PRIVACY & COOKIE POLICY
Last updated August 16, 2026

The short version

This page is the full legal policy, and it is long. Here is what most people want to know, in plain language. The formal text begins further down and governs if the two ever disagree.

  • We do not sell your personal information, and we do not share it for advertising. There are no ad networks or tracking pixels on this site.
  • What you type into the create form is sent to Google to write your material. Your name, email, and account number are not.
  • You can download everything we hold about you, or delete your account, yourself — from My Profile, without asking us.

Your privacy rights

You do not need to contact us to exercise any of these.

What you want Where What happens
A copy of everything we hold My Profile → Download My Data A ZIP downloads immediately, containing your account details, every saved material, your generation history, and your billing records as readable JSON.
Correct your details My Profile Edit and save. Effective at once.
Turn product analytics on or off My Profile → Privacy, or the cookie banner Off unless you turn it on. Both controls set the same preference, and it applies in your browser and on our servers together.
Delete your account My Profile → Your Data → Delete My Account Closes immediately, erased permanently 30 days later.
Change your cookie choices Cookie Preferences, on any page Applies as soon as you save.

You can also email support@chalkdraft.com from the address on your account. We reply within 30 days for UK and EU requests and 45 days for California requests. If we need longer we will tell you before that deadline and say why.

Deleting your account

Your account closes straight away, and your saved materials stop being available. Nothing is erased for 30 days. During that window you can sign in and cancel, and everything comes back. We do it this way because people change their minds, and because if somebody else got into your account and deleted it, you need to be able to undo that yourself.

After 30 days your account, saved materials, generation history, and billing records are permanently deleted, along with your records at Stripe, PostHog, and Brevo. This cannot be undone. If you have a paid subscription, asking to delete stops it renewing immediately, so you are not charged again while deciding.

Two things survive, and we would rather say so than bury it. Stripe keeps its own record of payments you made, because tax law requires it. And we keep an internal log recording that a deletion happened, with your email address removed from it — that log is the evidence the erasure was carried out.

Who we share data with

Every company that receives personal information, what each one gets, and why.

Company What it receives Why
Google — Gemini
United States		 What you enter on the create form: grade level, subject, topic, material type, difficulty, tone, and anything in Additional instructions. Generated text is sent back when a material is revised or checked. When a written answer is typed into an interactive assessment, that answer is sent with its question and the saved model answer so it can be marked. This includes answers typed by someone you sent a share link to, who may not have a ChalkDraft account. Typed answers are not stored: they are used to produce the feedback shown on screen and then discarded. Nothing is recorded about who took a shared quiz. Your name, email, and account number are not sent. Writing your materials, and marking written answers in an interactive assessment.
Google — Drive
United States		 The finished document, only when you choose to export it, into your own Drive. Saving a material to your Google account.
Google — Sign-In
United States		 Only if you sign in with Google. Google gives us your Google account ID, email address, whether it is verified, and your name. Signing you in without a separate password.
Stripe
United States		 Your email address, account number, and chosen plan. Card details go to Stripe directly and are never seen or stored by ChalkDraft. Taking subscription payments.
Brevo
European Union		 Your email address and the contents of the message being sent — password resets, address verification, account notices, and anything you send to support. Sending you email.
PostHog
United States		 Your account number — not your name or email — with events like signing in or generating a material, and the type, subject, and grade level involved. In your browser, page views and clicks. Error reports too. The contents of your materials are never sent. Seeing which parts of ChalkDraft get used, so we know what to improve. Off if you opt out.
Termly
United States		 Your cookie choices, stored in your browser. Running the cookie banner.
Render
United States		 Everything. Render hosts the application and the database, so every record described in this policy lives on their infrastructure. Running the site and storing your data.
Plotly and Google Fonts IP address and browser details only, when a page loads a chart library or a font from them. Nothing about your account. Delivering charts and fonts.

