fivefingers
Coloring records and settings are stored on the device by default. When a guardian chooses to share, the picture and display language are stored on the Company’s servers for 30 days and can be opened through a link. There is no registration, login, or advertising.
다섯손가락 (fivefingers) (the “Company”) maintains this Privacy Policy to protect users' personal information in accordance with the Personal Information Protection Act (「개인정보 보호법」) and to promptly address related inquiries. This Policy applies to the mobile application and web service “Color Play” provided by the Company.
The Company does not request or collect the personal information listed below. However, information under Section 5 is stored when a guardian submits a bug report, and information under Section 6 is stored when a guardian shares a picture.
The records below remain on the device and are deleted with the app. Server copies of a shared picture and display language are retained separately for 30 days under Section 6.
| Record | Purpose | Storage Location |
|---|---|---|
| Color information for colored pictures | Resume coloring when the app is reopened | Local device storage |
| Selected language · Background music on/off | Retain settings | Local device storage |
| Completion status and whether the instructions have been viewed | Avoid repeating instructions | Local device storage |
| Purchase (unlock) ownership status | Keep purchased coloring books unlocked | Local device storage |
Color Play coloring-book unlocks (in-app purchases) are processed by the app market through which the app is distributed (Google Play or the Apple App Store). The Company neither receives nor retains any payment-related information, including card numbers, payment methods, or account information.
The app checks only the purchase confirmation token (an indication of which product was purchased) that the app market provides to the device to unlock the applicable coloring book. This verification occurs on the device and is not transmitted to the Company's servers.
Personal information processed during payment is governed by the privacy policy of the relevant market operator (Google Privacy Policy · Apple Privacy Policy).
Color Play is used by children, including preschoolers. Before sharing, guardians should review the retention period and who can access the link, and check that the picture contains no names, photos, or other details identifying the child.
Only when you use “Report a Bug” in the app's parent menu to report an issue is the information below transmitted to the Company's report intake server. This feature becomes available only after parental verification (an arithmetic problem), and no information is transmitted unless you submit the report.
| Item Transmitted | Details |
|---|---|
| Title and description entered by the parent | Exactly as submitted |
| Device information string | User-Agent value indicating browser and device type (e.g., Android 14, Chrome 130) |
| App version | Version identifier of the app in which the issue occurred (e.g., colorplay-v345) |
| Number of the picture being viewed | If a picture was open, the identifier of that picture (e.g., dog_v3) |
| Time received | Time the report was received |
The Company does not request or collect contact information, such as a name, email address, or telephone number, in bug reports. Accordingly, we cannot reply individually to submitted reports. If you require a response, please contact us directly at the email address below.
Please do not include personally identifiable information, such as a name, telephone number, or address, in text entered by a parent. Because the content entered in the field is transmitted and retained as submitted, any personal information included will be deleted promptly upon discovery.
Retention and Use Period: Bug report content is retained for up to one year from the date received for issue investigation and correction and is then destroyed without delay. To request earlier destruction, please contact us using the information below.
The app sends the picture image (PNG) and its display language, not names or device identifiers. The server also stores a random link ID and upload time.
The purpose is to show the picture by link to people chosen by the guardian. The Company cannot identify the chosen recipients or receiving apps and does not use the picture for other purposes.
Pictures are stored in Cloudflare, Inc.’s R2, with unpredictable random addresses and search indexing disabled. Anyone who knows the link can view the picture; send it only to people you trust.
Sharing links stop opening exactly 30 days after upload. Pictures and display languages are removed by an R2 lifecycle rule after 30 days; physical deletion typically completes within 24 hours after expiry but may take longer. For earlier deletion, send the link to the contact in Section 11. Copies saved by recipients or messenger previews may remain.
Cloudflare processes connection IP addresses for network communications. To prevent upload abuse, IP addresses and hourly request counts are stored in KV for at most 1 hour and then automatically deleted. They are not linked to pictures to track users.
If upload fails, the operating system shares the picture file with a fixed message and app download link. This fallback performs no additional upload, but an upload whose response was lost may already be stored and will expire after 30 days.
The Company entrusts the providers below with operating the service and sharing links. They may also process connection information such as IP addresses.
| Service Provider | Services |
|---|---|
| Google LLC (Google Play) | App distribution and in-app payment processing |
| Apple Inc. (App Store) | App distribution and in-app payment processing |
| Cloudflare, Inc. | Web pages and bug report servers; sharing pages and temporary picture storage (30 days); abuse prevention counters (at most 1 hour) |
The following describes overseas processing and storage for sharing links using the disclosure items in Article 28-8 of Korea’s Personal Information Protection Act.
| Recipient | Cloudflare, Inc. |
|---|---|
| Countries | The United States and countries hosting Cloudflare’s global data centers |
| Time and method | Encrypted network transmission when the guardian initiates sharing |
| Information transferred | Picture image, display language, link ID and upload time; IP address and request count for communications and abuse prevention |
| Purpose | Providing sharing links and preventing upload abuse |
| Retention | Picture, language and link metadata: 30 days / IP counters: at most 1 hour |
| Contact | Cloudflare: privacyquestions@cloudflare.com / fivefingers: onesun4sons@gmail.com |
| How to refuse and effect | Do not initiate sharing to avoid transferring the picture. Coloring and saving photos locally remain available if you decline sharing. |
Users and legal representatives of children under 14 may request access, correction, deletion, or suspension of processing. To delete a shared link, send its address to the contact in Section 11. Bug report deletion can be requested there too. Deleting the app removes device records but does not remove existing links before separate deletion or their 30-day expiry.
To report or seek consultation regarding an infringement of personal information, you may contact the following institutions.
If this Privacy Policy is changed, the changes and their effective date will be posted on this page. Material changes will be announced at least seven days before their effective date.