Paint CraftFormerly Paint Me
Create

Privacy Policy

This policy explains the data needed to operate Paint Craft and the optional analytics and advertising you can choose.

Policy version: 2026-11-05.2. By using Paint Craft, you agree to our Terms of Use and acknowledge this Privacy Policy. We do not show a mandatory acceptance popup or require an acceptance checkbox.

For new visitors, analytics and advertising preferences are enabled automatically when the app loads. These defaults are not recorded as an explicit consent action. Previously saved choices, including opt-outs, are respected. Use Privacy choices below or in the footer to turn either setting off at any time without losing access to painting or purchases.

Photo Processing

Easy photo-to-canvas conversion runs in your browser. For Masterpiece, your cropped photo is sent to our servers for automatic preparation; the source and resulting digital files are stored privately and linked to your account for purchase fulfilment and future downloads.

Data We Collect

While analytics is enabled, Paint Craft records usage actions and outcomes to understand where the service helps or fails. These records are not anonymous: they may be linked to a session, a stable device identifier and an account email. Analytics event payloads do not include photo contents, passwords, card details, private access links, keystrokes or typed support/feedback messages. Categories include:

  • Pages & navigation: page views, session starts, menu and call-to-action clicks, scroll depth, FAQ expansions, light/dark theme toggles, and clicks on outbound or resource links.
  • Canvas creation & painting: starting, completing, or failing a canvas conversion; uploading a photo; starting, resuming, progressing (including 25/50/75% milestones), and completing a painting; and in-studio actions such as using a hint, quick-fill, easy mode, the "Teach me" guide, brush mode, and head-start.
  • Downloads & sharing: exporting or downloading a canvas, sharing a painting, and submitting or viewing a painting featured in the community gallery.
  • Monetisation: clicks on affiliate and "Buy Me a Coffee" links, rewarded-ad views, AI image generation, hint purchases, and payment-flow steps (opening the payment modal, selecting a plan, completing or failing a payment). We never see or store your card or payment-account details.
  • Account & auth: sign-up, log-in, log-out, viewing your account, updating your profile, and uploading an avatar.
  • Feedback & support: feedback starts, successes and failures; form submissions and validation failures; support and guarantee links; API route, method and response status. Message bodies are not copied into analytics.
  • Service outcomes: Masterpiece preparation and inline-authentication steps, full-screen artwork views, navigation between creation steps, generic control interactions, page exits and runtime/network failure categories. We do not collect error messages or stack contents through optional event analytics.

Each recorded analytics event may include a timestamp, a normalised page or API route, the referring site’s origin (not its query string or fragment), country code, session/device identifiers, email where known and a small allowlisted metadata payload such as difficulty, export format, status or selected plan. Private route identifiers are redacted. IP addresses are not stored in optional analytics events. Request IPs may still be processed for essential security and abuse prevention, independently of optional analytics.

In addition to events, we collect:

  • Optional session & device information: session/device identifiers, device category, screen and viewport sizes, device pixel ratio, language, connection type and touch capability.
  • Optional referral information: the referring site’s origin. Query strings, URL fragments and campaign free text are stripped from new analytics event payloads.
  • Optional canvas usage review (while analytics is enabled): dimensions, colour count, region count, difficulty, painting progress and active time, and a thumbnail of the generated numbered outline (and a small resized copy of your source photo) when you start painting.
  • Account information: if you create an account, your name, email address, optional age, a securely hashed password, and an optional avatar image.
  • Masterpiece files: your cropped source photo, numbered canvas, finished artwork and paint-colour list, with account ownership, dimensions, colour and region counts, payment references and email-delivery status. These are not published in the featured gallery automatically.
  • Purchase & contact details: name and email for hint purchases, support tickets, and optional painting reminders; purchase records include the amount, currency, and a payment reference from our payment provider.
  • Regional pricing: approximate country from request headers, a region cookie, or browser-timezone fallback when unavailable. No browser geolocation permission is requested. Regional checkout calculations work even when analytics is turned off.
  • Feedback submissions: anything you voluntarily provide through the feedback form (name, email, rating, message).

