Privacy

Who is responsible?

Peng Mu, Switzerland, operates Doodlark and is responsible for how it handles your personal data. Contact: support@doodlark.com.

Accounts and your designs

Sign-in uses your email address, a verified account identifier and profile information supplied during sign-in. We keep authentication sessions, IP addresses, browser information and security records to protect accounts and limit abuse. Google sign-in and email-code sign-in are available. Google provider tokens are not retained in our account database.

Your saved designs, text, prompts and artwork are linked to your account so you can reopen and edit them. Saved designs stay private unless you submit a version for community review. Authorized administrators and service providers can process data needed to operate, secure and moderate the service.

When you generate or refine artwork, the prompt and any refinement image are sent to OpenAI. Image-attempt and estimated-cost records enforce usage limits. Avoid including confidential information or other people’s personal data in prompts and images.

Sharing and community activity

If you submit a design and it is approved for community publication, viewers can see that shared version’s artwork, title and creator name. If you enable remixing, other makers can copy and adapt its permitted design material. Your account email and private prompts are not included. Published community designs are intended for public viewing without signing in; private saved designs remain account-protected.

Applause is linked to your account so you can undo it across devices. Reports and moderation decisions are recorded to handle abuse and appeals. Unpublishing removes your shared version, but other people’s existing remixes and their source credit remain. Contact us about personal information in retained credit or copies.

Optional activity measurement

Measurement is off until you enable it in Activity measurement below the studio. It records a random visit identifier, visit start time, referral hostname or short campaign labels, and whether you opened the editor or try-on, saved successfully or requested ordering updates. After sign-in, this activity is linked to your account to count returning creators.

These statistics do not contain artwork, prompts, email addresses, full referral URLs or IP addresses. Authentication and hosting records are separate. Reports show aggregate counts; account-linked source records are not anonymous.

Activity expires after 30 days. Turning measurement off stops collection and attempts to remove the current visit. Earlier visits expire or are removed with account deletion. Collection failures can prevent a visit from being recorded or immediately removed.

Ordering updates

Requesting an email when ordering opens is a separate, optional choice using your account email. We keep your account identifier, request time and consent version for up to 180 days. You can withdraw in the try-on preview or Manage account, including while suspended. Measurement consent is not required. Notification delivery is not active yet; a request creates no order or payment.

Cookies and storage on your device

Sign-in cookies keep your session secure. Browser storage keeps draft recovery copies and your measurement preference. A temporary design handoff used during sign-in expires after 24 hours. Other local recovery copies remain separate from cloud account deletion; clear Doodlark’s site data in your browser to remove them. Clearing site data can discard unsaved work.

Service providers and processing locations

• Cloudflare hosts the website and application, stores artwork, provides access protection for the protected service and forwards support email. Our artwork buckets use the EU jurisdiction. This does not restrict all site processing to the EU.
• Turso stores account, design, community and activity records. Our staging and production databases each have their primary in Ireland.
• Google handles Google sign-in when you choose it, under its privacy policy. Google describes processing on servers around the world. We receive and handle messages sent to our support address in a Google Workspace mailbox.
• Resend delivers sign-in codes and service emails. Our configured sending region is Ireland; its published information describes email-data storage in the United States. Email open and click tracking are disabled. Provider retention is separate from Doodlark account deletion.
• OpenAI processes artwork requests through its global Images API. Generating or refining artwork sends your prompt and any refinement image to OpenAI. Its published data controls describe API data use and retention. API input/output sharing is disabled for our organization. We do not claim zero retention or EU-only AI processing.

Data is processed outside Switzerland, including in the United States. EU artwork storage and an Ireland database primary do not establish EU-only processing for the service. Provider processing locations and contractual safeguards are separate from these storage settings.

International processing and safeguards

We operate from Switzerland. Data also goes abroad when our providers host the service, deliver email, generate artwork or provide security and support. The locations below describe our configuration and providers’ published processing arrangements as checked on 7 October 2026. They do not mean every request visits every listed country.

