Privacy Policy

How We Handle
Your Data

Last Updated: October 18, 2026

Short version: We collect only what we need to run the service. We don't sell your personal data. You have rights — and we'll honor them.

Contents

  1. Who We Are
  2. Data We Collect
  3. How We Use It
  4. Third-Party Services
  5. Cookies
  6. Data Retention
  7. GDPR Rights (EU/UK)
  8. Privacy Requests We Provide
  9. Children's Privacy and Safety
  10. Security
  11. Policy Changes
  12. Contact Us
01

Who We Are

BLNKBooks is a service operated by BLNKBooks LLC, a Florida limited liability company ("BLNKBooks", "we", "us", "our"). We operate the website at www.blnkbooks.com and provide an AI-powered service that converts your photos into custom coloring book pages and printed books.

For purposes of GDPR, BLNKBooks LLC is the data controller of your personal information. Our contact details as controller are:

BLNKBooks LLC
1445 Sadler Road #1024
Fernandina Beach, FL 32034
United States
privacy@blnkbooks.com

02

Data We Collect

We collect information in the following categories:

Account Information

  • Email address (required to create an account and receive your orders)
  • Name (optional, used for order fulfillment and personalization)
  • Password (stored as a hashed value — we never see your plaintext password)

Uploaded Photos

  • Photos you upload for coloring page generation
  • These are processed by our AI and stored temporarily to generate your output
  • Photos may depict identifiable faces. We do not use facial images to identify, authenticate, or build recognition profiles

Payment Information

  • We collect billing name and email for payment processing
  • Credit card numbers and full payment details are handled directly by our payment processor — we do not store raw card data on our servers

Order & Delivery Information

  • Shipping address for physical book orders
  • Order history and transaction records

Agreement Records

  • A record of when you accepted our Terms of Service, and which version you accepted
  • The IP address and browser user-agent captured at the moment you accepted
  • A record of your confirmation, given before your first upload, that you are an adult and have the rights and permissions needed for the photos you upload — with the time, the IP address and browser user-agent, and a digital fingerprint of each photo uploaded under that confirmation. We ask again if the wording of the confirmation changes, or if we update our Terms of Service. The fingerprint identifies the file; it is not the photo and does not describe what the photo shows.
  • We keep these records so that both you and we have a clear account of what was agreed and when. They are retained for as long as your account exists.

Usage Data

  • Pages visited and features used
  • Device type, browser, and IP address
  • Conversion events (e.g., uploads, downloads, purchases)
  • Error logs for debugging and service improvement
03

How We Use Your Data

We use your information for the following purposes:

  • Coloring page generation: Your uploaded photos are sent to our AI processing pipeline to create line-art coloring pages. This is the core service.
  • Child-safety screening: Every uploaded photo is checked against fingerprints of known child sexual abuse material before it is stored or converted. This is an automated match against already-known illegal images. We do this voluntarily to help protect children and prevent misuse of the Service — see Section 9 (Children's Privacy and Safety).
  • Order fulfillment: Shipping address and order details are passed to our print fulfillment partner to produce and ship your physical books.
  • Account management: Email and account data are used to authenticate you, send order confirmations, and provide customer support.
  • Payment processing: Billing information is used to charge for your purchases.
  • Service improvement: Aggregated usage data helps us improve AI output quality and the overall product experience.
  • Marketing (opt-in only): If you opt in, we may send product updates, promotions, and tips. You can unsubscribe at any time via any email we send.
  • Legal compliance: We may process data to comply with applicable laws, respond to legal requests, and enforce our Terms of Service.

We do not use your photos to train AI models, and the AI services that process them do not use your photos for training under the paid API terms that govern our use of those services. The same applies to anything you send us by email: our business email provider does not use the contents of your messages or attachments to train generative AI models, and does not serve advertising against them.

Automated Processing and Limited Human Access. Your images are ordinarily processed automatically and are not routinely reviewed by people. Limited authorized personnel of BLNKBooks and its service providers may access an image when reasonably necessary to fulfill your order; provide support you request; investigate suspected fraud, security incidents, safety concerns, or violations of our Terms; resolve a complaint or dispute; maintain or troubleshoot the Service; or comply with applicable law or valid legal process. We restrict such access to those who need it and require appropriate confidentiality and security protections.

04

Third-Party Services

We share data with the following service providers to operate BLNKBooks. These providers are contractually bound to protect your data and use it only for the stated purpose.

