Privacy Policy
Effective September 5, 2026 · Last updated September 5, 2026
The short version, for parents and teachers
- Crayon Corner is made for children. There are no accounts, no sign-ups, no logins and no forms. We never ask a child for a name, an age, an email address, a photo or a location.
- Printing happens entirely inside your own browser. The picture your child colours is never uploaded to us and never leaves the device.
- The site is paid for by advertising, but the ads are contextual only - chosen from the page being viewed, not from any profile of the person viewing it. We do not allow personalised or behavioural ads, remarketing, or cross-site tracking anywhere on this site.
- We do not use Google Analytics or any other visitor-tracking analytics product.
- We never sell or share personal information, and we honour Global Privacy Control signals.
The full detail is below. If anything here is unclear, please write to us at support@regulad.com.
1. Who we are
Crayon Corner (this website) is operated by Regulad Co., Ltd., trading as Crayon Corner. We are the only operator of this site; no one else collects information from visitors here on their own behalf, other than the service providers named in section 8.
You can reach us at:
- Post: Caugiay, Hanoi, Vietnam
- Telephone: 0702058270
- Email: support@regulad.com
This policy covers everything at this website. It does not cover any other website you may reach by following a link from here.
2. What we never collect
It is easier to start with what does not happen here. Crayon Corner has no user accounts and no interactive features that ask a visitor for anything. Specifically, we do not collect, and have no way to collect:
- names, usernames, screen names or nicknames;
- email addresses, telephone numbers or postal addresses - except an email address you type yourself, if you choose to email us;
- dates of birth or ages;
- photographs, video, audio recordings or voice input of any kind;
- biometric identifiers such as face templates, voiceprints or fingerprints;
- government-issued identifiers such as passport, ID card or social security numbers;
- precise geolocation from a device's GPS;
- the drawings themselves. The Print this image button copies the line art into a hidden frame inside your own browser and prints from there. Nothing is uploaded, stored or sent to us at any point.
There is no newsletter, no comment section, no upload form, no login, no shopping cart, no social-media plugin and no embedded video player.
3. What is collected automatically
Like every website, this one cannot be delivered without some technical information passing between your device and the servers involved. When a page is requested, the following is processed:
- IP address - needed to send the page back to you, and used to derive a rough country- or city-level location for ad delivery and abuse prevention. We do not use it to identify you as an individual.
- Browser and device information - the user-agent string, language preference, screen size and similar settings your browser sends by default.
- Request details - the page address requested, the date and time, the referring page if there is one, and the response status.
- Persistent identifiers - see sections 4 and 5. Where these are used at all, they are used only for the limited internal purposes listed in section 6.
This information is written to ordinary server and delivery-network logs. We use it to keep the site online, to fix errors, to protect against attacks and fraud, and to count page views in aggregate. We do not attempt to build a profile of any visitor, and we do not combine this information with anything else.
5. Advertising
Crayon Corner is free, and advertising is what pays for it. Ads are served through Google Ad Manager. Because this site is directed to children, every ad request from every page carries Google's child age treatment signal - the setting previously known as the tag for child-directed treatment (TFCD), now part of Google's unified age-treatment tag.
That signal changes how the ad is served. On this site:
- personalised advertising is disabled;
- remarketing and audience-list targeting are disabled;
- calls out to third-party ad vendors, third-party ad servers and third-party measurement pixels are disabled;
- mobile advertising identifiers are not transmitted;
- Google's ad-serving protections for content aimed at children are applied to the creatives that are eligible to appear.
What remains is contextual advertising: an ad is chosen from the subject of the page and the coarse location of the request, not from anything we or anyone else knows about the person viewing it.
Google's own description of how it uses information in advertising is at policies.google.com/technologies/partner-sites.
6. Children's privacy (COPPA)
We treat the whole of Crayon Corner as directed to children under 13, and we comply with the Children's Online Privacy Protection Act and the FTC's amended COPPA Rule (16 CFR Part 312), which took full effect on April 22, 2026.
