Privacy Policy

Who We Are

Purupuru Maker is the publisher and operator of purupuru-maker.org. Questions or privacy requests can be sent to support@purupuru-maker.org.

Your Images Stay on Your Device

The wobble editor runs entirely in your browser. Images you open, the masks you paint, previews, GIFs and videos are processed locally on your device using WebGL and browser media APIs. They are not uploaded to our servers, and we cannot view them. Closing the page removes the working image and mask from the editor.

Information We Process

The information involved depends on which features you use:

1. Essential request data — IP address, request time, requested URL, browser and device information may be processed by our hosting and security providers to deliver the site, prevent abuse and diagnose failures.
2. Account information — if you create an account, we process the name, email address, authentication records and settings you provide.
3. Support information — if you contact us or open a ticket, we process the message and any attachment you deliberately submit.
4. Payment information — if paid features are offered and you purchase them, a payment provider processes the billing details needed for the transaction. We do not store full card numbers.
5. Analytics — when configured, Google Analytics or cookieless Plausible may process page views, feature usage, device/browser details, approximate location derived from IP address and pseudonymous or aggregate signals as described below.

We do not intentionally send names, email addresses or other directly identifying account data to Google Analytics or Google advertising services. Do not put personal information into public URL query parameters.

Cookies and Local Storage

We use essential storage for security, authentication when you sign in, language and theme preferences, and the privacy choice you save. These functions are necessary to provide the service.

The site treats each optional service separately. Google Analytics storage, Google One Tap, and configured customer-support widgets have independent controls under Privacy choices. Plausible, when configured in its standard cookieless mode, does not depend on the Google Analytics choice and does not use cookies or browser storage. See our Cookie Policy for the current defaults and service-by-service details.

Analytics and Optional Service Providers

The Google tag uses Consent Mode v2. For visitors in the European Economic Area, the United Kingdom and Switzerland, and when the hosting platform cannot reliably classify the request region, analytics_storage, ad_storage, ad_user_data, and ad_personalization default to denied. The Google tag still loads in Advanced Consent Mode and can send cookieless measurement signals. If the visitor enables Google Analytics, the site sends a consent update for analytics storage.

For other recognized countries, Google Analytics storage is enabled by default under the site's current regional policy and can be disabled at any time through Privacy choices. This classification uses Cloudflare's per-request country and EU signal; it is a service policy, not a claim that one fixed country list states every privacy law worldwide.

Plausible, when configured, loads once using its cookieless script and is kept separate from Google Consent Mode. Google One Tap and Crisp or Tawk.to support widgets each follow their own saved control. These providers may receive IP address, user agent and page URL when their service is active.

Google AdSense and Advertising

If Google AdSense is enabled, Google and other third-party advertising vendors may place and read cookies in your browser or use web beacons, IP addresses and other identifiers as a result of serving and measuring ads on this site. This data may be used for ad delivery, frequency control, fraud prevention, measurement and, where you have given valid consent, ad personalization.

Learn more about how Google uses data on partner sites and manage Google advertising preferences in My Ad Center.

AdSense code is allowed to load only when all of the following are true: the publisher has enabled AdSense, the exact site is marked Ready after AdSense review, a Google-certified consent management platform is published, and the current route is approved for advertising. For visitors in the European Economic Area, the United Kingdom and Switzerland, the certified CMP is integrated with the IAB Transparency and Consent Framework and governs Google advertising storage and personalization. The site's Privacy choices panel is not a Google-certified CMP and is never represented as one.

How We Use Information

We use information to:

• deliver, secure and maintain the site;
• provide accounts, purchases and support when those features are used;
• remember your selected settings;
• understand aggregate usage and improve the editor under the applicable regional default or your saved choice;
• detect fraud, abuse and technical failures; and
• comply with legal obligations and enforce our terms.

We do not sell personal information.

Sharing

We share information only when necessary with hosting, security, authentication, analytics, support and payment providers; when required by law; or to protect users, the service and our legal rights. Google One Tap and support widgets load only when their own control is enabled. Google Analytics and Plausible follow the separate behavior described above.

Data Retention and Security

We retain account, transaction and support data only for as long as needed to provide the service, meet legal obligations, resolve disputes and prevent abuse. Hosting and analytics providers keep technical data according to their configured retention periods. We use encrypted transport and access controls, but no Internet service can guarantee absolute security.

Your Choices and Rights

You can:

• reject optional services or withdraw consent through Privacy choices;
• manage personalized Google ads through My Ad Center;
• access, correct or delete account information through account settings where available; and
• ask us to access, correct, export or delete personal information by emailing support@purupuru-maker.org.

Depending on where you live, additional rights may apply, including objection, restriction, portability and appeal rights. We may need to verify a request before acting on it.

Children

Purupuru Maker is a general-audience creative tool and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided account or support information, contact us so we can review and delete it where required.

Changes

We may update this policy when the service or applicable requirements change. The date shown at the top identifies the latest revision.