Last Updated: 8/28/2026
This Privacy Policy explains how Paint Station collects, uses, stores, and protects information when you use Paint Station.io(the "Service").
By using the Service, you acknowledge the practices described in this Privacy Policy.
The Service allows users to create and join temporary collaborative drawing rooms without creating an account.
We do not require users to provide an email address, telephone number, real name, or other account information to use the Service.
Room passwords are temporary credentials used to control access to password-protected rooms.
We do not store room passwords in readable plaintext. Room passwords are stored using a one-waypassword hashing mechanism so that the original password cannot be recovered from the stored value.
We do not record passwords or submitted password attempts in our application logs.
Users should not use a room password that they use for another account or service.
The Service is designed to use temporary rooms.
While a room is active, we may temporarily store or process:
This information is used to provide the collaborative drawing and room functionality.
When a room is closed, normally after all participants have left, the room and its associated temporary room data are deleted from the application's active storage.
This means that room-related information may no longer be available for access or deletion requests after the room has been deleted.
Deletion from active application storage does not necessarily mean immediate deletion from every technical backup or infrastructure system. Where applicable, information may remain temporarily in backups or other infrastructure systems until those systems automatically overwrite or delete it.
The Service provides real-time chat between participants in a room.
Chat messages are transmitted through the Service to participants in the relevant room. We do notintentionally store chat messages in a permanent database.
Chat data may temporarily exist in server memory or other transient systems as necessary to provide the real-time communication functionality.
Other participants may be able to copy, screenshot, or otherwise preserve messages that they receive.
Users should not share sensitive, confidential, or personally identifying information through the chat feature.
We maintain technical, operational, and security logs that may record events such as room creation, room deletion, successful room joins, failed room access attempts, and other security-related events. These logs may include information such as the event type and the date and time at which the event occurred.
Depending on the event, these logs may record information such as:
We do not intentionally record room passwords or submitted password attempts in these logs.
These logs are maintained separately from the temporary room data and may remain after the associated room has been deleted.
We retain logs for 90 days unless a longer retention period is reasonably necessaryfor security, legal, fraud-prevention, dispute-resolution, or other legitimate operational purposes.
After the applicable retention period, logs are deleted or overwritten according to our retention practices.
The application does not require or intentionally collect:
However, the operating system, hosting provider, or other infrastructure used to operate the Service may generate technical logs as part of normal operation.
We use information processed through the Service to:
We do not sell personal information.
We do not use room data to create advertising profiles.
Users may create drawings, choose display names, and communicate with other participants.
Room content is temporary, but users should understand that other participants can view content while participating in a room and may independently copy, screenshot, record, or otherwise preserve it.
We cannot control what another participant does with information or content that they can access.
Users should not include sensitive personal information in drawings, usernames, room names, or chat messages.
Additional rules concerning user-generated content are described in our Terms of Service and Community Guidelines.
The Service is hosted using Amazon Web Services (AWS).
Information processed by the Service may therefore be stored or processed on AWS infrastructure as necessary to provide the Service.
We may also use infrastructure and services provided by AWS to operate, monitor, secure, and maintain the Service.
We do not currently use third-party advertising or analytics services.
If we begin using additional third-party services that process personal information, we will update this Privacy Policy as appropriate.
The Service does not intentionally use advertising cookies or third-party tracking technologies for advertising purposes.
The Service may use technically necessary browser storage, cookies, session identifiers, or similar technologies when necessary to operate the Service.
We do not use these technologies to create advertising profiles.
We use reasonable technical and organizational measures designed to protect information processed through the Service against unauthorized access, alteration, disclosure, or destruction.
These measures may include:
No method of transmitting or storing information over the Internet is completely secure, and we cannot guarantee absolute security.
Different types of information have different retention periods.
Temporary Room DataRoom names, usernames/display names, participant information, drawing/canvas data, and room password hashes are intended to exist only while their associated room is active.
When the room closes, this information is deleted from the application's active storage.
Chat messages are not intentionally stored permanently and are intended to exist only as necessary to transmit them to current participants.
Technical, operational, and security logs are retained separately from room data for 90 days.
Logs may therefore remain after a room and its associated room data have been deleted.
We may retain certain information for a longer period where reasonably necessary to comply with legal obligations, protect the Service, investigate security incidents, prevent fraud or abuse, resolve disputes, orprotect our legal rights.
Depending on your location and applicable law, you may have rights concerning personal information we maintain about you. However, Paint Station does not require accounts or collect information that reliably identifies individual users. Because of this, we may have no reasonable way to verify that information belongs to a particular person or to fulfill a request to access, correct, or delete that information. If we cannot reasonably verify that a request relates to information maintained about the requesting person, we may be unable to fulfill the request. Information that has already been deleted according to our retention practices cannot be provided or deleted again.
To submit a privacy request, contact Paint StationSupport@gmail.com
Paint Station is a general-audience service and is not directed toward children under 13. We do not knowingly collect personal information from children under 13.
Paint Station does not require users to provide their age, real name, email address, or account information. Because users can use the Service without an account or persistent identity, we generally cannot determine the age or identity of an anonymous user.
If we become aware that a particular user is under 13 and that applicable law requires us to take action, we will take reasonable steps appropriate to the circumstances. Because Paint Station does not maintain persistent user identities, we may be unable to identify or delete information associated with a particular user when we cannot reasonably determine which information belongs to that user.
If you have concerns about a child's use of Paint Station, contact us at Paint StationSupport@gmail.com
The Service is operated from the United States and may use service providers and infrastructure located inthe United States or other locations.
If you access the Service from outside the United States, your information may be processed in a country that may have different data-protection laws than your country of residence.
We may update this Privacy Policy from time to time.
When we make changes, we will update the "Last Updated" date at the beginning of this Privacy Policy.
If we make material changes to how we collect or use personal information, we will provide additional notice when required by applicable law.
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, contact us at:
Paint Station
Email: Paintstationsupport@gmail.com
Website: PaintStation.io