Crayon DreamingA Skella & Co Project

Privacy Policy

Last updated: 13 April 2026

Crayon Dreaming is operated by Skella & Co ABN (an Australian business). We respect your privacy and are committed to protecting your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy describes what personal information we collect, why we collect it, how we use and store it, and your rights regarding that information. By using crayondreaming.com (“the Service”), you agree to the practices described here.

1. Information we collect

Information you provide

  • Email address when you create an account (used for authentication via magic link sign-in).
  • Payment information when you subscribe or purchase a printed book. Payment details are processed directly by Stripe and are never stored on our servers.
  • Creation prompts and style choices you enter when generating colouring pages.
  • Gift book details such as recipient name, age, interests, occasion, and sender name when you create a gift book.

Information collected automatically

  • IP address for usage tracking and abuse prevention (e.g. enforcing free creation limits).
  • Browser fingerprint cookie (a random identifier, not your actual fingerprint) to track free usage limits.
  • Country inferred from your IP address by our hosting provider (Vercel) for geo-aware pricing.
  • Analytics data via PostHog (EU-hosted), including pages visited, features used, and session duration. No personally identifiable information is sent to PostHog.
  • Error reports via Sentry when something goes wrong, which may include your browser type and the page you were on.

2. How we use your information

  • To provide and operate the Service, including generating colouring pages and printed books.
  • To authenticate your account and send sign-in links.
  • To process payments and fulfil orders via Stripe and our print partner.
  • To enforce usage limits and prevent abuse.
  • To improve the Service based on aggregated, non-identifying usage patterns.
  • To diagnose and fix errors.
  • To communicate with you about your account or orders (transactional emails only).

We do not sell your personal information. We do not send marketing emails unless you explicitly opt in to receive them.

3. Third-party services

We share personal information with the following third parties only to the extent necessary to operate the Service:

  • Stripe(payment processing) — receives your email and payment details. See Stripe's Privacy Policy.
  • Vercel(hosting) — processes requests including your IP address. See Vercel's Privacy Policy.
  • Resend(email delivery) — receives your email address for sending sign-in links and order confirmations.
  • PostHog(analytics, EU-hosted) — receives anonymised usage data.
  • Sentry(error tracking, EU-hosted) — receives error reports with technical context.
  • Lulu(print fulfilment) — receives shipping address and book content for printed book orders.
  • Neon(database hosting, Asia-Pacific) — stores account and creation data.

4. Data storage and security

Your data is stored on servers operated by Neon (Asia-Pacific region) and Vercel (global CDN). Images are stored in Vercel Blob Storage with private access controls.

We use industry-standard security measures including HTTPS encryption, HttpOnly secure cookies, and role-based access controls. Payment information is handled entirely by Stripe and never touches our servers.

While we take reasonable steps to protect your information, no internet transmission is completely secure. We cannot guarantee absolute security.

5. Overseas disclosure

As required by APP 8, we disclose that your personal information may be processed by third-party service providers located outside Australia, including in the United States (Stripe, Vercel, Resend, Lulu) and the European Union (PostHog, Sentry). We take reasonable steps to ensure these providers comply with the Australian Privacy Principles or equivalent protections.

6. Cookies

We use the following cookies:

  • cd_session— authentication session cookie (HttpOnly, 7-day duration).
  • cd_fp— anonymous usage tracking cookie (HttpOnly, 1-year duration). Used to enforce free creation limits.
  • cd_geo— country code for geo-aware pricing (set by middleware, not personally identifiable).

We do not use advertising cookies or third-party tracking cookies.

7. Your rights

Under the Australian Privacy Act, you have the right to:

  • Access the personal information we hold about you.
  • Correct any inaccurate or out-of-date information.
  • Delete your account and associated data. You can delete your account from the account menu at any time.
  • Complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if you believe we have breached your privacy.

8. Children's privacy

Crayon Dreaming is designed for families, including children. We do not knowingly collect personal information from children under 16. Children should use the Service under the supervision of a parent or guardian who manages the account.

If you believe a child has provided personal information to us without parental consent, please contact us and we will promptly delete it.

9. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by updating the “Last updated” date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact us

If you have questions about this privacy policy or wish to make a privacy-related request, contact Skella & Co: