Privacy Policy

This page explains the personal information used to provide Drawings Studio and the choices available to you.

Last updated: September 26, 2026

Who handles your information

Our data controller is Tarkmote LLC, 1309 Coffeen Avenue STE 1200, Sheridan, Wyoming, 82801, USA. For privacy matters, email [email protected].

Tarkmote LLC operates Drawings Studio and is responsible for the personal information processed through the service. Contact details are on our Contact page.

Information used by the service

  • Account information: your name, email address, hashed password, verification status, and account permissions.
  • Your content: uploaded images, generated drawing images and PDFs, album names and descriptions, image titles, tags, and related timestamps. Images may contain personal information about you or other people, including embedded file metadata.
  • Access and technical information: session data, API token records, temporary media access records, and information needed to operate and protect the service. Requests and errors may be recorded in server logs, including IP addresses and request details.
  • Correspondence: information you choose to send when you contact us for support or make a rights request.

Why information is processed

Account information and uploaded content are used to provide the service you request: authenticating access, organizing albums, converting images, delivering downloads, and sending verification messages. Security and technical information helps prevent abuse, diagnose problems, and maintain the service. Correspondence is used to respond to your request.

Where the GDPR applies, processing necessary to provide your requested service is based on performing our agreement with you. Necessary security and service administration rely on legitimate interests in protecting and operating the service, subject to your rights. We may also process information to meet legal obligations. Where processing requires consent, it must be obtained separately and you may withdraw it.

Cookies, analytics, and registration checks

With your consent, we use Google Analytics to understand website use and improve the service. It receives page-usage and browser/device information and uses analytics cookies. It stays off until you accept; refusing has no effect on account features. Use Cookie settings to change or withdraw consent. See our Cookie Policy and Google's Privacy Policy.

The website uses session and security cookies to keep you signed in and protect forms. If you select a remember-me option, a persistent authentication cookie may also be used. Blocking these cookies may prevent account features from working.

Registration uses Google reCAPTCHA to help prevent automated abuse. It loads when you select the registration security check, allowing Google to process browser and interaction information; our server submits the verification token and your IP address to Google. If you cannot use the check, contact us for registration assistance. See Google's Privacy Policy and Terms of Service.

Storage and access

  • Cloudflare: hosting and delivery infrastructure for the service, processing requests and related technical information.
  • Brevo: email delivery, 17 rue de Salneuve, 75017 Paris, France.
  • Mailjet: email delivery, 43 rue de Dunkerque, 75010 Paris, France. Email providers process recipient details and message contents as needed to deliver service emails.
  • Google: registration security through reCAPTCHA and optional analytics after consent.

Tarkmote LLC is based in the United States. Provider offices listed here do not necessarily indicate where data is processed. Providers may process data outside the EU/EEA. Contact us for the applicable processing locations and transfer arrangements; we do not represent that all data stays within the EU.

The service stores uploaded originals and generated files using its configured file-storage provider. Hosting, storage, email, and security providers process information needed to deliver their respective services. Authorized administrators may access information as needed to operate the service, handle support, or investigate abuse. Information may also be disclosed where required by law.

Album and photo management require authentication and ownership checks. Media access uses temporary links; treat these links and downloaded files as private. Contact us for details about the providers and storage locations used for your account, including any applicable international-transfer safeguards.

Retention and deletion

Account records and uploads remain while your account is open or until you delete the content. You can delete individual photos and albums, or close your account through Account & privacy. You may also email us for deletion assistance.

Backups are retained for up to six months and operational logs for one year. Deleted content may remain in backups until they expire. Copies downloaded by you or other people are outside our control. Records needed for a specific legal obligation or dispute may be retained where legally justified; we will explain any exception relevant to your request.

Cookie preferences and analytics cookies last up to 180 days in this browser. This does not describe Google's server-side retention, which depends on the analytics service and property settings. Support correspondence is kept as needed to resolve and document your request and any related legal obligations.

Your choices and rights

See Your privacy rights for access, correction, portability, erasure, restriction, objection, consent withdrawal, response times and complaints. Account registration is not required to make a request.

Depending on applicable law, you may request access to your personal data, correction, erasure, restriction of processing, or a portable copy, and may object to certain processing. Contact us to make a request; we may need to verify your identity. Where applicable, you may also complain to your local data-protection authority.

Only upload personal information about other people when you have a lawful basis to do so. Take particular care with images of children and obtain any permissions required from a parent or guardian.

Children, data sources and automated processing

The service is intended for adults preparing drawing activities, not for children to register accounts. Account information comes from you; information about people in images comes from the uploader. If an image of you or your child was uploaded by someone else, contact us to exercise your rights.

Image conversion is automated. We do not use it to make decisions about people with legal or similarly significant effects. Security checks, including reCAPTCHA and email validation, can block registration; contact us for human assistance if you are unable to register.

Updates

We may update this policy when our practices change. The revision date appears at the top of this page. Please contact us if you have questions.