• Cloudflare: artwork storage uses the EU jurisdiction. Its Developer Platform suppliers list the European Economic Area, United States, United Kingdom, Australia, Canada, India, Japan and Singapore. Group support locations also include Germany, Portugal, France, the Netherlands, United Arab Emirates, South Korea, Mexico, Malaysia, Sweden and Switzerland. Requests may use its global network. See the service subprocessor locations and network locations.
• Turso: our database primaries are in Ireland. Its processing agreement also provides for United States processing. Backups may be stored in the United States; an Ireland primary does not guarantee EU-only backups. See its subprocessors and storage information.
• Resend: sending is configured in Ireland; email data is stored in the United States. Its subprocessor inventory lists United States locations.
• OpenAI: published API infrastructure locations are Australia, Brazil, Canada, Finland, France, Germany, India, Indonesia, Ireland, Italy, Japan, Malaysia, Mexico, the Netherlands, Norway, Poland, Singapore, South Africa, South Korea, Spain, Sweden, Switzerland, United Arab Emirates, United Kingdom and United States. Flagged content may be reviewed in the Philippines, Canada or United States. Network delivery is global; customer-support access depends on information shared in a support case. See its API subprocessor list. These are possible provider locations, not an EU residency commitment for our Images API requests.
• Google Workspace: support email uses Google’s global infrastructure. Its published Workspace processing locations include Argentina, Australia, Belgium, Brazil, Bulgaria, Canada, Chile, Colombia, Denmark, El Salvador, Finland, France, Germany, Hong Kong, India, Ireland, Israel, Italy, Japan, Malaysia, Mexico, the Netherlands, New Zealand, Philippines, Poland, Romania, Singapore, South Korea, Spain, Sri Lanka, Sweden, Switzerland, Taiwan, United Kingdom and United States. Activities differ by location; third-party technical support accesses content only when we explicitly share it in a support case. See the Workspace processing inventory. Google sign-in is separate processing under Google’s own privacy policy.

Provider processing agreements provide international-transfer safeguards, including standard contractual clauses with Swiss adaptations where applicable. Transfers may instead rely on a legally recognized adequacy arrangement when its conditions apply. These safeguards do not confine processing to Switzerland or the EU.

You can read the processing terms for Cloudflare, Resend, OpenAI and Google Workspace. Turso’s agreement includes Swiss-adapted standard contractual clauses. Contact support@doodlark.com to request information about the safeguards relevant to your data, including a copy where available with confidential details protected.

Retention and deletion

We keep saved designs while you retain them. Deleting a design or account blocks access and starts removal of its associated data and artwork. Cleanup retries failed object deletions. Other people’s remixes and browser-local copies are separate.

Sign-in sessions expire after 30 days and email codes after 10 minutes. Scheduled cleanup removes expired authentication records. Unattached uploads are eligible for cleanup after 24 hours. Generation records lose their account link after 30 days and expire after 90 days; account audit records expire after 90 days. Minimal deletion records help prevent deleted content returning after database recovery.

Database recovery copies are separate from the active records you can access. Our recovery procedure replays deletion records before restored data is made available. A provider’s advertised recovery window does not guarantee that every backup copy is physically erased at that time.

Hosting, security and support-email records have separate retention. Request logs can include URLs. Provider backup/log periods and support-correspondence retention have not all been independently verified. Deleting your Doodlark account does not automatically erase support emails, your Google account or every provider copy. Contact support@doodlark.com about a specific privacy request.

Your choices and rights

Manage account lets you download your account and design data, edit your creator profile and delete your account. Deletion requires a sign-in within the last 10 minutes. Suspended accounts can still export or delete their data.

For access, correction, deletion or an objection to processing, email support@doodlark.com. We may need to verify account ownership. Swiss data-protection law applies; other rights depend on the laws applicable to you. You can also contact the Swiss Federal Data Protection and Information Commissioner.