Children’s privacy

Privacy & Children’s Data

Doodlewhirl is made for kids, so we take children’s privacy seriously. Today everything in the paint studio — the kids you add, and every picture they color — lives only in your browser on your device. We are building an optional feature that would let a parent save that history to an account so it syncs across devices. This notice explains, in advance, exactly what that feature would collect and how it would be handled.

What we would collect

Only the minimum needed to make cloud save work:

• A parent’s email address and sign-in. Handled by our sign-in provider (Clerk). We never see or store a parent’s password.
• Each child’s nickname — the name a parent types for a kid (e.g. “Maya”). We ask for nothing else about a child: no last name, no birthdate, no email, no location, no contacts, and nothing about how they behave.
• The pictures a child colors, plus small details that go with them (the picture’s title and the time it was saved).

That is the entire list. We do not use tracking or advertising cookies on the paint studio, we do not build profiles of children, and we do not sell or rent anyone’s information.

Why we would collect it

Solely to provide the feature a parent asked for: to save a child’s pictures to the parent’s account and show them again on that family’s other devices. We do not use children’s pictures or nicknames for advertising, analytics, profiling, or any other purpose.

How long we would keep it (retention)

We keep children’s data only as long as it is needed for the cloud save feature, and no longer:

• Purpose: to store and sync a child’s saved pictures for their parent across the family’s devices.
• Business need: the data is needed for exactly as long as a family is actively using cloud save; once a family stops, there is no longer any need to keep it.
• Deletion timeframe: if an account has no activity for 18 months, we automatically and permanently delete that account’s children’s data — the nicknames and every saved picture. A parent can also delete everything at any time (below).

A parent’s rights

If you are a parent or guardian, you can at any time:

• Review the personal information we hold about your child.
• Delete your child’s information, or your whole account and all of its data.
• Refuse or withdraw consent to any further collection or use of your child’s information. When you withdraw consent, we stop collecting and using that information and delete what we hold for that account.

Inside the paint studio, the parent area lets you delete your cloud account and its data directly. You can also ask us to review or delete your child’s information, or withdraw consent, by post, telephone or email using the details under Contact, below.

Everything a child makes is also always available fully offline: the paint studio works with no account at all, and the “Download backup” option in the parent area saves a copy to your own device that never touches our servers.

Verifiable parental consent

Before any of your child’s information would ever leave your device, we would first confirm that you are the parent and that you consent — using a verifiable method. Cloud save stays off, and nothing is collected, until that consent is confirmed.

Who helps us run it

We use a small number of service providers strictly to operate the feature on our behalf — a sign-in provider (Clerk) and cloud hosting/storage (Cloudflare). They act only as our providers for internal operations and are not permitted to use children’s information for their own purposes. We do not share children’s information with anyone else.

Contact

Doodlewhirl is run by Sparkfield. The person responsible for this site and for this notice is Amir Gabay. For any question about this page or about your child’s privacy, you can reach us by post, by telephone or by email:

Version 1. Describes a feature that is not yet available; an updated version will be published before it is turned on.