Painted Crayon

Legal

Privacy Notice

The photograph of the drawing stays on your device. Your browser lifts the drawing off the paper and traces it there; the lifted drawing and the name and age you type leave it only when you order.

Last updated

Who is responsible for my data?

PaintedApp, LLC runs Painted Crayon and is the controller of the personal data described here. Our mailing address is 1327 SE Tacoma St #394, Portland, OR 97202, United States, and you can write to support@painted.app about anything on this page. We collect little, keep it only as long as it's useful to you or the law requires, and never sell it.

What happens to the photograph?

It stays on your device. Your browser reads it into this tab, lifts the paper away, finds the colours and traces their outlines. The photograph stays in the tab's memory and is gone when the tab closes or reloads. It is never uploaded, and we never receive, store or see it. Use the Camera hands you to your phone's own camera; the page never turns a camera on itself.

What leaves my device, and when?

Nothing, until you press Order This Print. Then three things go:

Whatever is drawn or written on the page is part of the drawing. If it carries a surname or a school's name, cover that before you take the photograph.

What do you keep about the child?

A first name and an age, both optional, and nothing else. They are printed on the plate, kept as the print's caption in the order record at Stripe, written into the print file the lab receives, and repeated in the order emails. Leave both empty and the plate carries no caption at all.

Do you use cookies or analytics?

No. This site sets no cookies and runs no analytics, advertising pixels or third-party trackers. If that ever changes, this page changes first, and we'll ask before loading anything. Stripe's checkout page is Stripe's own: it may set its own cookies to prevent fraud, under Stripe's privacy policy.

What do you collect when I order?

Only what it takes to make your print and get it to you: your name and shipping address, to print and deliver it (a Digital File needs no address, so none is asked for); your email address, for the receipt and anything about the order; and the print as described above. We never receive card details. Stripe collects and holds them directly, and we see the outcome and nothing more. There are no accounts.

Who else sees it?

Only the companies that make the order happen, and only the part each one needs.

The print file and a small preview are drawn when you open checkout, so they exist even if you don't go on to pay. They are stored on Vercel Blob at an unlisted address, and the lab collects the file from there. Some of these companies operate outside your country, including in the United States. We don't share your data with anyone for their own marketing.

Who looks at my print before it is made?

A person here may, before the lab receives it. When that last look is on, the record of the held order, meaning the Stripe session id, the print file's address and the caption, is stored on Vercel Blob and emailed to the people who review prints. They see the print, never the photograph.

Will you email me after I order?

About that order, and nothing else: the receipt, your file, and for a print, the tracking link when the lab ships it. No reminders, no newsletter, and checkout doesn't ask to send any.

Where is my order kept, and for how long?

The record of your order lives in Stripe, and the lab that made your print keeps its own record of the job. We keep no database of our own. We keep the record for support, for our promise on damaged or wrong prints, and for tax and accounting. Nothing deletes the order, the lifted drawing or the print file on a clock today; ask us to delete yours and we will, unless the law requires us to keep it.

What are my rights?

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it, and we'll act within 30 days. Because there are no accounts, requests come by email: write from the address you ordered with. If you're in the EEA or the UK you also have the right to object to processing, to ask for portability, and to complain to your local data protection authority.

If you're in California or another US state with a privacy law, you have the right to know, to delete, to correct, and to opt out of the sale or sharing of personal information. We don't sell or share personal information, for money or for advertising, so there's nothing to opt out of. We honour Global Privacy Control signals all the same, and we'll never charge you differently for exercising any of these rights.

Children

This shop is for adults: a parent, a grandparent or a teacher photographs the drawing and orders the print. We don't knowingly collect data from anyone under 16. Two things about a child can reach us, the first name and the age an adult chooses to type, and we will remove them from any order on request.

Changes

If this notice changes, the date at the top changes with it. The terms of service and the shipping and returns page cover the rest of an order.