Privacy Policy

Last updated: October 9, 2026

This policy explains how Ponpon handles information when you browse ponponcoloring.com, use the online coloring tool, submit artwork or comments, or use the administrator-only Pinterest publishing integration. You do not need a visitor account to print or color a page. Sharing a finished picture or leaving a comment sends the information described below to our servers.

The short version

• No visitor account or newsletter is required. Printing and coloring never ask for anything. Only sharing a piece to the gallery or leaving a comment asks for a name and an email.
• Coloring happens in your browser. Work in progress stays on your device unless you choose to submit a finished picture to the gallery.
• The site shows adverts served by Google AdSense. Google and its partners may use cookies to pick adverts for you. In the EEA, the UK and Switzerland we ask for your consent first; everywhere you can opt out (see below).
• Google Analytics 4 is optional. Its tag does not load until you choose “Allow analytics”; the choice can be changed from “Analytics settings” in the footer or coloring tool.
• We do not sell personal data. You can tell us not to share it for advertising at any time from the footer link.

Who we are

Coloring Ponpon is a small independent publisher of printable coloring pages. For anything in this policy, write to hello@coloringponpon.com. A person reads every message.

What is recorded, and why

What	Why	How long
Server logs: IP address, time, page requested, browser string	Security, spotting abuse, fixing errors	Rotated automatically after a short period
Your light/dark mode choice, recent colors and coloring in progress, stored in your browser (local storage and IndexedDB, not cookies)	So the site looks the same next visit and your unfinished page is still there	Until you clear your browser data; it never leaves your device
Your advertising-consent choice (EEA, UK, Switzerland, and US states with privacy laws)	So we do not ask again on every page	Up to 13 months, then we ask again
Advertising cookies and identifiers set by Google and its partners (see Cookie Policy)	To serve adverts, personalise them where you have allowed it, count views and clicks, and detect fraud	From the end of the session up to 13 months, depending on the cookie
Optional Google Analytics 4 events and identifiers: pages visited, coloring started, picture saved or printed, PDF downloaded, and basic device/browser information. Our event parameters exclude artwork, chosen colors, form fields and full query strings.	To understand which pages and tools visitors use, only after you opt in	Analytics cookies may last up to two years; event data follows the GA4 property retention setting
Gallery submissions: the picture, your display name, your email (never shown), a note, and your IP address	To show the piece with your name, send you a manage link and tell you when it is approved; the address stops floods and lets us block abuse	Until you remove the piece or ask us to; rejected pieces are deleted with their image
Comments: your name, email (never shown), the text, and your IP address (WordPress standard)	To show the comment and let us reply; a first comment from an address is checked by a person	Until you ask us to delete it
Emails you send us	To reply and keep a record of the conversation	As long as needed for the matter, then deleted

Advertising on this site

The pages are free to print because a few adverts pay for the drawing time and the hosting. Here is what that involves.

Who serves the adverts

Adverts are delivered by Google AdSense, operated by Google LLC (Google Ireland Limited for visitors in Europe). Google, and advertisers that buy space through Google, are third parties: when an advert loads, your browser talks to Google’s servers directly, and Google sees your IP address, the page you are on and the technical details of your browser. How Google uses that information is described in How Google uses information from sites that use its services.

Personalised adverts

Where you have allowed it, Google uses cookies and similar identifiers to show adverts based on your interests, including your earlier visits to this site and to other websites. Google’s advertising page explains the technology. Google may also share data with its certified advertising partners for the same purpose. Where you have not allowed it, adverts are still shown, but chosen only from the page you are on and broad context such as your country; Google calls this non-personalised advertising and it uses cookies only for frequency capping, measurement and fraud detection.

Your choices

• Visitors in the EEA, the UK and Switzerland see a consent message on their first visit and can accept, decline or choose per purpose. Change your mind any time using “Privacy and cookie settings” in the footer.
• Visitors in California and other US states with privacy laws can use “Do Not Sell or Share My Personal Information” in the footer, which switches Google to restricted data processing for this site.
• Everyone can opt out of personalised advertising by Google at Google Ads Settings, or from many advertisers at once at aboutads.info (US) and youronlinechoices.com (Europe).
• You can block or delete cookies in your browser settings. Adverts still appear; they just stop being tailored.
• An ad blocker removes the adverts entirely. We would rather you did not, but the site works the same.

