Your family’s art belongs to your family.

Who this is for

Doodle Grove is an independent, parent-led creative project. An adult parent or legal guardian creates and manages the account. Children do not need their own email, password, or public profile. Use a nickname for each little artist.

What we store

We store the parent’s email, password hash, recovery-code hash, family settings, optional artist nicknames, artwork photos, cutout images, names, stories, and dates. Original photos can retain metadata from your camera. Check photos before upload and keep addresses, school details, faces, and other sensitive information out of the frame.

We store session records to keep you signed in. Authentication and support forms use limited request counters based on a hashed IP address or account identifier to reduce abuse. If you use Help, we store the reply email and message you submit.

What happens to a photo

Your browser prepares the cutout. The app uploads the original photo and cutout to private Cloudflare R2 storage. Cloudflare D1 stores the account and artwork information. The app uses Cloudflare Pages to serve the website. Cloudflare processes network requests and may keep operational and security logs under its own policies.

The app does not send your uploaded artwork to an AI image service. We use separate AI-created concept illustrations in our marketing and label them. Your family photos are not marketing material.

Who can see your world

Each parent account has its own private world. The service uses your authenticated account to access artwork. We do not provide a public artwork feed, advertising profiles, or a sale of your artwork. The project operator and infrastructure provider may access stored data when needed to maintain the service, handle a request, or meet legal obligations.

A phone QR link permits anyone who has it to add photos for 15 minutes. It cannot open the account, artwork archive, or private images. A new link replaces the prior link. Keep the QR code within your family.

Cookies and measurement

We use an essential, host-only session cookie for parent sign-in. It expires after 14 days unless you sign out earlier. We do not currently install advertising cookies or third-party behavioral analytics. We can count service records, such as the number of accounts and creations, to understand early use.

Your controls

Download original photos from the keepsake box. Download account settings, profiles, and artwork metadata from Family account. Delete an individual creation permanently from its detail view. Delete a child profile to remove its nickname from the profile list; existing artwork keeps its artist label until you edit or delete it.

Delete your family account with your current password to remove its photos, artwork records, settings, profiles, sessions, and phone links from active storage. The service keeps records while the account remains active. Infrastructure backups and security logs can remain for their provider retention periods; account deletion does not promise immediate removal from those copies. Separate support messages remain until the operator resolves or removes them.

Questions and requests

Use the Help form for privacy questions, support-message deletion, or a request you cannot complete inside your account. Include only what we need to help. Never send a password or recovery code. We may need proof that you control the account before we can act on private data.

We will update this notice if the service changes. We will ask for a new agreement before a material change to how we use uploaded artwork.