Privacy policy

ColoringPageMaker needs no account and uses no cookies, no third-party analytics and no advertising. It does keep a small counter of its own for visits and Pro clicks, described under Visit and click counts. This page lists the data the site handles, where it goes and why.

Who runs this site

ColoringPageMaker (www.coloringpagemaker.app) is run by Peak Apps Studio. For any question about your data, email info@peakappsstudio.com.

When you make a page

When you press generate, your browser sends your description and the detail level you chose to our server. The server adds its own drawing instructions and sends the text to an image model, which draws the page. The image comes back to your browser. We do not save your descriptions or your images. Which service draws the page depends on the page:

• Free pages, and Pro pages in standard quality, are drawn by Workers AI, a service of Cloudflare, with the FLUX.1 [schnell] model. Cloudflare's Workers AI data usage terms say that it does not retain the text or the picture after the request, with limited exceptions listed there, and that it does not use them to train models. Cloudflare Images then turns the picture gray.
• Pro pages in high quality (HD) are drawn by OpenAI's image service while the site's HD budget lasts and, for purchases from 21 October 2026, while your monthly HD allowance lasts. When either is used up, the page is drawn in standard quality by Workers AI. OpenAI receives the request from our server, not your IP address or browser details.

Please do not include a child's name or other personal details in your descriptions. Under OpenAI's API data policy, data sent through the API is kept for up to 30 days to monitor abuse and, by default, is not used to train OpenAI's models.

Daily limits and your IP address

Free pages are limited to two a day, and the limit resets at midnight UTC. To count them, our server turns your IP address into a one-way hash, mixed with a secret value that only we hold, and stores a counter under that hash. The address itself is not stored with the counter. The counters live in the site's own database on Cloudflare (a Durable Object with SQLite storage) and are deleted automatically about two days after they were last changed. For Pro, the daily counter is stored under your Gumroad sale ID instead, and a second counter under the same ID counts your HD pages for the month and is deleted about 40 days after it was last changed.

The same database keeps a few totals that belong to no one: the free pages of the day for all visitors together, the images drawn that day, and the OpenAI spend of the day and the month.

PDF downloads

On the home page, the PDF is built in your browser, and the PDF library loads from cdnjs, a public code library run by Cloudflare. On the theme pages and the printable pages, your browser sends the images for the PDF to our server, which builds the PDF in memory, sends it back and does not keep a copy.

What is stored in your browser

• The pages you made in this visit are kept in your browser's session storage so they survive a page reload. They are deleted when you close the tab.
• When you open the site, it notes in session storage what kind of site sent you, as one word such as "google", "pinterest", "social" or "direct" when no site did. It reads this from the page you came from, or from a tag in the link you followed, such as utm_source=chatgpt.com. If neither says, the kind of app you opened the page in, for example Pinterest or Instagram, counts the same way. It keeps only that word, never an address, and the word is deleted when you close the tab.
• The first time another site sends you here, that word is also saved in your browser's local storage, so that a later visit can still be credited to the site that first sent you. It is saved once and never replaced, it stays until you clear this site's data, and it is never an address. The word for this visit goes to our own counter with each note it sends, and the word saved in your browser goes with a Pro click to our counter and to Gumroad, as explained below. Neither word goes anywhere else.
• If you activate Pro, a Pro token is saved in your browser's local storage so that Pro stays on. The token is a random code made by our server. It does not contain your email address or your license key. To remove it, press the "Pro active" button on the home page and confirm "Sign out of Pro on this device", which also deletes the token from our database, or clear this site's data.
• Earlier versions of the site saved your Pro email address in your browser instead. The site now deletes it the next time you open one of its pages, and keeps only a note to ask you for your license key.

Pro, your license key and your email address

Pro is sold through Gumroad. The buy buttons open Gumroad's checkout, where you give your payment details to Gumroad, not to us.

When you click a Pro button, it goes to Gumroad through a tracking link that tells Gumroad what kind of site first sent you to us, for example a search engine, an AI assistant, Pinterest, a social network, another website or none. Gumroad learns only the kind of site, never its address. We use it to see which kinds of sites bring buyers. This site sets no cookies.

Pro turns on only with the license key from your Gumroad receipt. When you enter it, our server checks it with Gumroad's license service (api.gumroad.com). If Gumroad confirms a Pro purchase that has not been refunded, the server makes a random Pro token and sends it to your browser. In our database it stores the token with your purchase email address, the Gumroad sale ID and the date, and deletes this record automatically about 400 days later, or when you sign out on that device. After that you can turn Pro on again with the same key. We do not store your license key. An email address on its own never turns Pro on, and the site never tells anyone whether an email address bought Pro.

Your browser sends the Pro token with each page you generate or download, so the server can apply the Pro limits. When Gumroad notifies our server of a sale, the server checks that sale's license key in the same way and keeps a purchase record: your email address, the Gumroad sale ID and the date. If Gumroad reports a refund or chargeback to our server, the server deletes that record and stops the Pro tokens made from that sale. To do this it keeps the sale ID, marked as refunded, for about 400 days. As the seller, we also see your email address and order details in Gumroad, and we use them to answer questions and issue refunds.

