PizzaDoodle is a drawing app for kids, operated by Baconware LLC ("PizzaDoodle," "we," "us"). It is directed to children under 13, so it follows the U.S. Children's Online Privacy Protection Act (COPPA). This notice explains what we collect, how we use it, who can see it, and the choices parents have. Version 2026-10-15.
Who we are and how to reach us
Baconware LLC, 800 Village Walk #163, Guilford, CT 06437. Phone: (716) 562-8438. Email: hello@pizzadoodle.com. Baconware LLC is the only operator collecting or maintaining children's personal information through PizzaDoodle, and it handles all questions from parents about their children's information.
The short version
- Parents create every account and every child profile. Children can't sign up on their own.
- We never ask children for an email address, phone number, photo, birthdate, school, or location.
- A child's name, avatar, and the drawings they choose to share are seen only by friends a parent approved (and those friends' parents), plus their own family.
- No ads. We never sell or rent personal information, and we don't use it to build profiles or train AI.
- Parents can review, download, or delete their child's information, or stop further collection, at any time from Privacy & data.
What we collect
From parents
- Email address, used to sign you in (by emailed link or code) and to send your children's sign-in codes and notices like this one.
- The name your kids know you by (for example "Mom"), shown to your family and, on shared drawings or challenges, to your kids' approved friends.
- Settings and family connections: co-parents you invite (their email), friend approvals, and your consent records.
- Your own drawings, if you make any, and who you shared them with.
About children: provided by the parent
- A first name or nickname (please don't use a full name), a username the child types to sign in and that friends use to find them, and a cartoon avatar picked from a fixed set.
From children, as they use PizzaDoodle
- Drawings (the strokes and colors, plus a picture of the drawing) and the titles children give them.
- Friend requests and friendships (each one approved by the other child's parent, or automatically if that parent has turned on auto-approve in Settings), and which friends a drawing is shared with.
- Challenges: challenges a child starts (a short title and optional rules they type), the drawing they enter, and their vote.
- Comments and reactions: short comments (up to 200 characters) and emoji reactions (like ❤️ or ⭐) a child leaves on drawings they made or that were shared with them.
- Groups: names a child gives to saved lists of their friends (for example "Art Club"), used to share or start a challenge with several friends at once. Only the child and their parents see a child's groups.
- We block emails, phone numbers, street addresses, and web links from text children type, such as drawing titles, challenge names, comments, and group names, and we ask children not to include personal details in drawings.
Collected automatically
- Sign-in cookies: one that keeps a parent signed in, and one that keeps a child signed in on a device for up to 30 days.
- Device and security information: IP address, browser type, and sign-in events. We use these only to keep accounts secure, for example to stop someone guessing sign-in codes, to show parents which devices their child is signed in on, and to investigate abuse. We don't use them to contact a child, build a profile, or show ads.
- Bot protection: the parent sign-in form uses Cloudflare Turnstile, which checks the browser to tell people from automated programs.
PizzaDoodle has no advertising, analytics, or social-media trackers on any page a child uses. We don't collect photos, voice recordings, precise location, or biometric information.
How we use information
- To provide PizzaDoodle: sign-ins, drawing and saving, friends, groups, sharing, comments and reactions, challenges, and the family activity feed.
- To keep children safe: parent approval of friends, limits on sign-in attempts, blocking personal details in typed text, and security logging.
- To send service emails to parents: sign-in links and codes, children's sign-in codes, co-parent invitations, and notices about privacy or changes. We don't send marketing email to children (they have no email with us).
- To comply with the law and protect the security of PizzaDoodle and its users.
We don't require a child to give more information than is reasonably needed to take part in any activity.
Who can see a child's information
- The child's own parents, meaning the parent who created the profile and any co-parent they invited, can see everything about the child.
- Approved friends and their parents can see the child's first name or nickname and avatar, the drawings the child chooses to share with them, and the child's entries and name in challenges they're in together. Kids in the same challenge may see each other's names and entries once it ends, even if they aren't friends with each other, because they were all invited by the same friend or that friend's parent.
