Privacy policy

We collect as little as we can: what you give us when you create an account, and what we need to run the free monthly limit and keep the site safe. We do not sell your personal information, we do not use advertising or tracking cookies, and you can export or delete your account at any time. This policy explains what we collect, why, who helps us, how long we keep it and the rights you have.

Last updated: 1 October 2026.

Who is responsible for your data?

Joyful Coloring (joyfulcoloring.com) is published by Infiscroll Digital OPC Pvt Ltd, a company registered in India, which decides how your personal data is used (the "controller" under the GDPR, the "data fiduciary" under India's Digital Personal Data Protection Act). You can reach us about anything in this policy at [email protected] or through the contact page.

What do we collect, and why?

Each line below names the data, what we use it for and the legal basis we rely on under the EU and UK GDPR.

• Account details: your email address, an optional first name, your password (stored only as a one-way secure hash, never readable by us), your confirmation that you are 13 or older, and the settings you choose (paper size, age groups). Used to run your account. Basis: our contract with you.
• What you do with your account: the sheets you save, print and download, your collections and books, your online colorings, poll votes and purchases, so you can find them again. Basis: contract.
• Visitors without an account: a random identifier in a first-party cookie (jc_anon) so we can count the 15 free sheets a month, and a salted one-way hash of your network (IP) address to stop abuse of the free limit. We never store the address itself and cannot turn the hash back into it. Basis: our legitimate interest in offering free sheets fairly and preventing abuse.
• Messages and comments: what you send through the contact form (your name, email and message) and the comments you post (display name and text). Email addresses and phone numbers typed into a comment are removed before anyone sees it. Basis: legitimate interest in answering you and running comments.
• Emails you ask for: account confirmation, password resets, receipts, gift delivery and renewal reminders (basis: contract), and the weekly new pages email only if you opt in (basis: consent, which you can withdraw with the unsubscribe link in every email or on your account page).
• Purchases: payments are handled by a payment provider acting as the merchant of record, named at checkout. It collects your payment details under its own privacy policy; we receive your order, subscription status and country, never your card number. Basis: contract, and our legal obligations for accounting.
• Security and error records: when something breaks we record the error, the page path (without the part after "?") and your browser type, so we can fix it. Short-lived counters keyed to hashed addresses or account numbers slow down abuse. Basis: legitimate interest in a working, secure site.
• Counts, not people: we count page views, previews, prints and downloads per page and per day, and the words typed into the site search, without linking any of it to a person, so we know what to make next. Basis: legitimate interest.

We do not use advertising, analytics or social media tracking tools, and we make no decisions about you by automated means that have legal or similar effects.

Who else handles your data?

A few service providers process data for us, only to provide their service, under contracts that require them to protect it:

• Vercel Inc. (United States): hosts the website.
• Neon, a Databricks company (United States): hosts our database.
• Cloudflare Inc. (United States): domain name service, file storage for the coloring sheets and site files, and protection against attacks.
• Resend (United States): sends the emails.
• Our payment provider, named at checkout, acting as merchant of record for purchases.

We may also disclose data when the law requires it, or to protect our rights or someone's safety. If the business is ever sold, your data would pass to the new owner under this policy.

Is your data sent to other countries?

Yes. We are based in India and our providers store data in the United States. Where the EU or UK GDPR applies, transfers rely on the European Commission's standard contractual clauses (and the UK addendum) or on the recipient's certification under the EU-US Data Privacy Framework.

How long do we keep it?

• Account data: until you delete your account. Deleting it removes your details, saved sheets, collections, colorings and history. Order and subscription records stay, no longer linked to you, for as long as tax and accounting law requires.
• The jc_anon cookie: up to 400 days; the free-limit count it keys resets every calendar month.
• Abuse counters: minutes to hours, removed automatically when their window ends.
• Error records: removed 90 days after the error was last seen.
• Contact messages: up to 24 months after the conversation ends.
• Comments: while they are published, or until you ask us to remove them.

What are your rights?

Depending on where you live (for example the EU, the UK, California, other US states or India), you have the right to:

• see the data we hold about you and get a copy: the account page has a one-click export;
• correct it, which you can do on your account page;
• delete it, which you can do on your account page at any time;
• object to or restrict processing based on legitimate interest;
• withdraw consent to the newsletter at any time;
• name someone to act for you (India), and not be treated differently for using these rights.

For anything you cannot do on your account page, email [email protected]. We answer within one month. You can also complain to your local data protection authority; in India, grievances go first to us at the same address, and then to the Data Protection Board of India.

California and other US states: we do not sell personal information and do not share it for cross-context behavioural advertising. The categories we collect are listed above (identifiers such as email, account and purchase records, and internet activity on this site); they come from you and your browser and are used only for the purposes above.

What about children?

Joyful Coloring is a general-audience site made for the adults who print coloring pages for themselves, their families and their classes. Accounts are for people aged 13 and over, and we do not knowingly collect personal information from children under 13. Where local law sets a higher age for consent to email newsletters, a parent must agree for younger teens. If you believe a child under 13 has given us personal information, email [email protected] and we will delete it.

How do we protect it?

The site runs only over encrypted connections (HTTPS), passwords are stored as one-way hashes, the coloring files and records are kept in private storage that only the site can read, and staff access to the admin is limited by role and logged.

Which cookies do we use?

We use only cookies and browser storage that the site needs to work or that keep a choice you made. The full list is in the cookie policy.

If we change this policy in a way that matters, we will update the date above and, for account holders, tell you by email before the change takes effect.