Draft — 19 October 2026. This document is a draft and should be reviewed by a qualified adviser before launch.
Who is responsible
THE W SPORTS EXTRA, Registered Sole Proprietorship, Republic of Maldives. Contact: ahmedwasif382@gmail.com.
What we collect
Everyone visiting the site
- Colouring progress: saved only in your own browser (local storage) on your device. It is not sent to us or stored in any account. Clearing your browser data deletes it. Confirming Start Over clears the saved progress for that picture; Undo can restore colours, which may then be saved again. Signing out or requesting account deletion does not clear colouring progress from your browser.
- Technical data: our hosting provider processes basic technical data, such as IP address and browser type, to deliver and protect the website.
Parent accounts (adults 18+)
- Your declared country of residence, chosen from a list at registration (email, Google and Lovable sign-in all require it). We store the country code in your account record and use it only to check registration and subscription eligibility — currently, residents of the United Kingdom cannot register or subscribe — and to meet legal requirements. It is self-declared, not independently verified, and we do not collect your street address.
- Your email address, and a securely handled password (we never see it in plain text). Every registration and sign-in option on our website requires an explicit 18+ self-confirmation. Email signup also stores that declaration in account metadata. Checkout requires a further adult and policy confirmation validated by our server. These declarations are not independent age verification, and we do not verify parental status.
- If you sign in with Google or Lovable, we receive your email address and basic profile identifier from that provider. The provider may also include basic profile information, such as a display name or profile image, in your sign-in record; we do not request separate child profiles or display public personal profiles.
- Your subscription plan, status, renewal or end dates, Paddle customer, subscription and price identifiers, and whether the subscription is a test or live subscription. Separately, our payment-notification log stores event identifiers, event types and receipt timestamps to prevent duplicate processing; it does not store full payment-notification payloads.
Private photo conversion
Anyone may submit a JPG or PNG for a free conversion preview. The original photo is processed in server memory and is not saved in our photo storage. We store the converted black-and-white page privately in Lovable Cloud, without the original filename or photo metadata. Only a reduced, watermarked preview is returned without Premium; our server checks active Live Premium membership and this browser's ownership before delivering the full converted page.
Use Delete page and colours on the photo page to remove the converted file and its saved colours. There is no automatic photo cleanup schedule. The converted file remains until deleted; provider backup retention follows the provider's practices. A private ownership cookie and a locally saved preview allow you to return to and delete your page from the same browser. Clearing this browser data may remove that ability; contact us for help, although we may be unable to identify an anonymous file without its page identifier. Photos are not publicly shared or sent to an external AI service. Choose only photos you have permission to use, avoid sensitive personal details, and have a parent or guardian select photos for children.
Payments
The separate PDF Shop stores product information and private versioned product files. Shop order records include the purchasing account identifier, product and purchased file version, price, currency, payment status, Paddle transaction identifiers and confirmation times. Download records contain the order, account identifier and time a download link was issued, not whether the file was successfully saved. Only the purchasing account and authorised administrators can view relevant order information. Shop purchases are currently disabled; there is no automatic shop-record retention cleanup. Records are retained for purchase access and applicable legal, tax and dispute requirements, subject to manual privacy-request review.
Paddle, our Merchant of Record, collects the details needed for checkout — such as name, email, country, postcode or billing address, and payment information — under its own privacy policy. We never receive or store your card details.
Monthly and Yearly subscriptions renew automatically until canceled. Cancellation through Paddle's subscription management in My Account, or with our assistance, stops future renewals and normally takes effect at the end of the current billing period, with access continuing until then. Account deletion requests and signing out do not themselves cancel a subscription or request a refund. Payments are generally non-refundable except where applicable law requires otherwise or Paddle permits a refund; statutory withdrawal, refund and consumer rights always take priority. Eligible refunds can be requested at paddle.net. A completed refund may end Premium access. See our Terms of Service and Refund Policy.
Emails
If you email us, we receive your address and message so we can reply. We send account emails (such as email confirmation and password reset). Paddle sends receipts and subscription emails. We do not send marketing emails.
Children
The Service is designed for children to use under a parent or guardian's supervision. Free library colouring needs no account, and children do not need to submit their name, email or other personal details to colour. Accounts are restricted to adults; there are no public profiles or chat. Optional private photo conversion may process a child's image selected by a supervising adult. We cannot technically verify a visitor's age, permission or supervision, and the technical data described above may be processed when children visit too. Apart from a permitted private photo, do not submit children's identifying or sensitive details. If you believe a child has submitted personal information, contact us so we can investigate and handle an appropriate deletion request manually, subject to applicable law. Adult self-confirmation and private processing are not verified parental consent or a claim of compliance with children's privacy laws.
Cookies and browser storage
The website does not include advertising cookies, behavioural tracking or analytics tools. It uses local storage to save colouring progress and persist an adult's sign-in session, and temporary session storage to return you to the intended page after sign-in. Signing out clears the sign-in session but not saved colouring progress; clearing browser storage removes locally saved progress and sign-in data. When an adult opens checkout or subscription management, Paddle may use its own cookies and storage for payment, sign-in and fraud prevention under its privacy policy. Google or Lovable sign-in may also use the selected provider's own cookies or storage. The website's fonts are served from our own site, not from Google.
Photo conversion additionally uses an essential, private ownership cookie and stores the reduced preview and page identifier on this device so you can reopen or delete the page. The original photo is not placed in browser storage by this feature. Deleting a photo page clears its saved preview and paint layer; ordinary library progress is unaffected.
Who processes data for us
- Lovable Cloud — website hosting, database and sign-in.
- Paddle — checkout, payments, tax, receipts and subscription management.
- Google and Lovable — only if you choose to sign in with them.
We do not sell personal data or share it for advertising.
International storage
These providers may store and process data in countries outside the Republic of Maldives. We use them only for the purposes described here.
Security
Passwords are handled by our sign-in provider and are not visible to us. Premium pictures are released only after our server confirms an active subscription, and we accept only payment notifications verified as genuinely coming from Paddle. No online service can be guaranteed completely secure.
How long we keep data
There is no fixed retention period or automatic retention cleanup configured in the website code for account records, subscription records or payment-notification logs. Payment event identifiers, event types and receipt timestamps remain stored unless removed manually; account deletion does not automatically remove subscription records or these logs. Provider backup and log retention is governed by the relevant provider's practices; we have not established a specific duration here. Paddle keeps its own transaction records under its privacy policy.
Account deletion is requested by emailing us, not through a self-service deletion tool. Requests require manual review and handling; a request does not trigger automatic deletion. We assess what can be deleted and what must be retained for applicable legal, tax or dispute requirements, and explain any limitations in our response. We have not established a fixed retention period for support emails. Saved colouring progress remains on your device until you clear it, and must be removed separately from any account deletion request.
Your choices and rights
You can ask to see, correct or delete your personal data, or ask questions about how it is used, by emailing ahmedwasif382@gmail.com. Depending on where you live, you may have further rights under local law, including complaining to a data protection authority.
Changes
We will update this page and its date when our practices change, and notify account holders by email of significant changes.