Privacy Policy

Last updated November 4, 2026

Unruffled is made for children, so we collect as little as we can. This page explains what we collect, why, how long we keep it and how to delete it. It includes our notice about children's privacy.

The short version

Children do not give us any personal information. They can print and color without an account.
A parent account holds only the parent's email address, plus a nickname, a picture from our preset set and an age band for each child profile.
Our analytics are counts, not people: no cookies, no tracking scripts, no profiles.
We do not sell or share data, and there are no advertisers or third-party trackers on the site.
A parent can delete a child profile, or the whole account, from the parent area at any time.

Children's privacy notice

We follow the Children's Online Privacy Protection Act (COPPA) and similar laws in Canada, Australia and the UK. We do not ask children for their name, email address, photo, voice, location or any free text, and the coloring screens have no chat, comments or uploads.

A parent can set up a child profile in the parent area. A profile holds only:

a nickname chosen by the parent (letters, numbers and spaces, up to 24 characters; it does not need to be the child's real name),
an avatar picked from our own preset pictures (a child never uploads a photo), and
an age band (for example toddler or 6 to 8), never a date of birth.

Pictures a child colors while signed in to a profile are saved under that profile so they can carry on later. Pictures colored without a profile are saved only in the browser on that device; they never reach us.

The "add a name" option on a printable page puts a title such as "Mia's Dinosaur" on the PDF. The name is used to make the file and is not stored or logged.

What we collect from parents

Email address, to send sign-in links (we use passwordless sign-in) and messages about your account and purchases. If you choose Continue with Google or Continue with Apple instead, we receive only your email address and the fact that Google or Apple has confirmed it; we do not get your contacts, photos or any other account data, and we never post anything for you.
Plans and purchases. If you buy a plan or a pack, payment is handled by Stripe on its own pages. We never see or store your card number. We keep a record of what you bought and whether a plan is active.
Sign-in session. While you are signed in to the parent area, a session cookie keeps you signed in, and the session record holds your IP address and browser type for security. It ends when you sign out or the session expires.
Consent records. If we ask for your consent for something (for example, a feature that needs it), we keep when and how you gave it.

Analytics

We count things like page views, prints and PDF downloads so we know which pages are useful. Each count is a running total per page and per day. The site sets no cookie for this, keeps no ID on your device, and stores no IP address or anything else that identifies a visitor. No third-party analytics service is used.

Cookies

Coloring pages and guides set no cookies. The parent area and checkout use a session cookie, needed to keep you signed in. We use no advertising or tracking cookies.

Who we share data with

We do not sell personal information or share it with advertisers. No child data is shared with anyone. To run the service we use a small number of providers that process parent data on our behalf: Stripe for payments, Google and Apple for the optional sign-in buttons, an email delivery service for sign-in and account emails, and our hosting provider. They may use it only to provide that service to us.

How long we keep it

Account data (your email, child profiles and saved pictures) is kept until you delete it or ask us to.
Sign-in links expire after 15 minutes and work once.
Analytics are daily totals with nothing personal in them.
Records of payments may be kept by us and by Stripe for as long as tax and accounting law requires.
Deleted data is removed from our live systems straight away and from backups within 30 days.

Reviewing and deleting your data

Delete a child profile: the profile and every picture saved under it are deleted.
Delete your account: any active subscription is cancelled first, then your account, child profiles, saved pictures, purchases and consent records are deleted.

You can also email us and we will do it for you. A parent can ask us at any time what we hold about their child.

Security

The site runs over HTTPS with a strict content security policy that blocks scripts from any other website. Sign-in links are signed, short-lived and single-use.

Changes and contact

If we change this policy in a way that matters, we will update this page and email parents with an account before the change takes effect. Questions about privacy: [email protected], or see our contact page.