Visit and click counts

The site keeps a small counter of its own, so we can see where visitors leave before they buy Pro. It is run by us, not by a third-party analytics service, and it sets no cookie. When a page opens, and when you do one of the things below, your browser sends our server one short note: you made a page, the free pages ran out and the Pro card or window came up, you opened the Pro window, or you clicked a Pro button.

A note holds five things: what happened, the page address without anything after a ? or #, the part of the page (for example the limit card, the Pro window or the bottom offer), the one word for the kind of site that sent you and the name of this site. The server adds one to a daily total for that combination and drops the note. The counter's database holds no cookie, no IP address, no browser details, no time of day and nothing that tells one visitor from another, so a note cannot be traced to you or joined to your other visits. A note never holds your descriptions, your pages, your license key or your email address. The daily totals are kept for 400 days in our database on Cloudflare and then deleted.

Nothing is counted for this page, the terms page or the error page, and nothing is sent from a browser that is under automation. Like any web host, the company that serves the site processes each request, including your IP address, as described under Hosting and fonts.

Hosting and fonts

The site runs on Cloudflare. Cloudflare's network serves the pages, images and fonts, and a Cloudflare Worker (our server code) handles drawing, PDFs, Pro and the other requests that need code. Like any web host, Cloudflare processes each request, including your IP address, the page you asked for and your browser type, and keeps network logs under its own policy. For the requests our code handles, Cloudflare's Workers Logs also records the request (its address, method and result, plus request details from Cloudflare such as headers and country, which can contain your IP address) and the technical error messages our code writes. These logs are kept for three days. Our code does not write your descriptions or your images to them. The fonts are served from this site, so no font service sees your visit.

Pro tokens from before the move to Cloudflare

Pro tokens made before the site moved to Cloudflare are not in the new database. When our server meets a token it does not know, it asks the site's previous server, which still runs on Vercel, whether the token is valid. The request carries only the token. It does not carry your IP address, your description or your browser details. The previous server looks the token up in its database at Upstash. If the answer is yes, the token is copied into the Cloudflare database without an email address and is not asked about again. If the answer is no, our server remembers a one-way hash of the token for one day so that it does not ask again. The previous server and its database still hold what they held before the move: Pro tokens with the purchase email address, Gumroad sale ID and date, and purchase records, for the periods listed under How long data is kept.

Pinterest

A scheduled job on our server draws printable coloring pages from topics we choose, not from anything visitors type, and publishes them in a feed that Pinterest reads. No visitor data goes into the feed. Some pages carry a Save to Pinterest link. If you press it, your browser opens Pinterest with the address of that page, and Pinterest handles the rest under its own policy. We send Pinterest nothing else. When the feed is requested, our server keeps a short log of the latest 60 requests: the time, which feed, the number of pins returned and the first 120 characters of the requester's user agent. It keeps no IP address.

Emails

If you email us, we receive your email address and your message. Mail sent to peakappsstudio.com addresses is forwarded by Forward Email to a Gmail inbox. We use your email only to reply to you.

Who else receives data

Most of these companies are based in the United States, so your data may be processed there. We do not sell your data, and we do not share it with advertisers.

How long data is kept

• Descriptions and images: not kept by us. Requests to Workers AI: not retained after the request, with the limited exceptions in Cloudflare's Workers AI data usage terms. Requests to OpenAI (Pro pages in high quality only): up to 30 days, under OpenAI's API data policy.
• Daily counters under the hash of your IP address or under your Gumroad sale ID: about two days after the last change. The monthly count of your HD pages under your Gumroad sale ID: about 40 days after the last change.
• Daily visit and click totals (no IP address, no identifier): 400 days.
• Pro tokens in our database (token, email, Gumroad sale ID, date): about 400 days after you activate Pro, or until you sign out on that device.
• Purchase records (email, Gumroad sale ID, date): until a refund is reported or you ask us to delete them. Refund marks (sale ID only): about 400 days.
• Pages in your browser, and the word for the kind of site that sent you on this visit: until you close the tab. The word for the kind of site that first sent you: until you clear this site's data. Your Pro token in your browser: until you sign out or clear this site's data.
• Network logs of the site: kept by Cloudflare under its own policy. Workers Logs of the requests our server code handles: three days. Requests to the Pinterest feed: only the latest 60.
• Pro tokens, purchase records and refund marks on the previous server (Vercel, Upstash): the same periods as above. Its request logs: kept by Vercel for a limited time under its own policy.
• Purchase records: also kept by Gumroad under its own policy.
• Emails to us: until we delete them. Ask us and we will delete yours, unless we need it as a record of a payment or refund.

Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct or delete it, or object to how we use it. Email info@peakappsstudio.com and we will reply within one month. If you live in the EU or the UK, you can also complain to your local data protection authority.

Children

ColoringPageMaker is made for adults: parents, teachers and sellers who make coloring pages, often for children to color. The free tier asks for no name, email address or account. The site is not meant to be used by children on their own, and we do not knowingly collect personal data from children under 13. If you think a child has given us personal data, for example by buying Pro, email us and we will delete it.

Changes to this policy

If the site starts handling data differently, we will update this page and the date at the top.

Contact

Peak Apps Studio, info@peakappsstudio.com. See also our terms of use.