Privacy Policy

This Privacy Policy explains how Orange Pencil Art ("we", "us") handles personal data on the website orangepencil.art and on our social media accounts.

Who we are

Orange Pencil Art is a small independent coloring book publisher based in Slovenia (EU). Contact: [email protected].

Website visitors

• No cookies, no tracking. The website does not use analytics, advertising or tracking cookies.
• Newsletter. If you sign up, we store your email address so we can send you news about our books. You can unsubscribe at any time using the link in every email or by writing to us. Legal basis: your consent.
• Contact. If you write to us, we use your name, email address and message only to reply to you. Legal basis: our legitimate interest in answering your request.
• Hosting. Our hosting provider may process technical data (such as IP address) for a short time to deliver the website securely.
• Amazon links. Our books are sold on Amazon. When you follow a link to Amazon, Amazon's own privacy policy applies.

Our social media

We share our coloring pages on TikTok and Instagram (@orangepencil.art). To publish posts to our own accounts and see how they perform, we use a small in-house tool called the Orange Pencil Art app. It is used only by us, for our own accounts, and is not offered to anyone else.

Orange Pencil Art app and TikTok

The Orange Pencil Art app uses the official TikTok for Developers APIs (Login Kit, Content Posting API and Display API). When we connect our TikTok account, TikTok asks for our consent and the app only receives the permissions we approve.

Data the app receives from TikTok

• Basic account information (user.info.basic): TikTok account ID (open_id), display name and profile picture - used to show which account is connected.
• Account statistics (user.info.stats): follower, following, like and video counts - used to see how our account grows.
• Our own videos and posts (video.list): titles, cover images, links and view, like, comment and share counts of our own posts - used to see which content works best.
• Content posting (video.upload, video.publish): permission to upload our own videos and photo posts to our account, either as drafts in the TikTok inbox or as direct posts. We only upload content we created ourselves.
• Access and refresh tokens issued by TikTok, so the app can act on our behalf.

How this data is used and protected

• The data is used only to publish our own content and to review the performance of our own account. It is not used for advertising, profiling, selling or training of AI models.
• We do not access, collect or store data of other TikTok users, their videos, followers or messages.
• TikTok data is not shared with any third party, except our hosting provider, which stores it on our behalf.
• Tokens are stored on our server with restricted access and are never shown publicly.
• Statistics are kept only as long as we need them to review our content, and at most 2 years. Tokens are deleted as soon as the account is disconnected.
• Access can be withdrawn at any time in the TikTok app under Settings and privacy > Security > Manage app permissions. After that, the app can no longer access the account and the stored tokens become invalid.
• To request deletion of any TikTok data held by the app, write to [email protected]. We delete it within 30 days.
• Our use of TikTok data complies with the TikTok Developer Terms of Service and TikTok's policies.

Instagram

The same tool connects to our own Instagram account through the official Instagram API. It receives our basic profile information, the statistics of our own posts and permission to publish to our own account. We may read public comments on our posts in order to reply. The same rules apply as for TikTok: used only for our own account, never sold or shared, and deleted when the account is disconnected.

How long we keep data

Newsletter data is kept until you unsubscribe. Contact messages are kept for as long as needed to answer you, and at most 2 years. Login tokens are deleted when we disconnect an account.

Your rights

Under the GDPR you have the right to access, correct or delete your data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. Write to [email protected]. You may also lodge a complaint with the Slovenian Information Commissioner (Informacijski pooblaščenec, ip-rs.si).

Children

Our books are for little and big artists, but the newsletter and contact form are meant for adults. We do not knowingly collect personal data from children.

Changes

We may update this policy. The date at the top shows the latest version.