We do not collect personal information from children. There is nowhere on this site for a child to enter anything. Because we ask for nothing, we never need verifiable parental consent - and we will not start collecting without obtaining it from a parent first.
Persistent identifiers. The only category of COPPA personal information that arises here is a persistent identifier, such as an IP address or an ad-serving identifier. We rely on the exception in 16 CFR 312.5(c)(7): these identifiers are collected and used solely to support the internal operations of the site, and for nothing else. Stated specifically, as the Rule requires, those internal operations are:
- delivering and rendering the pages you request;
- serving contextual (non-personalised) advertising;
- capping how often the same ad is shown to the same browser;
- detecting and preventing fraud, invalid traffic and abuse, and maintaining security;
- diagnosing and fixing technical faults, and producing aggregate counts of page views;
- maintaining or analysing the functioning of the site.
We do not use a persistent identifier to contact a specific individual, including through behavioural advertising, and we do not permit anyone else to do so with identifiers obtained here. We do not amass or profile children's data, and we do not condition a child's participation on disclosing more information than is reasonably necessary.
If a child writes to us. An email from a child will contain whatever they typed. We use it only to reply once, and then we delete it - see section 7.
Rights of parents and guardians. You may at any time ask us to tell you what information we hold that relates to your child, ask us to delete it, and refuse to permit any further collection or use of it. Write to support@regulad.com and describe the request. We will verify that you are the child's parent or guardian by a means proportionate to the request before we act on it, and we will respond within 30 days. Refusing further collection will not shut your child out - every coloring page will still open and still print.
The FTC publishes guidance for parents at ftc.gov/business-guidance/privacy-security/childrens-privacy.
7. Data retention policy
This is our written data retention policy, published here as 16 CFR 312.10 requires. We keep information only as long as it is needed for the specific purpose it was collected for, and never indefinitely.
| What | Why we need it | Deleted after |
|---|---|---|
| Server and delivery-network logs: IP address, user agent, page requested, timestamp | Serving the site, security, fraud and abuse prevention, fault diagnosis | 30 days, then permanently deleted |
| Ad-serving and frequency-capping identifiers held by Google Ad Manager | Contextual ad delivery, frequency capping, invalid-traffic detection | Per Google's published retention periods for child-directed ad serving; we keep no copy of our own |
| Aggregate page-view counts, with no IP address or identifier and no link to a person | Knowing which coloring pages to draw next | Kept as anonymous totals only |
| Email you send to us, and our reply | Answering your question or request | 12 months from the last message, then permanently deleted |
| Email that appears to come from a child | Sending a single reply | Immediately after replying, and in any case within 14 days |
We retain no personal information collected from a child beyond what is set out above, and we do not keep information on the chance that it might be useful later. Where the law requires us to evidence compliance - for example, that we acted on a deletion request - we keep the minimum record needed to show it.
8. Who receives information, and why
We do not disclose personal information to third parties for their own purposes. The only recipients are the service providers below, each acting for us and for the stated purpose only.
| Recipient (category) | What it receives | Purpose |
|---|---|---|
| Google LLC and its affiliates - Google Ad Manager (advertising technology provider) | IP address, user agent, the address of the page being viewed, ad-serving identifier | Serving contextual ads, frequency capping, invalid-traffic and fraud detection, impression counting |
| Our hosting and content delivery provider (infrastructure provider) | IP address, user agent, request details | Storing and delivering the site, security, abuse prevention |
| Google LLC - Google Fonts (web font provider) | IP address, user agent | Delivering the two typefaces the site is set in |
We may also disclose information where we are legally required to, or where it is necessary to protect the safety of a child, our visitors or the public. If Crayon Corner is ever transferred to a new owner, any information transferred with it stays subject to this policy, and the new owner is bound by it.
9. Legal bases (EEA, UK, Switzerland)
If you are in the European Economic Area, the United Kingdom or Switzerland, the EU GDPR and UK GDPR apply, and Regulad Co., Ltd. is the controller for the processing described here. Our legal bases are:
- Legitimate interests (Article 6(1)(f)) for delivering the site, keeping it secure, preventing fraud and abuse, and counting page views in aggregate. Our interest is running a free, safe, working website; the processing is minimal and profiles no one.
