Colour Break
Privacy policy
Learn about our statistics, safeguards, email contact and planned Google advertising.
Version: 25 October 2026.
1. Controller and contact
The controller of personal data associated with Colour Break / Przerwa na kolor is:
For privacy enquiries and rights requests, email colourbreak-contact@gmail.com. Full service provider details, including the postal address, are included in the terms of use.
2. Browsing and statistics
You can browse, download and print colouring pages without an account. Without your consent, our own statistics use no browser identifier. Optional statistics cookies are enabled only after consent through the privacy controls. We do not use localStorage or sessionStorage to recognise visitors. We do not use Google Analytics. Planned advertising technologies are described separately below; Google advertising scripts and advertising cookies are not active in the current version.
We save aggregate daily counts of colouring-page visits, print-button uses and PDF downloads, grouped by illustration and language. These statistics contain no IP addresses, visitor identifiers, email addresses or search text. They are not used to identify people. Aggregate statistics may be retained without a fixed deletion date because we do not associate them with individuals.
Search queries are used to display results and may remain in the page URL and your browser history. Do not enter personal information into the search box.
Optional statistics cookies and remembering your choice
In Privacy settings, you can accept more accurate statistics, refuse them or save your own selection. Optional statistics are off by default. Refusal or withdrawal does not affect browsing, downloads or printing. Our controls do not grant consent to Google advertising.
- cb_consent — necessary choice storage: saved after your decision for 180 days. It contains the policy version, choice and time saved, without a random visitor identifier. It respects acceptance or refusal and is not renewed on every visit.
- cb_visit — optional more accurate statistics: after consent, opening a colouring page stores a random identifier valid for 30 minutes after the latest qualifying visit. It allows the same colouring page in the same language to count once per 30-minute window measured from the last counted visit. It is not used for tracking across websites and is not written to statistics files.
Both cookies are first-party and host-only, with HttpOnly and SameSite=Lax, and Secure when HTTPS forwarding is correctly configured. Choices are separate for each domain and browser.
The basis for optional cb_visit processing is Article 6(1)(a) GDPR; consent for storing and accessing it is also obtained under Article 399 of Poland's Electronic Communications Law. Remembering a requested choice is necessary to respect it; decision data is processed to demonstrate and respect that choice under Article 6(1)(c) GDPR in connection with Article 7 GDPR.
Withdraw consent through the footer's Privacy settings link by selecting Only necessary or switching statistics off and saving. We then delete cb_visit and associated server-memory entries. Withdrawal does not affect the lawfulness of previous processing. Existing aggregate totals remain because they no longer contain the identifier.
Without consent, we count aggregate page requests and actions without identifying the browser. With consent, repeat visits are omitted within a 30-minute window; print and download actions are still counted separately. Repeat-visit memory is limited to 50,000 entries, progressively cleaned after expiry and lost on server restart. Counts do not represent unique people or confirmed prints.
3. Connections and security
Serving a connection requires technical processing of your IP address and browser request information. We do not retain visitor access logs. To limit automated counter abuse, the server temporarily processes an IP address and holds a hash of it in memory, without writing it to statistics files. This does not track activity across websites.
The legal basis for technical data processing to serve and secure the website is Article 6(1)(f) GDPR: our legitimate interest in operating the website and preventing abuse. Security entries inactive for at least 10 minutes are progressively removed during subsequent checks; all entries disappear when the server process restarts.
4. Email correspondence
When you email us, we process your email address, message and voluntarily supplied information to reply and handle your report or complaint. The basis is Article 6(1)(f) GDPR: our legitimate interest in handling correspondence and reports. For data protection requests, Article 6(1)(c) GDPR also applies in connection with GDPR obligations. Marketing consent is not needed for us to reply.
Providing a reply address and information needed to answer is voluntary, but without them we may be unable to handle the matter. Avoid unnecessary personal information, especially children's data or sensitive data. We retain correspondence while handling the matter and for up to 12 months afterwards. Where necessary to establish, exercise or defend legal claims or meet a legal obligation, relevant messages may be kept longer for the applicable statutory period.
