Privacy policy
The images you convert never leave your device: there are no accounts and no server that could receive them. The site is funded by advertising, so Google AdSense runs on these pages. Detailed analytics with cookies runs only if you accept it. A cookieless page count runs for everyone and records nothing that identifies you. This page separates the three precisely.
The short version
Your images are processed by your own browser, on your own device. They are never uploaded, stored, transmitted, or seen by us or anyone else. We operate no server that could receive them, because the product does not include one. That part is structural, not a promise.
Separately from your images, this site carries Google advertising, which pays for it. Advertising runs whether or not you accept analytics.
Detailed analytics is off until you turn it on. The first time you visit, a bar at the bottom of the screen offers two choices; Google Analytics and PostHog do not load and no analytics cookie is set until you pick Accept. Decline, or ignore it, and neither of them runs. Every part of the site works the same either way. One thing runs for every visitor: a cookieless page count from Cloudflare, described below.
None of these services ever receives your pictures, because your pictures never reach the network at all.
The page count that runs for everyone
So we know how many people use the site at all, every page loads Cloudflare Web Analytics from static.cloudflareinsights.com. It sets no cookie, stores nothing in your browser, does not fingerprint your device, and does not keep your IP address. It reports the page address, the site that referred you, your browser, operating system and device type, your country, and how fast the page loaded, and we only ever see totals. It never sees your images or anything you make in the converter.
Who we are
Coloring Page Maker is operated by Amit Choukroun. Questions about this policy can be sent to privacy@coloringpage.design.
What we never collect
None of the following is collected or processed by us or by anyone else, in any form:
- The images you convert, at any resolution.
- File names, image dimensions, EXIF or other embedded metadata, or the web addresses of images you load.
- The coloring pages you generate, or the files you download.
- Names, email addresses, or any other identifying information.
- Session recordings, heat maps, or keystroke and mouse-movement capture.
There is no sign-up, no login, no contact form, and no newsletter. If you email us, we will have your email address for as long as it takes to reply to you, and that is the only circumstance in which we hold anything about you directly.
What the measurement collects, if you accept
These run only after you accept the bar at the bottom of the screen. If you have not accepted, skip this section — none of it is happening.
- Google Analytics 4 (measurement ID G-LHLBE0ND56) counts visits and records which pages are viewed, roughly where in the world the visit came from, and which site referred you. We use it to see which pages are worth writing more of.
- PostHog records the same kind of thing in more detail: which pages were viewed and in what order, what was clicked, the device and browser, and the country. It sets a cookie so a repeat visit is not counted as a new person. Session recording is switched off explicitly, so we do not see or store what happens on your screen. Data is processed on PostHog's servers at us.i.posthog.com, in the United States. If you are visiting from the EEA or the UK, that means this data leaves your region; PostHog relies on the EU–US Data Privacy Framework and standard contractual clauses for the transfer. It is one more reason none of it happens unless you accept.
- Google AdSense (publisher ID pub-5063357796518709) selects and displays the adverts that pay for the site's hosting and development. It may use cookies and similar identifiers to limit repetition, measure performance, and — depending on your settings and location — personalise what you are shown.
In both cases Google receives what any web request carries: your IP address, the page address, your browser's user-agent, and the cookie identifiers those services set. This processing is Google's, under Google's privacy policy. We see only aggregate reports; we cannot identify an individual visitor and we do not try to.
Nothing about the conversion tool is measured. We do not send Google an event when you choose an image, change a setting, or download a file — the editor reports nothing about what you make.
Changing your mind
You can withdraw or grant consent at any time, and it takes effect immediately — declining stops any further collection by Google Analytics and PostHog. The cookieless page count continues, but it identifies no one.
Your choice is remembered in your browser's local storage. That one entry is stored whether you accept or decline, because it is the only way to avoid asking again on every page; it is never sent anywhere.
Your choices about advertising
Advertising is not covered by the bar described above. Google runs its own consent flow for visitors in the EEA, the UK and Switzerland, shown before personalised ads are served, and that is the mechanism that governs ads. The controls below apply regardless of what you chose for analytics.
You can turn off personalised advertising for your Google account at My Ad Center, and control cookies generally in your browser settings — blocking third-party cookies does not stop the tool from working, because the tool does not use them. Browser extensions that block advertising and analytics will also prevent both services from loading, and the editor will continue to work normally.
How your images are handled
When you choose an image, your browser reads it directly from your device into the memory of the tab you have open. The conversion into line art runs in a background worker inside that same tab, using your device's processor. The resulting PDF or PNG is assembled in the tab and handed to your browser's download mechanism.