- Consent (Article 6(1)(a)) for any storage of, or access to, information on your device that is not strictly necessary - including advertising storage. Consent is collected before that storage occurs, through a consent management platform certified by Google and integrated with the IAB Transparency and Consent Framework, as Google requires of publishers in these regions. You may withdraw consent at any time, as easily as you gave it; withdrawal does not affect processing already carried out.
- Legitimate interests (Article 6(1)(f)) for replying to an email you choose to send us.
We carry out no profiling or automated decision-making that produces legal or similarly significant effects, and we do not profile children for marketing purposes.
10. Your rights and choices
Depending on where you live, you may have some or all of the following rights: to know what personal information is processed about you and to obtain a copy of it; to have it corrected; to have it deleted; to restrict or object to its processing; to data portability; to withdraw consent; to opt out of targeted advertising, of the sale or sharing of personal information, and of profiling; and to appeal if we refuse a request.
To exercise any of them, email support@regulad.com. A parent or guardian may exercise these rights on behalf of a child, and an authorised agent may act on your behalf where the law allows it. We respond within 30 days, or within 45 days where a US state law gives us that period, and we will tell you if we need longer.
One practical note: because we hold no account and no name, we usually cannot connect an IP address in a 30-day log to the person asking. If we cannot verify that the information relates to you, the honest answer to an access request may be that we hold nothing identifiable about you - we will say so rather than ask you for identity documents we do not need.
We will never discriminate against you, or degrade the site, because you exercised a privacy right. Everything on Crayon Corner is free either way.
If you are in the EEA or the UK, you also have the right to complain to your data protection authority. If you are in California, you may contact the California Privacy Protection Agency. We would appreciate the chance to put things right first.
11. We do not sell or share personal information
We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are used in the California Consumer Privacy Act and comparable US state laws. We have not done either in the preceding twelve months.
This holds with particular force for minors. California law forbids selling or sharing the personal information of a consumer under 16 without opt-in consent - from the parent for a child under 13, or from the teenager for those aged 13 to 15. We never ask for that consent, because we do not sell or share personal information at all, at any age.
We do not use or disclose sensitive personal information for any purpose beyond those permitted without a right to limit.
12. Global Privacy Control and Do Not Track
We honour the Global Privacy Control signal. If your browser or extension sends one, we treat it as a valid opt-out of any sale or sharing of personal information and of targeted advertising for that browser. Since we neither sell, share nor personalise advertising in the first place, the signal confirms a position the site already takes.
There is still no agreed standard for the older Do Not Track header, so we do not respond to it separately - but the protections above apply to every visitor, with or without any signal.
13. Security
The site is served over HTTPS. It is a static site: no visitor database, no login system, no user-supplied content - so there is very little to attack and nothing personal to steal. Access to our hosting and advertising accounts is limited to the people who need it and protected by multi-factor authentication.
No method of transmission or storage is perfectly secure, but we maintain safeguards appropriate to the very limited information involved, and we require our service providers to do the same.
14. International transfers
Our hosting and advertising providers operate globally, so the information described in section 3 may be processed on servers outside your country, including in the United States. Where information is transferred out of the EEA, the UK or Switzerland, it is covered by the European Commission's standard contractual clauses and the UK addendum, or by another transfer mechanism recognised under applicable law. You may ask us for the details.
15. Links to other websites
Advertisements and occasional references lead to websites we do not control. This policy stops at the edge of Crayon Corner. We encourage parents and teachers to check the privacy policy of any site a child visits from here.
16. Changes to this policy
If we change how the site handles information, we will update this page and change the effective date at the top. A material change to our practices concerning children - for example, adding a feature that collected personal information from a child - would require direct notice to parents and verifiable parental consent before it took effect. We will not apply a material change retroactively to information already collected.
17. How to contact us
Questions, requests and complaints all go to the same place, and a person reads them:
- Email: support@regulad.com
- Post: Regulad Co., Ltd., Caugiay, Hanoi, Vietnam
- Telephone: 0702058270