What we do not allow

We use Google’s category controls to block adverts for gambling, dating, weight loss, get-rich-quick schemes and similar categories that do not belong next to a coloring page. If you ever see an advert here that you think is inappropriate, send a screenshot to hello@coloringponpon.com and we will block the advertiser.

Optional analytics

If you allow analytics, your browser loads Google Analytics 4 and sends a page view and limited events for opening a coloring page, starting to color, saving or printing, and downloading a PDF. Our event parameters use the page path and broad action details such as A4 or US Letter. They do not include your drawing, colors, email, gallery form entries or the full /color/ image URL. Google receives technical information such as your IP address and browser details when its tag loads. Google signals and ad personalisation signals are disabled for this GA4 tag.

Until you choose “Allow analytics”, no GA4 script loads and no analytics events are sent. “No thanks” leaves it off. Use “Analytics settings” in the footer or coloring tool to change your choice. Withdrawing stops future events and clears GA cookies where the browser permits. This analytics choice is separate from advertising consent.

The gallery, comments and the feedback form

Sharing a piece from the coloring tool, commenting and writing to us through the feedback button are the only things on the site that ask who you are, and all of them are optional.

Feedback form: your message, the name and email you choose to give, the page you sent it from and your IP address are stored on this site and emailed to us, so we can answer and block spam. We keep messages for as long as they are useful for answering you and improving the site, and delete them on request. The email address is used only to reply.

• Display name is shown publicly next to your piece or comment. It does not have to be your real name.
• Email is never shown. For gallery pieces it is used to send you a manage link and to tell you when the piece is approved; for comments it lets us reply or contact you about it. If you tick “remember me”, both are kept in your own browser, not on our servers, so you do not have to type them again.
• Manage link: each piece you share comes with a private link (also kept in your browser) that lets you see and remove your pieces at any time, no account needed. Anyone with the link can remove the piece, so treat it like a password.
• Review: every piece is looked at by a person before it appears. Comments from a new address are held until a person has approved one; later comments appear immediately. Comments containing links always wait.
• Removal: use your manage link, or write to us with the address you used, and the piece or comment is deleted along with its image.

What we deliberately do not do

• No analytics tag or events without your separate opt-in.
• Pinterest save links open Pinterest when clicked. They do not connect a visitor’s Pinterest account to our publishing integration.
• No newsletter sign-up harvesting addresses.
• No visitor accounts are needed for coloring; the gallery and comments use a name and an email. Website administrators have separate WordPress accounts.
• We do not sell personal data. Advertising, submitted content, and the administrator Pinterest integration involve the data sharing described in this policy.

Pinterest publishing for administrators

The Pinterest integration is an internal publishing tool for authorized Ponpon administrators. Visitors can browse, print and color without connecting to Pinterest. The integration does not request or collect a Pinterest password. Connection takes place on Pinterest through its OAuth authorization screen.

Information used by the integration

After authorization, the site stores the connected Pinterest username, access and refresh tokens, and their expiry times in its WordPress database. Production and Sandbox tokens are stored separately. Tokens let the site make the authorized API requests and renew the connection for the corresponding environment. Application credentials are stored separately as administrator settings. These credentials are not included in article content, public pages or demo recordings.

The tool requests access to read the connected account and its public boards and Pins, and to create, update or delete public boards and Pins. The current publishing workflow uses these permissions to list available boards and create Pins approved individually or as a batch by an administrator; a separate administrator action can create a Sandbox demonstration board. It does not automatically follow accounts, comment, message users, or import Pinterest images for AI training.

Board lists are requested from Pinterest when needed rather than kept as a long-term directory. For each Pin the administrator approves, we store the chosen picture, title, description, alt text, destination link, board identifier, approving WordPress user ID and approval time. We also keep the publishing status, returned Pin identifier and any error needed to prevent duplicate submissions or investigate a failed request.