- Comments and reactions on a drawing can be seen by the artist and the artist's parents, and by the other kids the drawing is shared with, and their parents. A child sees comments only from kids they're friends with (or their brothers and sisters) and from the artist. Reactions are shown as totals. Parents can hide any comment on their child's drawings, on drawings shared with their child, or written by their child.
- Nothing is public. Drawings, profiles, and challenges can't be seen by anyone outside these groups, and children's usernames aren't shown to other families.
Sharing with approved friends is a core part of the service. When you agree to this notice, you agree to it. If you don't want your child to share, you can decline or remove friendships at any time, and your child can keep drawing privately.
Service providers
These companies process information only to run PizzaDoodle for us, under written terms that limit their use of it and require them to protect it. They are not allowed to use it for their own purposes.
- Supabase: database, sign-in, and storage (data stored in the United States).
- Netlify: hosts and serves the website.
- Resend: delivers our emails to parents.
- Cloudflare: bot protection on the parent sign-in form.
We may also disclose information if the law requires it, to protect a child's safety, or to protect the security of PizzaDoodle. If Baconware LLC is ever sold or merged, children's information will stay protected by this notice, and we will notify parents and ask for new consent before any material change in how it is used.
For parents: consent and your choices
How you consent. Before we collect anything from a child, the parent signs in by proving they control their email address, reads this notice, and gives consent when adding the child's profile. We then email the parent a confirmation that explains how to change their mind. Nothing is collected from a child whose parent hasn't consented.
Your rights. At any time, you can:
- Review what we have about your child. Everything is visible in the parent portal, and Privacy & data lets you download all of it in one file.
- Stop further collection: pause your children's sign-ins, sign them out of any device, or end friendships, without deleting anything.
- Hide comments on your child's drawings, on drawings shared with your child, or written by your child. Hidden comments are kept (not shown to anyone) until the child or account is deleted.
- Delete your child's information, or your whole account. Deletion takes effect right away and becomes permanent after 30 days. You can undo it during that time.
- Withdraw consent. Deleting the child's profile or your account does this, and we stop collecting from that child.
You can also email hello@pizzadoodle.com. We'll confirm you are the child's parent (normally by replying to the email address on your account) before acting on a request about a child. Only the parent who created a child's profile can delete it or pause its sign-ins. A co-parent can download information and sign the child out of devices.
How long we keep information
We keep children's information only as long as it is reasonably needed for the purposes below, and then delete it. We don't keep it indefinitely.
- Profiles, drawings, friendships, groups, shares, comments, reactions, and challenges: needed to provide the service. Kept while the account is active. Deleted 30 days after a parent deletes the child or the account. [Inactive accounts: proposed deletion after 24 months with no sign-ins, with 30 days' email notice. Confirm before publishing.]
- Children's sign-in codes: needed to sign in. They expire after 10 minutes, and we delete them within 24 hours.
- Device sign-ins (device, IP address, browser): needed for security and to let parents manage devices. A sign-in lasts up to 30 days, and the record is deleted 90 days after it ends.
- Security logs: needed to detect and investigate abuse. Deleted after 12 months.
- Consent records: needed to show we obtained consent. Kept while the child's profile exists, then for 3 years.
- Backups: our database provider keeps encrypted backups for disaster recovery. They are overwritten on a rolling basis within [backup retention period, confirm with Supabase plan] days.
- Email delivery logs: kept by our email provider for [Resend log retention, confirm] days.
How we protect information
We maintain a written information security program, reviewed at least once a year. Among other safeguards:
- All traffic is encrypted.
- Database access is restricted family by family.
- Sign-in codes and device tokens are stored only in scrambled, one-way form.
- Sign-in attempts are limited.
- Parent accounts have no passwords that could be stolen.
- Access to our systems is limited to people who need it.
No system is perfectly secure. If a breach affects your family's information, we will notify you as the law requires.
State privacy rights
Depending on where you live, you may have additional rights under state law, such as access, deletion, or correction. Use the same tools and contact above, and we will honor them. We do not sell or "share" personal information for targeted advertising. [Attorney: confirm state-specific language.]
Changes to this notice
If we make a material change to how we handle children's information, we will email parents beforehand and ask for new consent before applying the change to a child's information. The version and effective date are at the top of this page.