At no point in that sequence is any part of the image sent over the network. This is not a policy commitment that could be quietly changed — the site is a set of static files with no upload endpoint, no database, no object storage, and no server-side image processing. There is no infrastructure capable of receiving an image.
When you paste an image address instead of choosing a file, your browser requests that image directly from the site hosting it. That request goes from your device to that site, not through us, and we have no visibility into it. The site you are fetching from will see the request in its own logs, as it would for any image request.
What is kept, and for how long
Your image, the generated preview, and the output file exist only in the memory of the browser tab. They are discarded when you reload the page, choose a different image, use Start over, or close the tab. We do not write them to local storage, IndexedDB, or the browser cache.
The one exception is colouring in a page online. So that you can come back and finish, your browser remembers your progress on that sheet in its own local storage, on your device. It is a short list of which areas you filled and which colours you chose — not a picture, and not your artwork. It is never sent to us or to anyone else, and clearing your browser's site data removes it.
Sharing a colouring is the one time any of it leaves your device, and only
because you asked. Share hands the finished picture straight to whichever
app you pick, without passing through us. Copy a link puts that same short
list of areas and colours into the link itself, after the #,
which browsers never send to a server — so the drawing travels only as far
as you paste it.
Hosting and server logs
The site is hosted on Cloudflare Pages. As with any website, Cloudflare's infrastructure processes the technical information required to deliver a page to you — your IP address, the URL requested, your browser's user-agent string, and similar request metadata — and may retain it briefly for security and abuse prevention. We do not have access to individual visitor records. We look only at totals, such as how many times a page or a printable PDF was requested in a day.
Note what is not in those logs: the images you convert never reach the server, so they cannot appear in any log entry. Neither can the addresses of images you load, because those requests go directly from your browser to the site hosting them.
Third parties
Cloudflare hosts the site and provides the cookieless page count, Google Analytics and PostHog count visits if you accepted them, and Google AdSense serves the adverts. Those are the only external services, and the complete list of scripts loaded from another domain is pagead2.googlesyndication.com, www.googletagmanager.com, static.cloudflareinsights.com, us.i.posthog.com and us-assets.i.posthog.com, all described above.
Beyond those, the site loads no fonts, tag managers, chat widgets, embedded videos, social buttons, or content delivery networks from anywhere else. Every other asset — including the machine learning model the editor downloads — is served from coloringpage.design.
The Chrome extension
The optional Chrome extension requests contextMenus to add the right-click entry, storage and unlimitedStorage to hold one image between tabs, scripting and activeTab to read an image the page will not release on its own, and access to all sites so it can fetch the picture you right-clicked whatever site you found it on.
That access sounds broad, so here is exactly what it is for. When you choose "Create coloring page", the extension downloads that one image, keeps a copy in your browser's local extension storage, and opens the editor in a new tab. The editor reads the copy from local storage rather than fetching the address again, which is what makes images work on sites that refuse to serve their pictures to another page. The copy stays readable for a few minutes so that reloading the editor still works, then expires; expired copies are cleared the next time you use the extension.
The extension acts only when you click its menu entry. It does not read pages you are merely visiting, does not watch or record your browsing, and has no network destination of its own: the only request it makes is to the site already hosting the image. Nothing is transmitted to us, because there is no server of ours for it to transmit to.
Browser assistants and WebMCP
The editor can expose a small set of typed actions to compatible in-browser AI assistants, so that an assistant can operate the visible tool on your behalf. These actions do the same things the on-screen controls do, and they return only compact status information — never image data, file contents, page contents, or anything about your browsing. Loading an image from a web address and downloading a file both require your explicit confirmation in the page before they proceed. This capability is experimental, entirely optional, and inactive unless your browser provides it.
Children
The site is intended for adults making activities for children, rather than for children themselves. We collect nothing from anyone directly, no account can be created, and no information can be submitted. The pictures a child converts are as private as anyone else's, because they stay on the device.
The advertising is the part worth knowing about: because Google serves it, a child using the site unsupervised would be subject to the same cookies as any other visitor. If that matters to you, an ad blocker removes both Google services entirely and the tool works exactly as before.
Your rights
Data protection law gives you rights to access, correct, and erase personal data held about you. We hold nothing about you ourselves, so there is nothing for us to retrieve or delete. For the data Google collects through Analytics and AdSense, those rights are exercised through Google, via your Google account's data and privacy controls. Write to us at the address above if you need help with either, and we will do what we can.
Changes to this policy
If this policy changes, the revised version will be published here with a new effective date. The commitment that your images are processed only on your device is the one this product exists for; changing it would require rebuilding the product, and would be stated prominently rather than buried in a revision.
Related: how the conversion works, the terms of use, and the Chrome extension.