Google (AI Image Processing)

  • Purpose: Processes your uploaded photos through the Gemini API to generate coloring pages and cover illustrations
  • Data shared: Photo images
  • Retention: Under the paid API terms that govern our use, Google does not use your photos or the generated pages to improve its products. It logs them for a limited period solely to detect and prevent misuse of its service.
  • Privacy policy: policies.google.com/privacy

OpenAI (AI Quality Validation)

  • Purpose: Automatically checks generated coloring pages against your uploaded photo to catch conversion errors
  • Data shared: Reduced-size copies of your photo and the generated coloring page
  • Retention: OpenAI does not use data sent through its API to train its models, and we have not opted in to sharing it. OpenAI keeps API inputs for up to 30 days to monitor for abuse, longer only where the law requires it. It also screens images for known child sexual abuse material and may keep a flagged image for review.
  • Privacy policy: openai.com/policies/privacy-policy

Print Fulfillment Partner

  • Purpose: Prints and ships your physical coloring books
  • Data shared: Shipping name, address, phone number, and order contents (your finished coloring book files). Your email address is not shared.
  • The partner uses this information only to print and deliver your order. To learn which company fulfills your order, email support@blnkbooks.com.

Payment Processor (Stripe)

  • Purpose: Securely processes credit card payments for one-time purchases (we do not offer subscriptions)
  • Data shared: Billing name, email, and card details (Stripe handles card data directly)
  • Privacy policy: stripe.com/privacy

Cloudflare (Image Storage, Delivery & Child-Safety Screening)

  • Purpose: Stores and serves your generated coloring pages and cover images, and automatically screens the images it serves for known child sexual abuse material (CSAM)
  • Data shared: Generated coloring images derived from your uploaded photos
  • How the screening works: images are compared against lists of digital fingerprints of known illegal material, maintained by child-protection organizations. This is an automated match against already-known images. The screening is not used to analyze, profile, or train anything on them — see Automated Processing and Limited Human Access in Section 3.
  • Privacy policy: cloudflare.com/privacypolicy

Cloudflare Turnstile (Bot Protection)

  • Purpose: Confirms that a real person, rather than an automated script, is requesting a coloring page preview. This is what protects the free preview allowance from bulk automated abuse
  • Data shared: Your IP address, browser and device characteristics, and how you interact with the check. No photo, name, email address, or account information is sent
  • How it works: the check runs in your browser and usually completes without asking you to do anything. Cloudflare states that Turnstile does not use the data it collects to train AI models and does not track you across other websites
  • Privacy policy: cloudflare.com/privacypolicy

Microsoft PhotoDNA (Child-Safety Screening of Uploaded Photos)

  • Purpose: Checks every photo you upload against lists of digital fingerprints of known child sexual abuse material, before the photo is stored or converted
  • Data shared: The uploaded photo only. No name, email address, or account information is sent
  • How the screening works: your photo is converted into a numerical fingerprint and compared against fingerprints of images already known and confirmed to be illegal. It is a match against known images, not an assessment of what your photo shows. The screening is never used to analyze, profile, or train anything on them — see Automated Processing and Limited Human Access in Section 3.
  • Retention: Microsoft does not keep your photo. It is converted to a fingerprint and discarded.
  • Privacy policy: privacy.microsoft.com/privacystatement

Postmark (Transactional Email)

  • Purpose: Sends account verification, order confirmations, and support replies
  • Data shared: Email address, name, and order details
  • Privacy policy: postmarkapp.com/privacy-policy

Google Workspace (Business Email)

  • Purpose: Hosts the mailboxes behind our support@, hello@, legal@, and privacy@ addresses, so that email you send us reaches us and we can reply
  • Data shared: Whatever you choose to include when you email us — your name, email address, order details, and any photos or files you attach
  • Google does not serve advertising against this mail, and does not use its contents to train generative AI models outside our account
  • Privacy policy: policies.google.com/privacy

Google (Maps, Fonts, Sign-in)

  • Purpose: Address autocomplete at checkout (Maps), web fonts, optional "Sign in with Google", and bot protection on the account signup form (reCAPTCHA)
  • Data shared: IP address and interaction data; shipping address input at checkout; your account email if you choose Google sign-in; for reCAPTCHA, your browser and device characteristics and how you interact with the signup page
  • Privacy policy: policies.google.com/privacy

Meta / Facebook (Sign-in)

  • Purpose: Optional "Continue with Facebook" login
  • Data shared: Basic profile and email, only if you choose this login method
  • Privacy policy: facebook.com/privacy/policy

Hosting & Infrastructure

  • Our application runs on cloud infrastructure (Render.com and Neon). Server logs may contain IP addresses and usage metadata for operational purposes.

