Privacy Policy
Last updated: 2026-03-30
Who we are
Doodleur is operated by Mikael Wahss. You can reach us at info@doodleur.com.
What data do we collect?
We collect only what is necessary to run the service. Here is what we gather and why:
| Data | Source | Purpose | Legal basis |
|---|---|---|---|
| IP address (hashed) | Umami Cloud | Cookieless traffic statistics. Your IP is hashed and cannot be used to identify you. | Legitimate interest |
| IP address and browsing behavior | Google Analytics 4 | Ad optimization and traffic analysis. Only collected if you consent. | Consent |
| Email, name, password (hashed) | Account registration | Creating your account and managing download quotas. | Contract |
| Newsletter preference | Registration (opt-in) | Email communication about Doodleur, only if you opt in. | Consent |
| Download history | Account usage | Managing quotas and showing your download history. | Contract |
| Payment information | Paddle (Merchant of Record) | Processing payments for Plus and credits. We never store your credit card details — Paddle handles all payment data. | Contract |
| Uploaded photos | Photo-to-coloring feature | Conversion to coloring page. Your photos are stored privately in your account. | Consent |
Cookies
- Umami Analytics does not use cookies.
- Google Analytics and advertising cookies are only set after you consent via our cookie banner.
- A session cookie keeps you logged in (necessary for the service to work).
- Your cookie consent choice is saved in your browser's localStorage (not as a cookie).
Third parties that process data
- Umami Cloud — cookieless analytics, no personal data collected
- Google Analytics 4 — traffic analysis, only after your consent
- Google AdSense — advertising, only after your consent
- Paddle — payment processing as Merchant of Record
- Cloudflare — CDN and hosting (data processor)
- Brevo — transactional email delivery
Your rights (GDPR)
Under the GDPR, you have the following rights:
- See what data we have about you
- Correct inaccurate data
- Delete your account and all associated data (via your account settings)
- Export your data
- Object to data processing
- Withdraw consent at any time
Children's privacy
Doodleur is designed for parents, teachers, and adults — not for children directly. Account registration requires an email address. We do not engage in behavioral tracking of children and are committed to COPPA compliance.
Data retention
- Account data is kept for as long as your account is active.
- Accounts that have not been used for 2 years (with no active subscription) will be deleted. You will receive an email notification 30 days before deletion, giving you time to log in and keep your account.
- Umami analytics data is retained for 6 months.
- When an account is deleted, all personal data (profile, email, download history) is removed. Anonymized statistics may be retained.
Contact
Questions about your privacy? Reach us at info@doodleur.com.