What we collect
- Your account: your name and email address. With email sign-up, a password, which we store only as a one-way hash. With Google sign-in, your name, email and profile picture from Google. We don’t keep Google’s access tokens.
- What you make: the prompts you write, the options you choose (such as style and orientation), and the pages drawn from them.
- Sign-in records: for each signed-in session, the IP address and browser it came from, and counts of recent sign-in attempts, so we can spot and slow down someone trying to break into an account.
- Payments, once we offer them: a record of what you bought. Card details go straight to our payment provider; we never see or store your full card number.
We don’t use advertising or analytics trackers, and we don’t buy data about you from anyone else. The cookie policy lists the few cookies we set.
How we use it
- To draw your pages, keep them in your library and make your downloads and print files.
- To keep you signed in and protect your account.
- To answer you when you write to us.
- To find and fix problems, using error logs that are kept for a short time.
We never sell your data and never use your prompts or pages to advertise to you.
Who helps us run ColorAstra
A few companies process data for us, only to provide the service:
- Cloudflare hosts the app and stores your pages.
- PlanetScale hosts our database: your account, prompts and the list of your pages.
- Our AI image provider receives the prompt and options for each page so it can draw it. It doesn’t receive your name or email.
- Google, if you choose to sign in with Google.
- A payment provider, once we offer paid plans.
Some of them process data outside your country, including in the United States. We’ll share data with authorities only when the law requires it.
How long we keep it
Your account, prompts and pages are kept until you delete them or your account. Sign-in sessions expire on their own after a few days without use. When you delete your account, we delete your pages and personal data, except records we must keep by law, such as invoices.
Your choices and rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete your account and everything in it. Write to us at the contact address we’ll publish here before launch from the email address on your account. Depending on where you live, you may also have the right to object to some uses and to complain to your data protection authority.
Keeping it safe
Everything travels over HTTPS. Passwords are hashed. Your pages are kept in private storage and only ever served to your own signed-in account; they never appear in a public gallery.
Children
Coloring pages are for everyone, but accounts are for people aged 16 and over. Children are welcome to color the pages a parent or teacher makes on their own account. If you think a child has made an account, write to us and we’ll delete it.
Changes and contact
If we change this policy, we’ll update the date at the top, and tell you by email before a change that affects how your data is used. Questions go to the contact address we’ll publish here before launch.