Privacy Policy

Last updated: September 8, 2026

DrawReport is operated by DrawReport Team, United States (“we,” “us”). We give a parent or guardian an educational report about their child’s drawing. This policy explains what we collect, who it goes to, and how long we keep it.

Questions about this policy, or about your data: team@drawreport.com.

Who this service is for

DrawReport is offered to residents of the United States who are 18 or older. It is intended for parents and guardians, not for children.

Children’s data (COPPA)

We do not knowingly collect personal information directly from children under 13. A parent or guardian uploads their child’s drawing and provides limited context — the child’s first name, gender, and birth month and year — on the child’s behalf, and as that child’s parent or guardian, consents to it.

We use a child’s information for one purpose only: producing the report that parent asked for. We do not use it to build profiles, we do not use it for advertising, we do not use it to train AI models, and we do not sell it. A parent can withdraw consent and have the child’s drawings and information deleted at any time by emailing team@drawreport.com.

What we collect

• The drawing images you upload and the context you type about the drawing and the child.
• Your email address, so we can send you the report and let you sign in.
• Payment: handled entirely by PayPal. We receive confirmation that a payment succeeded. We never see or store your card number.
• Basic web analytics: which pages were visited, on what kind of device, and how you reached the site. To get a rough location we look up an approximate region from your IP address and store only that region name — the IP address itself is never stored.

Cookies and advertising measurement

We use a small number of first-party cookies, and one advertising measurement tool, described below.

• dr_s — identifies a single visit, expires after 30 minutes of inactivity.
• dr_v — an anonymous visitor identifier so repeat visits are not double-counted.
• dr_utm — remembers how you first found the site (for example, a search or a link).
• locale — remembers which language version of the site you are reading.
• A sign-in cookie, set only after you sign in, which keeps you signed in.

We also use the Meta Pixel to learn whether our advertising on Facebook and Instagram brings people to the site, and to show our ads to people who have visited it. It sets a Meta cookie (_fbp) and tells Meta which public pages you viewed, whether you requested a free reading, and whether you bought a report. It is not loaded on the pages that show a drawing or a reading, and it never receives a drawing, a child’s name, or your email address. You can review and disconnect this in your Facebook or Instagram settings under “Your activity off Meta technologies,” and blocking third-party cookies in your browser switches it off.

You can clear or block cookies in your browser. Blocking them does not stop you ordering or reading a report.

Who else sees your data

We do not sell your data and we do not share it for anyone else’s marketing. Your child’s drawings are never published and never used in advertising. We use a small number of service providers, each of which receives only what it needs to do its job:

• Anthropic — the AI service that generates the report. It receives the drawing image and the context you entered. Under Anthropic’s commercial terms, data sent through their API is not used to train their models.
• Brevo — sends the emails that deliver your report and your sign-in codes. Receives your email address.
• PayPal — processes payment. Receives what it needs to take the payment; we do not pass it your child’s drawing or the report.
• Meta (Facebook) — advertising measurement, as described under Cookies. Receives page views on public pages and a signal that a reading was requested or a report was bought; never a drawing, a name, or an email address.
• Our hosting provider, which stores the site’s data on our behalf.

We may also disclose information if the law requires it.

How long we keep things

• Free readings: the uploaded photo is deleted 90 days after the reading. The text of the reading stays at your link.
• Paid reports: we keep the drawings and the report in your account so you can return to them. Ask us to delete them at any time and we will.
• Order and payment records: kept 7 years, because tax and accounting rules require it.
• Analytics records: which pages were visited and roughly where from, with no drawing and no IP address in them. We keep these while we run the site.

Your choices

Email team@drawreport.com to: - get a copy of what we hold about you, - correct something that is wrong, - delete your drawings, reports, and account.

We will respond within 30 days. Deleting your account does not delete the order records we are required to keep.

Security

Traffic to the site is encrypted. Access to reports is by a one-time code sent to your email, so keeping your email account secure matters.

Changes

If we change this policy we will update the date at the top. If a change materially affects how we handle your data, we will email people who have an account.