Privacy Notice

Last updated: 6 September 2026 Version: 2026-09-06-v1.50-r2

This Privacy Notice explains what information Wintira’s Joy of Painting AIO Tool (“the Service”, “the Tool”, “we”, “us”, or “our”) stores and how it is used.

The Tool is operated by Wintira, an independent individual operator. For privacy, account, or abuse enquiries, contact Discord: _phantom215.

The Tool is designed to collect as little account information as practical. We do not sell account or project data, use it for advertising profiles, or make cloud projects available to other users.

1. Information We Store

When account and cloud-storage features are enabled, the information stored by the Service is limited to:

These records also include generated account/project identifiers, account role/status, and creation, modification, or expiry timestamps needed to operate the service. Temporary deletion-cleanup records and any security/admin audit records are described below.

We do not ask for a real name, email address, postal address, or telephone number when you create an account. The account and project database does not store user IP addresses. Network and abuse-prevention processing is described in section 6.

We do not store your password or recovery code in readable form.

Most painting interactions, image preparation, palette processing, progress interactions, and other Tool features run locally in your browser.

2. Why We Store This Information

We use this information only as needed to provide and protect account and cloud-project features.

For example:

We do not use your project images for advertising, public galleries, or training purposes through the Service.

The login checkbox is labeled Remember me. When selected, the remembered session lasts up to 7 days. Without it, the cookie lasts for the browser session and the server session expires after 24 hours. Logging out, deleting the account, recovery, or session revocation can end sessions earlier. Browser session-restore features may restore session cookies.

Where data protection law requires a legal basis, account authentication and requested cloud storage are processed to provide the service under the Terms. Necessary security, abuse prevention, support, and records of policy acceptance serve our legitimate interests in operating and protecting the service, subject to your rights. Processing required to meet a legal duty is based on that duty. Accepting the Terms and acknowledging this Notice does not provide blanket consent for unrelated data use.

3. Passwords and Recovery Codes

Passwords and recovery codes are stored only as secure hashes.

A hash is a one-way representation used for verification. It is not intended to be converted back into the original password or recovery code.

A recovery code may be displayed once when it is created. You are responsible for keeping that code somewhere safe.

If you lose both your password and your recovery code, we may be unable to restore access to your account.

4. Private Project Images

Project images saved through an account are intended to remain private to that account.

The Service does not currently provide a public gallery or public project-sharing feature.

We do not routinely inspect private project images.

Wintira is currently the only person on the service side with administrative access through Cloudflare. Provider personnel may have access under their own operational and security arrangements.

The operator does not routinely inspect private images. Access is limited to what is reasonably needed for support, account administration, security, investigating a report, or meeting a legal requirement. Reports of unlawful content will be assessed and acted on; relevant information may be provided to competent authorities when required or otherwise lawful and necessary.

5. Local Browser Data

Guest/browser project images and painting progress stay on your device and are not uploaded to account storage. When you sign in and use cloud/account features, online saving and cloud autosave can upload the open project, its image, settings, and progress. Signing in with a project already open can start cloud autosave. Account records, project metadata, settings, and progress are stored in Cloudflare D1; cloud project images and thumbnails are stored in a private Cloudflare R2 bucket. Cloud projects are accessible through account-authorized requests and are not published in a public gallery.

The palette simplification feature sends color names, hex values, color counts, and the requested palette size to the server for processing, including during guest use. It does not send the source image or painting progress through that endpoint.

The Tool may store local project information and interface preferences in your browser, for example through IndexedDB or localStorage.

This information remains on your device unless you choose to use an online feature that sends specific project data to the Service.

Clearing your browser data may remove locally stored projects or preferences.

Downloading project files or image exports creates files on your own device. Those files are controlled by you.

6. Technical Information and Security

Cloudflare and Vercel process requests to deliver and protect the service. This can involve IP addresses, browser/device information, URLs, timestamps, and security or diagnostic logs. These are distinct from the account and project records stored by the application.

The authentication backend reads the connecting IP address and uses it in temporary rate-limit keys to limit repeated login, registration, and recovery attempts. It does not add the address to user or project database records. Cloudflare Turnstile also processes verification information for abuse prevention.

We do not use this information to build advertising profiles or sell it. Provider logging, security processing, and retention follow the configured services and their applicable terms.

7. Website Analytics and Performance

The website uses Vercel Web Analytics and Vercel Speed Insights to understand aggregate traffic and identify performance problems. These features can also operate when you use the tool as a guest.

Web Analytics processes page views, referrers, approximate location, browser/device details, and event times. Vercel describes it as aggregate analytics without third-party cookies; its request-derived visitor identifier is discarded after 24 hours. This is not a claim that all aggregate analytics records are deleted after 24 hours.

Speed Insights processes performance measurements and technical details such as the page URL, browser, device, country, and connection type. Vercel describes these measurements as not identifying individual visitors or reconstructing their browsing sessions.

The application does not intentionally send account credentials, project images, painting progress, or project names as analytics events. We do not use these services for advertising profiles or selling user information. Their purpose is measuring usage and maintaining a usable service. Where analytics processing involves personal data, our intended basis is the legitimate interest in understanding aggregate usage and performance, subject to applicable consent requirements and user rights.