What is sent to Pinterest

Only an approved Pin’s image URL, title, description, alt text, destination URL and selected board are sent for publication. Pinterest fetches the image from our website and handles the resulting Pin under Pinterest’s Privacy Policy. This workflow does not send visitor comments, gallery submitter email addresses or unfinished browser artwork to Pinterest.

An administrator may approve one Pin at a time or approve all eligible published artwork in a batch. Batch approval prepares a paced queue; existing published, scheduled and uncertain Pins are skipped. Publishing a WordPress article alone does not approve its pictures for Pinterest. A scheduled Pin can be cancelled before it is sent. Sandbox tests use a separate queue and API environment; they are test content visible only to the creator and do not count as public publication.

Retention and disconnecting

Connection tokens are kept until an administrator disconnects Pinterest or removes the integration’s connection data. The activity log retains the most recent 30 entries. Pin approval records and publishing receipts remain with the WordPress article so that the tool can show status and avoid duplicates; they are not subject to an automatic time-based deletion schedule. Application credentials remain in the administrator settings until separately removed.

To disconnect, an administrator can use Coloring Pages → Pinterest → Disconnect. For Sandbox, use Review Pins → Sandbox demo → Disconnect Sandbox. Each control removes the locally stored connection tokens for that environment and stops requests that need those tokens. Disconnecting does not delete existing Pins, application settings or publishing receipts. Review or cancel scheduled Pins before reconnecting if they should no longer be sent. Access can also be revoked in Pinterest’s account settings. Requests to inspect or remove locally held connection or publishing records can be sent to hello@coloringponpon.com; deleting a Pin on Pinterest is a separate action in that service.

Who else touches the data

Service providers involved in running the site include our web host, which stores the site files and server logs, and Google, which may serve adverts and, only with your analytics opt-in, provides Google Analytics 4. The optional administrator publishing integration sends approved Pin content to Pinterest, as described below. If that changes, this page and the Cookie Policy will be updated.

Where data is handled

Our web host and Google may process data in countries other than yours, including the United States. Where personal data is involved, we rely on providers that offer appropriate legal safeguards for international transfers, such as the EU–US Data Privacy Framework and standard contractual clauses.

Legal basis (for visitors in the EEA and the UK)

• Server logs: our legitimate interest in keeping the site secure and working.
• Advertising cookies and personalised adverts: your consent, asked for on your first visit and withdrawable at any time.
• Google Analytics 4 cookies and events: your separate consent, withdrawable at any time.
• Non-personalised adverts when you decline: our legitimate interest in funding a free site.
• Gallery pieces and comments: performance of the request you make when you submit them, and our legitimate interest in keeping the site free of spam.
• Emails: our legitimate interest in answering you, and our legal obligation to respond to requests under data-protection law.

Your rights

Depending on where you live, for example under the GDPR, the UK GDPR, or the CCPA/CPRA in California, you may have the right to know what personal data is held about you, to get a copy, to have it corrected or deleted, to restrict or object to processing, to withdraw consent, to opt out of the sale or sharing of personal information, and to complain to a regulator. Requests about data held independently by Google or Pinterest should also be directed to those services. We will explain what information our site holds and how to request changes or deletion. Write to hello@coloringponpon.com. You will never be treated differently for exercising these rights.

Age

This site is intended for adults and is not directed at anyone under 16. We do not knowingly collect personal information from anyone under that age; there is no mechanism on the site that asks for it. If you believe we hold such information, write to us and we will delete it.

Security

The site is served over an encrypted connection, kept up to date, and built with as few moving parts as possible. Administrator access is restricted to authorized accounts. Pinterest access tokens are stored in the WordPress database and are not displayed on public pages. No system can guarantee complete security.

Changes to this policy

If this policy changes, the updated version appears here with a new date. Material changes, for instance a new third party, will be announced on the site.

Contact

Questions about privacy, or a request about your data: hello@coloringponpon.com. What is stored in your browser is listed item by item in the Cookie Policy.