How We Use This Data

  • To understand how people use Paint Craft and identify areas for improvement.
  • To diagnose bugs and performance issues, and analyse user funnels and conversion patterns.
  • To operate accounts, hints, purchases, and the community gallery.
  • To send transactional and optional emails, such as a welcome message, painting reminders, and feature-approval notices (see Email Communications).
  • To measure the performance of affiliate and support links that help keep Paint Craft free.
  • To respond to feedback and support requests you submit.
  • To ensure the service is used appropriately (see Terms of Use).

Data Storage

Saved projects (canvases, painting progress, and thumbnails) are stored in your browser's IndexedDB — an account is optional. Clearing your browser data will remove locally saved projects.

Analytics events, canvas metadata, account records, purchase records, shared/featured paintings, and feedback are stored on our servers. Passwords are stored only as a secure one-way hash.

Record Retention

Turning off analytics stops new optional analytics collection but does not automatically erase previously stored event records.

Account records, purchase receipts, paid artwork, feedback, support conversations and analytics records do not have an automatic 30-day deletion rule. They remain stored for service operation, account downloads, support and applicable recordkeeping needs until reviewed for deletion. You may request access, correction or deletion through Support; we may need to verify ownership and retain records needed for legal obligations or disputes. Hosting, payment and email providers may maintain their own operational or security logs under their policies.

Support, Sharing and Children’s Photos

Support stores your contact details, messages, order reference and replies. Staff-only notes are not included in customer responses. Guest conversation links and password-reset links carry private access credentials; keep them confidential. Share links and approved featured paintings are intentionally public. Only upload images you have permission to use, and obtain appropriate parental or guardian permission for children’s photos. Public sharing is a separate action, not a requirement for creating artwork.

Email Communications

If you create an account we may send a one-time welcome email. If you provide your email when creating a painting, you may receive occasional reminders to finish it, and a notification if a painting you submit to the gallery is approved. Paid Masterpiece and Easy export purchases trigger transactional delivery emails with account-protected download links, printing guidance, guarantee information, an optional feedback invitation, and Terms and Privacy links. You may request a resend from your order page. These emails are tied to actions you take.

Cookies

Essential authentication cookies keep signed-in customers and administrators authenticated. Browser storage also holds local paintings, hints, regional settings and versioned privacy preferences, including whether they were initialized automatically or saved by you. Historical explicit Terms acceptance records may remain; automatic defaults do not create an explicit acceptance timestamp. Analytics uses a session identifier and a preference cookie while enabled. Google advertising scripts may load automatically while advertising is enabled and may use cookies or other storage under Google’s policies. When you turn advertising off, we stop loading those scripts and reload the page; this does not erase cookies already set by third parties.

Your Choices

Use Easy without an account. Analytics and advertising start enabled for new visitors; open Privacy choices above or in the footer to turn either off, or use “Turn optional tracking off” to disable both. Your saved opt-outs persist on this browser and are not switched back on by a policy-version update. Clearing site storage removes those saved choices, so a later visit may use the defaults again. Essential accounts, purchase fulfilment, support and abuse prevention still operate. Clear local paintings through browser storage controls, but note that clearing storage does not delete server records or paid orders. Request data access, correction or deletion through Support. Browser or content-blocking settings may also prevent optional events; we do not promise to capture every interaction.

Third Parties

The "Buy Me a Coffee" link and our payment provider (Razorpay) direct you to external services with their own privacy policies; we receive a payment reference and the name and email you provide, never your card details. Some outbound product links are affiliate links (including Amazon Associates), and the destination sites set their own cookies and policies. We also rely on infrastructure providers for hosting, email delivery, and analytics processing.

Changes

This policy may be updated as data practices change. The current version is shown above. Continued use is subject to the current Terms and this Privacy Policy, without a mandatory acceptance popup. Analytics and advertising remain independently adjustable through Privacy choices. This notice does not limit rights or consent requirements under applicable law.

Contact

Questions and data-rights requests can be submitted through Support. Do not send passwords, payment credentials or private access tokens in your message.