Provider information: Vercel Web Analytics privacy and Vercel Speed Insights privacy.

8. How Long Information Is Kept

Account and cloud-project information is normally kept while the account or project exists and the cloud service remains available. We may remove inactive accounts/projects or reduce storage when reasonably needed for capacity, cost, security, abuse prevention, or changes to the service. There is currently no fixed automatic inactivity-deletion period. Where practical, material cleanup or service closure will be announced in the tool with time to export projects; urgent circumstances may prevent advance notice.

Deleting a cloud project removes its associated project record and media from active storage when deletion succeeds.

When you delete an account, its account record, cloud-project records, progress, acceptance record, and all login sessions are removed from active D1 storage. Cloud images and thumbnails are deleted from R2. If image removal fails temporarily, an automatic cleanup task retries it. A cleanup marker containing the random account identifier and timestamps remains for at least 24 hours to catch uploads already in flight, and longer if cleanup is still pending. Limited security/audit records and provider backups may follow separate retention periods.

The operator currently makes no separate backups. Cloudflare or Vercel may have provider-managed recovery, retention, or operational copies; no claim is made that these are absent or immediately erased.

Limited technical, security, abuse-report, or audit records may be retained while needed to investigate an incident, fulfil a legal obligation, or establish or defend a claim. They are not intended as an ongoing profile of users. Provider-held logs and analytics have their own retention settings and are not deleted by the account-deletion button.

We try not to keep information longer than is reasonably useful for operating the Service.

9. Account and Project Deletion

You can delete individual cloud projects from the cloud-project list.

You can delete your account and all associated cloud projects from the account menu by entering your current password and confirming permanent deletion.

Deleting cloud data does not automatically remove files you previously downloaded or local browser data stored on your own device.

Account deletion is permanent and cannot be undone.

10. Support

If you contact us for help, we may use your account name to locate the correct account.

Support may also need to view project names, project identifiers, technical metadata, storage information, or a stored project image when that is reasonably necessary to solve the problem.

We try to avoid viewing private project images unless they are actually needed.

11. Security

We use reasonable technical measures intended to protect accounts and stored project data.

Passwords and recovery codes are not stored in readable form.

Account sessions use Secure HttpOnly cookies, and access to cloud projects is checked against the signed-in account.

No internet-connected service can guarantee perfect security.

If you believe your account or project data has been accessed improperly, please contact us.

12. Service Providers and Disclosures

Vercel hosts the website and server functions, including the password-hashing/verification helper and palette simplification, and provides Web Analytics and Speed Insights. Cloudflare provides the API, D1 database, private R2 image storage, Turnstile, and request security/rate limiting.

These providers process information needed to perform those functions. This is not a public sharing feature or a sale of user data. We do not publish projects or provide them to other users. Information may also be disclosed when lawfully necessary to address abuse, protect the service, or comply with legal requirements.

If you contact us through Discord, Discord processes that communication under its own terms and privacy practices. Do not send passwords or recovery codes in a support message.

13. Processing Locations

The project-image R2 bucket is currently shown in Cloudflare as Eastern Europe (EEUR). That region label does not establish an EU-only jurisdiction restriction for the bucket, D1, or other services.

Cloudflare and Vercel operate international infrastructure, so some request, security, analytics, or service data may be processed outside your country. We do not promise that all processing stays in the EU. International transfers must meet applicable data protection requirements; provider arrangements and safeguards depend on the services and settings in use.

14. Your Choices

You can use the main Tool without creating an account.

If you do not want project images stored online, you can continue to use local/browser features and downloadable project files instead of cloud storage.

You can delete cloud projects you no longer want stored.

You can also delete your account and associated cloud projects from the account menu.

Where applicable, you can request access to your personal data, correction, deletion, restriction, or portability, and object to processing based on legitimate interests. Rights depend on the processing and the law that applies. If processing relies on consent, you can withdraw it without affecting earlier lawful processing. You can also complain to your competent data protection authority.

Contact the operator through Discord to exercise these rights. We may need proportionate proof that you control the account to avoid exposing another person's data; do not send your password or recovery code. We respond within the deadlines required by applicable law. Requests to delete cloud data do not erase files or browser data held on your own device. The service does not use personal data for automated decisions producing legal or similarly significant effects.

15. Children and Young Users

The Service is not designed to collect detailed personal profiles.

If local rules require a parent or guardian to approve a young person’s use of an online service, the Tool should be used with that permission.

We do not intentionally ask users to provide an age, real name, email address, home address, or similar profile information as part of the account system.

16. Changes to This Privacy Notice

This Privacy Notice may be updated when the Service, account system, infrastructure, or legal requirements change.

The current version and its last-updated date are available through the links in the signup form and site footer.

For significant changes, we may provide an additional notice within the Tool.

17. Contact

For privacy questions, account issues, security concerns, or requests relating to stored account/project information:

Discord: _phantom215

Additional contact methods may be added in the future.