Your privacy matters to us.

CrayonCave is operated by CuprBot Labs Inc. This policy explains what data we collect, how we use it, and your rights. Last updated: May 2026.

Information we collect

Account information

When you create an account, we collect your name, email address, and authentication provider (Google or email/password). If you sign in with Google, we receive your Google profile name and email — we do not access your contacts, calendar, or any other Google data.

Payment information

Payments are processed by Stripe. We never see or store your full credit card number. Stripe provides us with a transaction reference, last four digits, and billing email for order fulfillment and support.

Usage data

We use PostHog for product analytics. This includes pages visited, features used, session duration, and device/browser type. We use this data to improve the product. PostHog data is sent through our own reverse proxy (sts.crayoncave.com) and is not shared with third-party ad networks.

AI Studio inputs

When you use AI Studio, the text prompts and any uploaded reference images are sent to our AI provider (Azure OpenAI) to generate your coloring pages. Uploaded images are stored temporarily for generation and are not used to train AI models.

Adventure photos

When you create a personalized Adventure book, the photo you upload is sent to our AI provider (Azure OpenAI) to draw your character and is never used to train AI models or shared with anyone else. We keep it in private, secured storage for up to 30 days so we can verify quality and resolve any issues with your book, after which it is deleted. You can request deletion of your photo at any time before then by contacting us at [email protected].

Cookies

We use essential cookies for authentication and session management. A first-party cookie (cc_age_verified) records your age verification status so you are not asked on every visit. Advertising cookies (Google Ads _gcl_aw, Meta Pixel _fbp) are only set after age verification is completed — they are managed by Cloudflare Zaraz and cannot load before consent is granted.

How we use your data

•Fulfill purchases and deliver digital downloads
•Process AI Studio generation requests
•Send transactional emails (verification, receipts, password reset)
•Send marketing emails if you opted in (unsubscribe anytime)
•Improve the product based on aggregated usage patterns
•Measure ad campaign effectiveness (Meta Pixel, Google Ads)
•Prevent fraud, abuse, and unauthorized access

Data sharing

We do not sell your personal data. We share data only with:

Stripe — payment processing
Firebase (Google) — authentication
Azure OpenAI — AI image generation
Resend — transactional email delivery
PostHog — product analytics
Cloudflare — hosting, CDN, and security

Each provider processes data under their own privacy policy and only for the purpose of delivering our service to you.

Your rights

You can:

•Access your account data through your dashboard
•Delete your account by contacting support
•Unsubscribe from marketing emails at any time
•Request a copy of your personal data

For any privacy request, email [email protected].

CuprBot Labs Inc.
Privacy Officer: Robby Singh
997 Seymour Street, Suite 250 - #1370
Vancouver, BC V6B 3M1, Canada
Email: [email protected]

Data retention

Account data is retained while your account is active. If you delete your account, we remove your personal data within 30 days, except where we are required to retain records for legal or financial compliance (e.g., purchase records for tax purposes). AI Studio generation metadata may be retained in anonymized form for service improvement.

Children's Privacy (COPPA)

CrayonCave complies with the Children's Online Privacy Protection Act (COPPA) as amended April 22, 2026. We do not knowingly collect personal information — including persistent identifiers such as cookies, IP addresses, or device IDs — from children under 13.

Age verification: Before enabling any analytics, advertising, or tracking technologies, CrayonCave presents an age verification gate that asks visitors to enter their birth year. This is a neutral age gate — it does not suggest a minimum age or prompt a specific answer.

If the visitor is under 13: All third-party tracking tools (Google Ads, Meta Pixel, PostHog analytics) remain completely blocked. No cookies are set, no data is collected, and no personal information is transmitted to any third party.

If the visitor is 13 or older: Analytics and advertising tools are enabled via Cloudflare Zaraz, which manages all third-party scripts at the network edge. Tools only execute after affirmative age verification.

No Verifiable Parental Consent (VPC) flow: CrayonCave does not offer accounts or collect data from users under 13. If a visitor indicates they are under 13, they may still browse the site but no personal data is collected.

If you believe a child under 13 has provided personal information to CrayonCave, please contact us immediately at [email protected] and we will delete it within 48 hours.

Consent management

CrayonCave uses Cloudflare Zaraz to manage all third-party tracking scripts at the network edge. This means tracking tools physically cannot execute in your browser until consent conditions are met.

Third-party tools are grouped into purposes:

Analytics — PostHog (product usage, aggregated insights)
Advertising — Google Ads conversion tracking, Meta Pixel attribution

All purposes are blocked by default until the visitor completes age verification. Google Consent Mode v2 is enabled, ensuring all Google services default to denied until consent is granted.

Changes to this policy

We may update this policy from time to time. Significant changes will be communicated via email or an in-app notice. Continued use of CrayonCave after changes constitutes acceptance.