Privacy policy

1. Operator

Operator: colorbookpage · Contact: dobestray@naver.com

2. Information we do not collect directly

No login is needed to view, download, or color pages. Except when you send the inquiry form (section 8) or choose to create an account (section 9), we do not collect names, phone numbers, email addresses, or location. Creating an account is optional.

3. Information processed automatically

• Access logs: our hosting and security provider (Cloudflare) processes IP addresses, browser type, time of access, and requested addresses in server logs and visit statistics, for stability, security, and traffic measurement.
• Download counts: we store the number of downloads per page. To count repeated clicks by the same person on the same day only once, we turn your IP address and the date into an irreversible value (a hash) and keep it with the page name and date for 90 days, then delete it. The IP address itself is not stored, and because the date is mixed in, visits on different days cannot be linked. A marker is also kept in your device storage so the same device is not counted twice.
• Coloring progress: pictures you color online are saved only in your browser storage on your device and are not sent to our servers. Clearing browser data removes them.
• Fonts: fonts are loaded from Google Fonts, so your IP address may be sent to Google.

4. Advertising and affiliate links

• Google AdSense: the Service uses Google AdSense. Google and its advertising partners may use cookies to show ads based on your visits to this and other sites. You can turn off personalized ads at adssettings.google.com or opt out at www.aboutads.info. You can read how Google uses information from partner sites at policies.google.com/technologies/partner-sites.
• Coupang Partners (Korean pages): some Korean pages show Coupang Partners banners; a commission may be earned on purchases. Coupang may set cookies.
• Affiliate links: if you click an external affiliate ad, that company’s privacy policy applies.

5. Cookies and device storage

The Service uses device storage for essential features (showing download counts, saving coloring progress), and advertising or analytics providers may set cookies. When a member logs in, we set cookies that keep you logged in for 30 days (cbp_sid, a login token that other sites and scripts cannot read, and cbp_li, which only marks that you are logged in). They are removed when you log out or delete your account. You can block or delete cookies in your browser settings; some features may then be limited.

6. Children

The Service offers material that parents and teachers use together with children. Only people aged 16 or over can create an account, and we do not knowingly collect personal information from children. If you believe we have, email us and we will delete it promptly.

7. Your rights

You may ask to access, correct, delete, or restrict the processing of your information. Members can edit their details, withdraw newsletter consent, and delete their account themselves on the [My account] page. Name and email sent through the inquiry form can be viewed or deleted on request. Other data does not identify you, so clearing your browser data usually resolves it. For other requests, email us. Users in the EU and UK can exercise their GDPR rights (access, rectification, erasure, portability, objection) the same way.

8. Information received through the inquiry form

• When: only when you press [Send inquiry] in the advertising and partnership inquiry form. [Send by email app] does not go through the Service; it sends from your own email app.
• What: inquiry type, name (contact person), reply email, company (optional), and message.
• Purpose: to read and reply to your inquiry. We do not use it for other purposes or share it with third parties.
• Retention: stored in the Service database (Cloudflare D1) and deleted within one year after the inquiry is handled.
• Spam control: to limit repeated submissions we store only a hashed value derived from the connecting address, not the IP address itself.
• Children under 13 should not use this form.

9. Information received when you create an account

• When: only when you create an account yourself on the [My account] page. An account is optional; every page can be used without one.
• What: email, password (stored only as an irreversible value, never in plain text), role (parent, teacher, etc.), name (optional), children’s age groups (optional), the language you signed up in, your country (country code of the connection), whether you agreed to news about new pages, sign-up and login times, and consent records.
• Purpose: to provide your account and keep you logged in, to send news about new pages (which may include promotional content) if you agreed, and to improve the Service with statistics that do not identify anyone (number of members by role and country).
• Learning records: when a member uses the Hangul levels, we save the stars earned for each item (trace, copy and dictation), how many times it was written, and how many sessions were used each month. We use them to let you continue where you left off and to manage monthly usage. Pictures of your handwriting are not stored. These records are deleted with your account.
• Retention: account information is kept until you delete your account and is deleted immediately when you do. Records of consent and withdrawal are kept for 3 years as proof of consent, with the email replaced by an irreversible value, and then deleted.
• Storage: the Service database (Cloudflare D1, Asia-Pacific region). We do not sell member information or share it with third parties.
• Security: login attempts are rate-limited and login sessions are stored only as irreversible values. Changing your password logs out all your other devices.
• Collecting pages as a PDF: when a member gets pages as a PDF, we save the number of PDFs and pages each month and a value that identifies each set (an irreversible value made from the list of pages). We use it to count turns and delete it when you delete your account. The list of pages you add is stored only on your device.
• Password reset requests: when you ask for a reset on the login screen, we record the time of the request on the account that matches the email. After checking it, the site operator emails a temporary password to that address and asks you to choose a new password after logging in. Handled requests are deleted after 90 days and when you delete your account.
• Email verification is not available yet.

10. Changes

If this policy changes, we will post the new version here with a new effective date.