you can complain to your national data protection authority.

Doodlepedia is directed at parents, not children. We do not knowingly collect personal information from a child under 13, and there is no way for a child to give us any: they have no account and no field to type into.

What we do hold about a child is a first name and drawings, given to us by a parent, with that parent’s consent, at the moment they created the account and typed it in. As the parent you may review it, refuse to allow us to keep it, and have it deleted at any time, using the button on your account page or by emailing privacy@doodlepedia.com. We never make a child’s information a condition of taking part in anything, and we never disclose it to third parties for their own purposes.

If you believe a child has given us information without your consent, email us and we will delete it.

Our lawful basis for handling your email address and payments is performance of the contract you entered into when you bought a booklet. Our lawful basis for handling the drawings and your child’s first name is your consent, given by uploading them, and you can withdraw it at any time by deleting your account.

Because this data relates to a child, we apply data minimisation strictly: we ask for a first name rather than a full one, we never ask for an age or a birthday, we do not profile anyone, we do not make automated decisions with legal effect, and we do not use any of it for marketing. Under Article 8, the consent here is the parent’s, which is the arrangement this product is built around rather than a checkbox added on top.

Data is processed in the United States by the companies listed above, under standard contractual clauses.

Drawings live in private storage buckets that are not readable from the public internet. Reaching one requires a signed link that we generate for you and that expires. Every database table is protected by row-level security, so one account’s rows are unreachable from another account even if something else goes wrong. Sign-in is a link sent to your email; there is no password for anyone to steal.

If we ever discover a breach affecting your data, we will tell you and the relevant authority within 72 hours of finding out.

If we change something that affects what we collect or how long we keep it, we will update the date at the top and email account holders before it takes effect. We will not quietly widen what this policy allows.

Privacy questions and deletion requests: privacy@doodlepedia.com
Anything else: hello@doodlepedia.com