Privacy policy

Who is responsible for your data

The data controller is Aga Bury, the creator of PeekaBoo. For anything related to your data, write to hello@atuitam.com.

What data we collect

Through the “Suggest a hero” form we store:

• the type of hero, the traits you chose and your description of the idea,
• the hero’s name, if you give one (it can be made up),
• your e-mail address, if you give one, so we can tell you when the coloring page is ready,
• a record of your consent to use the idea,
• a one-way hash of your IP address (not the address itself, and it cannot be turned back into it), which protects the form from spam and abuse.

Please don’t share your child’s surname, address or photo. Coloring pages are public, so it’s best to make up the hero’s name.

Why we use it

• To create a coloring page from your idea and publish it for free in the gallery. The legal basis is your consent (Article 6(1)(a) GDPR).
• To e-mail you when the coloring page is ready, if you give an address. The legal basis is consent.
• To protect the form from spam and bots. The legal basis is our legitimate interest (Article 6(1)(f) GDPR).

Every idea is first checked automatically by a language model and then read by a person. Nothing reaches the gallery without a person’s decision. We do not make any decisions about you that have legal effects.

Who we share data with

We use external services that process data only on our behalf:

• Supabase – database and file storage,
• Vercel – website hosting,
• Cloudflare (Turnstile) – protecting the form from bots,
• Anthropic (Claude model) – automatically checking the idea and preparing the scene description,
• OpenAI – drawing the coloring page from the scene description,
• Resend – sending the publication e-mail.

Some of these companies may process data outside the European Economic Area, based on standard contractual clauses approved by the European Commission or other mechanisms provided for in the GDPR.

How long we keep data

• We keep the idea and e-mail address until you delete it or we delete it ourselves, for example after the coloring page is published or the idea is declined.
• Rate-limit data (the IP address hash) is deleted automatically after 2 days.
• A published coloring page stays in the gallery but contains none of your contact details.

Your rights

You have the right to access, correct and delete your data, to restrict its processing, and the right to data portability and to object. You can withdraw your consent at any time. This does not affect the lawfulness of anything we did before you withdrew it.

The quickest way to delete an idea is the private link we showed after you sent it. If you don’t have it, write to hello@atuitam.com.

You also have the right to lodge a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw), or with the supervisory authority in your country.

Cookies

We don’t use analytics or advertising tools and we don’t track you across websites. Cookies are only set when signing in to the admin panel (only for the people who run the site) and by Cloudflare Turnstile when the form is sent.

Changes to this policy

If we change how we process data, we’ll update this page and the date at the top. Questions? See our contact page.