Privacy policy

The short version

• No accounts, no advertising, and no analytics or tracking scripts on this site.
• Our website doesn’t set its own cookies.
• The free studio keeps drawings in your browser, on your device. They’re never uploaded to us.
• If you contact us, we keep what you send so we can reply, then delete it within 24 months.
• Payments happen on Gumroad, not on this site.

Who we are

Puddleleaf Studio, Brisbane, Queensland, Australia. Contact: [email protected].

When you browse this site

The site is hosted and delivered by Cloudflare. Like any web host, Cloudflare processes technical information to deliver pages and protect the site, such as your IP address, browser type and the pages requested. Cloudflare handles this under its own privacy policy. We don’t add analytics, advertising or social-media tracking scripts, and we don’t use this information to build profiles of visitors.

Our site doesn’t set cookies. Cloudflare may set a strictly necessary security cookie if it needs to check whether a visitor is a bot.

When you follow a link from our site to Gumroad or another site, our pages ask your browser not to send the address of the page you came from.

The online colouring studio

The studio saves your drawings and any books you load into your browser’s own storage (IndexedDB) on your device, and keeps a copy of the studio files so it can work offline. None of this is sent to us. You can delete it at any time by clearing this site’s data in your browser settings. The studio doesn’t need an account, a name or a photo.

Contact and book-idea forms

If you use a form on our contact page, we collect what you type: your name, email address, topic and message (for book ideas, the idea, an optional age range and an optional email). We also record the date, the page you sent it from and a scrambled (one-way hashed) version of your IP address.

• Why: to read and reply to your message, help with orders and licensing, and decide which books to make. The hashed IP address is only used to stop spam and repeated automated messages.
• Where it’s kept: in a private database in our Cloudflare account. Only Puddleleaf can see it. Replies are sent from our Gmail account, so email conversations are also held by Google.
• How long: the hashed IP address is cleared after 30 days, and messages are deleted automatically after 24 months, or sooner if you ask.
• Spam check: the form may use Cloudflare Turnstile, a check that tells people from bots. It processes signals such as your IP address and browser details under Cloudflare’s Turnstile privacy addendum. It doesn’t show ads or follow you to other sites.
• No mailing list: sending us a message doesn’t sign you up for anything.

If the form isn’t switched on yet, it opens your own email app instead, and your message is sent from your email account to [email protected].

Purchases and Gumroad

All purchases happen on Gumroad. Gumroad collects your payment and contact details to process the order and deliver your download, under Gumroad’s privacy policy. As the seller, we can see order details Gumroad shares with sellers, such as your name, email address, what you bought and when. We use them to deliver and support your order and handle refunds. We never see your full card number.

If you choose to follow Puddleleaf on Gumroad for news, Gumroad keeps that list and its emails let you unsubscribe. Gumroad’s sign-up page may use Google reCAPTCHA.

Other sites

Some pages link to other sites, such as Gumroad and YouTube. Those sites have their own privacy policies, which apply once you’re there. We don’t embed videos or social-media widgets on this site.

Children’s privacy

Our books are for children, but this website and its forms are meant for parents, carers and teachers. Children don’t need to give any personal information to use the books or the studio. Please don’t let children use our contact forms, and please don’t send us children’s names, photos or other personal details. If you think a child has sent us information, email us and we’ll delete it.

Sharing and overseas storage

We don’t sell, rent or trade personal information. We only share it with the services that run the site and the shop (Cloudflare, Gumroad and Google for email), or if the law requires it. These providers may store information outside Australia, including in the United States.

Your choices

You can ask us what information we hold about you, ask us to correct it, or ask us to delete it, by emailing [email protected]. We’ll respond within 30 days. If you’re not happy with our response, you can contact the Office of the Australian Information Commissioner.

Changes to this policy

If what the site collects changes, we’ll update this page and the date at the top before the change goes live.