Cloudflare Web Analytics (Site Usage Statistics)

  • Purpose: Counts visits to our pages so we can see which pages are used, how quickly they load, and how visitors arrive (for example, from a link shared on social media). We see only totals, never a record of an individual visitor
  • Data collected: the page visited, the page that linked to it, the time of the visit, page-load timing, and general browser, operating-system and country information. No photo, name, email address, or account information is sent
  • How it works: a small script on our pages reports the visit to Cloudflare. Cloudflare states that Web Analytics does not use cookies or your browser’s local storage to measure visits and does not identify individual visitors from their IP address or browser details. We do not use it for advertising, and we do not combine it with any other data about you
  • Privacy policy: cloudflare.com/privacypolicy

We do not sell, rent, or trade your personal data to any third party for their marketing purposes.

05

Cookies & Tracking

We do not use advertising, analytics, or tracking cookies. There is nothing here to opt out of. Our site usage statistics (Cloudflare Web Analytics) are collected without cookies.

Essential cookies only. The only cookie we set is a short-lived session cookie (about 10 minutes) used to complete sign-in when you choose "Sign in with Google" or "Continue with Facebook". It is required for that sign-in to work and expires on its own.

Once you are signed in, your login is kept in your browser's local storage rather than in a cookie. Clearing your browser data signs you out.

Most browsers allow you to control cookies through their settings. Blocking the session cookie will prevent social sign-in from completing. For more on managing cookies, visit aboutcookies.org.

06

Data Retention

We retain your data only as long as necessary:

  • Account data: Retained for the life of your account. If you delete your account, personal data is purged within 30 days, with these exceptions, each described below: order records, usage logs, and any item under a child-safety hold. The record of which Terms versions you accepted is deleted with your account.
  • Uploaded photos: Stored for up to 90 days after generation to allow re-downloads. After that, source photos are deleted, unless a child-safety hold applies — while material is held we pause routine deletion and cannot honor a deletion request for that material, as described under Child-safety screening and preservation below. You can request earlier deletion — see Section 7 (GDPR Rights) or Section 8 (Privacy Requests We Voluntarily Provide).
  • Order records: Retained for 7 years to comply with financial and tax regulations.
  • Usage logs: Retained for up to 12 months for security and debugging, then aggregated or deleted.

Child-safety screening and preservation. We use automated tools to compare uploaded photos and generated images with digital fingerprints of previously identified illegal material. A potential match is an automated indicator, not a legal determination. Screening may fail to identify prohibited content or may produce a false positive. We may pause processing or restrict content or an account while we assess a potential match. Images are not routinely reviewed by people as part of automated screening, but limited authorized access may occur for safety, support, security, troubleshooting, or legal reasons described in this policy.

While a potential match is being assessed, we place a hold on the affected content — which may be an uploaded photo, a generated image, or the order they belong to — together with any related records or context that the law requires us to preserve. A hold pauses the deletion schedules above and overrides deletion requests for the held material only. Access to held material is restricted. When a hold ends, because the assessment finds the match was mistaken or because a required preservation period has run, the material is deleted or returned to the ordinary deletion schedules above, unless another retention basis described in this policy applies.

When we obtain actual knowledge of facts or circumstances indicating an apparent violation covered by 18 U.S.C. §2258A, we report it to NCMEC's CyberTipline as soon as reasonably possible. We preserve the contents of a report for at least one year after submission, together with any reasonably accessible material that may provide context or additional information, as required by law, and restrict access to that material. NCMEC may forward reports to law enforcement. We may also disclose information to law enforcement when required or permitted by law.

A child-safety hold is the only reason we extend the photo-deletion periods described above, except where another retention basis disclosed in this policy applies. We do not use a hold for any other purpose.

07

GDPR Rights (EU & UK Residents)

If you are located in the European Union or United Kingdom, the General Data Protection Regulation (GDPR) grants you the following rights regarding your personal data:

Right of Access

Request a copy of all personal data we hold about you.

Right to Rectification

Correct inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your personal data ("right to be forgotten"), except where we are legally required to retain it — see Data Retention.

Right to Portability

Receive your data in a portable, machine-readable format.

Right to Restriction

Restrict processing of your data in certain circumstances.

Right to Object

Object to processing based on legitimate interests or for direct marketing.

Legal Basis for Processing

  • Contract performance: Processing your photos and fulfilling orders
  • Legitimate interests: Service improvement, security, fraud prevention
  • Consent: Marketing communications (you can withdraw consent at any time)
  • Legal obligation: Financial record-keeping, responding to legal requests

International Transfers: BLNKBooks is based in the United States. If you are in the EU/UK, your data will be transferred to and processed in the US. We use Standard Contractual Clauses (SCCs) and other approved mechanisms where required to ensure adequate protection.

