Privacy Policy
Last updated: 2026-03-30
Who we are
Doodleur is operated by Mikael Wahss. You can reach us at info@doodleur.com.
What data do we collect?
We collect only what is necessary to run the service. Here is what we gather and why:
| Data | Source | Purpose | Legal basis |
|---|---|---|---|
| IP address (hashed) | Umami Cloud | Cookieless traffic statistics. Your IP is hashed and cannot be used to identify you. | Legitimate interest |
| IP address and browsing behavior | Google Analytics 4 | Ad optimization and traffic analysis. Only collected if you consent. | Consent |
| Email, name, password (hashed) | Account registration | Creating your account and managing download quotas. | Contract |
| Newsletter preference | Registration (opt-in) | Email communication about Doodleur, only if you opt in. | Consent |
| Download history | Account usage | Managing quotas and showing your download history. | Contract |
| Payment information | Paddle (Merchant of Record) | Processing payments for Plus and credits. We never store your credit card details – Paddle handles all payment data. | Contract |
| Uploaded photos | Photo-to-coloring feature | Conversion to coloring page. Your photos are stored privately in your account. | Consent |
Cookies
- Umami Analytics does not use cookies.
- Google Analytics and advertising cookies are only set after you consent via our cookie banner.
- A session cookie keeps you logged in (necessary for the service to work).
- Your cookie consent choice is saved in your browser's localStorage (not as a cookie).
Third parties that process data
- Umami Cloud – cookieless analytics, no personal data collected
- Google Analytics 4 – traffic analysis, only after your consent
- Google AdSense – advertising, only after your consent
- Paddle – payment processing as Merchant of Record
- Cloudflare – CDN and hosting (data processor)
- Brevo – transactional email delivery
Advertising
Doodleur shows ads through Google AdSense to keep the site free. Third-party vendors, including Google, use cookies to serve ads based on your previous visits to Doodleur and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this and other sites.
Ads are only personalized after you consent via our cookie banner. You can opt out of personalized advertising at any time:
- Google's Ads Settings – adssettings.google.com
- For EU visitors – Your Online Choices – youronlinechoices.eu
- For US visitors – Digital Advertising Alliance – optout.aboutads.info
You can review the full list of companies Google may share data with in Google's advertising partners list.
Your rights (GDPR)
Under the GDPR, you have the following rights:
- See what data we have about you
- Correct inaccurate data
- Delete your account and all associated data (via your account settings)
- Export your data
- Object to data processing
- Withdraw consent at any time
Children's privacy
Doodleur is designed for parents, teachers, and adults – not for children directly. Account registration requires an email address. We do not engage in behavioral tracking of children and are committed to COPPA compliance.
Data retention
- Account data is kept for as long as your account is active.
- Accounts that have not been used for 2 years (with no active subscription) will be deleted. You will receive an email notification 30 days before deletion, giving you time to log in and keep your account.
- Umami analytics data is retained for 6 months.
- When an account is deleted, all personal data (profile, email, download history) is removed. Anonymized statistics may be retained.
Contact
Questions about your privacy? Reach us at info@doodleur.com.