5. Providers and data transfers
Hosting is provided by OVHcloud. The provider maintains the infrastructure and may access data as necessary for technical support. See the OVHcloud privacy policy. Our statement about not retaining access logs describes our website configuration; it does not mean the infrastructure provider processes no technical data of its own.
We use Gmail, provided by Google, for correspondence. Email services may involve processing outside the European Economic Area, including in the United States. Google describes its transfer mechanisms, including adequacy decisions and standard contractual clauses, in its data transfer rules. See also Google's privacy policy. Information about safeguards is available at these links and by contacting us. Data may also be disclosed to authorised authorities where required by law.
6. Your rights
Subject to GDPR conditions, you may access, correct or erase your personal data, restrict processing and object to processing based on legitimate interests. Data portability applies where the conditions of Article 20 GDPR are met; it does not automatically apply to every processing activity described here. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.
Send requests to colourbreak-contact@gmail.com. We normally reply within one month; any extension and its reasons are communicated as required by GDPR. We do not collect additional information solely to identify people in aggregate statistics. You may lodge a complaint with the President of Poland's Personal Data Protection Office at uodo.gov.pl, or another competent supervisory authority.
7. Policy updates
The current policy is published here with its version date. New services or technologies require appropriate updates to this information and, where legally required, consent before activation.
8. Planned Google AdSense advertising
Current status: Google advertising is not active. The following describes our planned use of AdSense. Before activation, we will complete the service provider details, partner list and information about technologies actually used, and provide consent controls.
The planned advertising provider is Google, including Google Ireland Limited in the EEA. Google and its advertising partners may process IP addresses, approximate location, device and browser information, cookie identifiers, and ad impressions, clicks and interactions. Purposes include selecting and delivering ads, measuring performance, limiting repetition and preventing fraud. Advertising data is separate from our own aggregate colouring-page statistics.
Google and other vendors may use cookies and similar technologies. Where personalisation is enabled with appropriate consent, these technologies allow Google and its partners to show ads based on previous visits to this and other websites. Non-personalised ads are not selected using activity history, but may still require cookies, for example for frequency capping and measurement. Non-personalised advertising therefore does not automatically remove consent requirements.
9. Consent and advertising choices
Our planned model requires consent before enabling optional advertising cookies and processing for which consent is required. The basis for that personal data processing will be Article 6(1)(a) GDPR; storage of or access to information on a device is also subject to Article 399 of Poland's Electronic Communications Law. Browsing the website or accepting its terms does not replace required consent.
Before enabling ads, we will provide appropriate consent controls, meeting Google's certified CMP and TCF requirements for traffic from the EEA, the UK and Switzerland. They will allow refusal of optional purposes, access to provider and purpose information, and subsequent changes or withdrawal. These controls are not currently active because advertising has not been enabled.
Refusal will not block browsing, downloading or printing. Under our planned configuration, optional advertising technologies requiring consent will not run after refusal. Withdrawal will not affect the lawfulness of previous processing. Independently, you can change Google's personalisation settings in My Ad Center; this does not replace granting or withdrawing consent through this website's controls.
10. Advertising partners, retention and children
See How Google uses information from partner sites and apps for information about Google's advertising processing. Processing may involve transfers outside the EEA, including to the United States, under the transfer mechanisms described by Google.
Advertising data retention and cookie lifetimes depend on the technology and provider. Before enabling ads, the consent controls will disclose the actual active partners, purposes, retention information and their privacy policies. See also Google's cookie information. Google's advertising data does not necessarily have the same short retention as our temporary security checks.
The website includes colouring pages for children. We do not plan personalised advertising or remarketing to children. Before enabling ads, we will apply appropriate Google settings for child-directed content and account for age-related restrictions. Children should not provide personal information to use the colouring pages. A child's click on a notice does not replace consent required from a parent or guardian.
Where processing is based on consent, you may withdraw it at any time. Data portability applies where the conditions of Article 20 GDPR are met. Other rights and contact instructions are described in section 6.