Draft — pending legal review
Privacy & Children’s Data
Doodlewhirl is made for kids, so we take children’s privacy seriously. Today everything in the paint studio — the kids you add, and every picture they color — lives only in your browser on your device. We are building an optional feature that would let a parent save that history to an account so it syncs across devices. This notice explains, in advance, exactly what that feature would collect and how it would be handled.
What we would collect
Only the minimum needed to make cloud save work:
- A parent’s email address and sign-in. Handled by our sign-in provider (Clerk). We never see or store a parent’s password.
- Each child’s nickname — the name a parent types for a kid (e.g. “Maya”). We ask for nothing else about a child: no last name, no birthdate, no email, no location, no contacts, and nothing about how they behave.
- The pictures a child colors, plus small details that go with them (the picture’s title and the time it was saved).
That is the entire list. We do not use tracking or advertising cookies on the paint studio, we do not build profiles of children, and we do not sell or rent anyone’s information.
Why we would collect it
Solely to provide the feature a parent asked for: to save a child’s pictures to the parent’s account and show them again on that family’s other devices. We do not use children’s pictures or nicknames for advertising, analytics, profiling, or any other purpose.
How long we would keep it (retention)
We keep children’s data only as long as it is needed for the cloud save feature, and no longer:
- Purpose: to store and sync a child’s saved pictures for their parent across the family’s devices.
- Business need: the data is needed for exactly as long as a family is actively using cloud save; once a family stops, there is no longer any need to keep it.
- Deletion timeframe: if an account has no activity for 18 months, we automatically and permanently delete that account’s children’s data — the nicknames and every saved picture. A parent can also delete everything at any time (below).
A parent’s rights
If you are a parent or guardian, you can at any time:
- Review the personal information we hold about your child.
- Delete your child’s information, or your whole account and all of its data.
- Refuse or withdraw consent to any further collection or use of your child’s information. When you withdraw consent, we stop collecting and using that information and delete what we hold for that account.
Inside the paint studio, the parent area lets you delete your cloud account and its data directly. A dedicated contact address for this site is not live yet (see Contact, below), so until it exists that control is the way to exercise these rights.
Everything a child makes is also always available fully offline: the paint studio works with no account at all, and the “Download backup” option in the parent area saves a copy to your own device that never touches our servers.
Verifiable parental consent
Before any of your child’s information would ever leave your device, we would first confirm that you are the parent and that you consent — using a verifiable method. Cloud save stays off, and nothing is collected, until that consent is confirmed.
Who helps us run it
We use a small number of service providers strictly to operate the feature on our behalf — a sign-in provider (Clerk) and cloud hosting/storage (Cloudflare). They act only as our providers for internal operations and are not permitted to use children’s information for their own purposes. We do not share children’s information with anyone else.
Contact
Doodlewhirl is run by Sparkfield. A dedicated contact address for this site is not live yet, and we would rather say so here than publish one that bounces. This page will link it the same day it exists, together with the full postal and telephone details this kind of notice is meant to carry.
Draft version 1. Pending legal review — not yet in effect.