To exercise any GDPR right, email privacy@blnkbooks.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

08

Privacy Requests We Voluntarily Provide

Whether or not a particular state privacy law applies to BLNKBooks, we currently allow United States residents to request access to, correction of, or deletion of their personal information and to request a portable copy of information associated with their account. We may verify your identity before acting on a request, and legal, security, transaction-completion, record-retention, and other applicable exceptions may limit what we can provide or delete. BLNKBooks does not sell personal information or share it for cross-context behavioral advertising. Providing these options voluntarily does not constitute an admission that any particular privacy statute applies to BLNKBooks or waive any exemption available under law.

Those requests are described below. They are available to residents of every US state, not California alone.

Right to Know

You have the right to know what personal information we collect, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.

Right to Delete

You have the right to request deletion of personal information we have collected from you, subject to certain exceptions (e.g., completing transactions, legal obligations).

Right to Opt-Out of Sale

We do not sell your personal information, and do not share it for cross-context behavioral advertising. You therefore do not need to opt out of a sale, and there is no "Do Not Sell My Personal Information" link because there is nothing to opt out of.

Right to Non-Discrimination

We will not discriminate against you for making any of these requests. Doing so will not result in different pricing, service quality, or access to features.

Categories of Personal Information Collected (Last 12 Months)

  • Identifiers: email address, IP address, user ID
  • Personal records: name, shipping address, order history
  • Commercial information: transaction and payment records
  • Internet activity: browsing behavior on our site, feature usage
  • Photos/images uploaded by you for the coloring service

To submit a CCPA request, email privacy@blnkbooks.com with "CCPA Request" in the subject line. We will verify your identity and respond within 45 days.

09

Children's Privacy and Safety

BLNKBooks is intended for adult customers and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at privacy@blnkbooks.com and we will delete that information promptly.

If you upload photos of minors for coloring page generation, you represent that you have the legal right to do so (as a parent, legal guardian, or authorized representative) and that such use is appropriate. See our Terms of Service — Likeness & Consent section for full requirements.

Child-Safety Screening. To help protect children and prevent misuse of the Service, BLNKBooks voluntarily uses automated safety tools, including hash matching, to compare uploaded photos and generated images against digital fingerprints of known child sexual abuse material. This screening is automated and is not used for advertising or profiling. An automated match may cause processing to stop and the relevant content or account to be restricted while the match is evaluated. When we become aware of apparent child sexual abuse material, we preserve and report the material and related information as required by applicable law, including 18 U.S.C. § 2258A. Automated screening reduces risk but cannot identify every prohibited image.

Uploaded photos are checked before they are stored or converted, using Microsoft PhotoDNA; generated coloring pages are checked by Cloudflare as they are served. Uploading prohibited material is strictly forbidden; see our Terms of Service — Prohibited Content.

10

Security

We take reasonable technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These include:

  • Encrypted data transmission (HTTPS/TLS)
  • Encrypted storage of sensitive credentials
  • Access controls limiting who can access production systems
  • Regular security reviews

No method of transmission over the internet is 100% secure. While we work hard to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your rights, we will notify you in accordance with applicable law.

11

Policy Changes

We may update this Privacy Policy from time to time. Nonmaterial changes, such as corrections, clarifications, or updated contact information, take effect when posted and are identified by the "Last Updated" date at the top of this page.

Material changes require your acceptance. This Privacy Policy forms part of your agreement with BLNKBooks, so a material change to it is treated as a material change to the Terms of Service. We will give you reasonable notice and ask you to affirmatively accept the updated policy before you place another order or continue using the features the change affects. Continued browsing alone is not acceptance of a material change.

If you do not agree to a change, you do not have to accept it. You may stop using the service and contact us to request account deletion at any time.

12

Contact Us

For privacy questions, data requests, or to exercise any of your rights, reach out:

  • Privacy inquiries: privacy@blnkbooks.com
  • General support: support@blnkbooks.com
  • Legal / DMCA: legal@blnkbooks.com

Or write to us:

BLNKBooks LLC
1445 Sadler Road #1024
Fernandina Beach, FL 32034
United States

We aim to respond to all privacy-related requests within 30 days.

Related policies: Terms of Service · Refund & Return Policy

BLNKBooks

© 2026 BLNKBooks. Custom Coloring Books from Your Photos.

Home Terms of Service Privacy Policy Refund Policy Support