Please do not type student names or personal details into the instructions box. Anything you put there is sent to Google to generate the material and is saved alongside it afterwards. Describing the need rather than the student — “for a student reading two grades below” — works just as well and keeps their information out of the system entirely. ChalkDraft is built for adults who teach; accounts are limited to people aged 18 or over and we do not knowingly collect anything from children.

How long we keep things

What How long
Your account, saved materials, generation history, billing records Until you delete your account, then 30 more days
Password reset links 10 minutes, then deleted
Email verification links 24 hours, then deleted
An export to Google Docs you started but did not finish 24 hours, then deleted
IP addresses Held briefly in memory to limit request rates. Never written to our database.
Record that an account was deleted Kept, with the email address removed

If you are in the UK or the European Economic Area

The UK and EU GDPR give you the rights above and more: to object to processing, to ask us to restrict it, to receive your data in a portable format, and to complain to your national data protection authority. The download described above is structured JSON specifically so it satisfies the portability right.

We rely on these legal bases:

  • Performing our contract with you — running your account, generating what you ask for, and taking payment.
  • Consent — non-essential cookies and product analytics, withdrawable at any time without affecting anything done beforehand.
  • Legitimate interests — keeping the service secure and preventing abuse.
  • Legal obligation — payment and tax records.

ChalkDraft operates from the United States and most of the companies above are US-based, so your data is transferred outside the UK and EEA. Those transfers rely on the standard data processing terms we have accepted with each provider, which incorporate the European Commission's standard contractual clauses where the provider offers them. We have not negotiated separate terms with any of them.

Each company's own privacy notice is linked in the table above, and describes what it does with the data it receives. If you want a copy of the transfer safeguards that apply to your data, email support@chalkdraft.com and we will tell you which terms apply to each provider and where to read them.

If you are in California

You have the right to know what we collect and who we disclose it to, to delete it, to correct it, and not to be treated differently for exercising any of them. The controls above cover all of these, and using them changes nothing about your plan or price.

We do not sell your personal information and we do not share it for cross-context behavioral advertising. We have not done so in the preceding twelve months.

The full policy

Everything below is the complete legal text, including the formal descriptions of the categories of information we collect, our cookie practices, and your statutory rights.




This Privacy Notice for ChalkDraft (doing business as ChalkDraft) ("we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:
This combined notice also explains how we use cookies and similar technologies, including our use of PostHog for product analytics and Termly for consent management.
  • Use ChalkDraft. ChalkDraft is a Flask-based web app that helps instructors, tutors, and homeschool parents generate classroom-ready and learning-ready educational materials using Google Gemini.
  • Engage with us in other related ways, including any marketing or events
Questions or concerns?Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at support@chalkdraft.com.


SUMMARY OF KEY POINTS
This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contentsbelow to find the section you are looking for.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about personal information you disclose to us.

Do we process any sensitive personal information?Some of the information may be considered "special" or "sensitive" in certain jurisdictions, for example your racial or ethnic origins, sexual orientation, and religious beliefs. We do not process sensitive personal information.

Do we collect any information from third parties? If you sign in with Google, we receive your Google account identifier, email address, verified-address flag, and name from Google. Our payment processor sends us your subscription and invoice status. We do not buy personal information or obtain it from data brokers.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so. Learn more about how we process your information.

In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties. Learn more about when and with whom we share your personal information.

How do we keep your information safe? We have adequate organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Learn more about how we keep your information safe.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. Learn more about your privacy rights.

How do you exercise your rights? The easiest way to exercise your rights is by submitting a data subject access request, or by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

Want to learn more about what we do with any information we collect?Review the Privacy Notice in full.


TABLE OF CONTENTS
1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE PROCESS YOUR INFORMATION?
3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
4. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?
5. HOW DO WE HANDLE YOUR SOCIAL LOGINS?
6. HOW LONG DO WE KEEP YOUR INFORMATION?
7. HOW DO WE KEEP YOUR INFORMATION SAFE?
8. DO WE COLLECT INFORMATION FROM MINORS?
9. WHAT ARE YOUR PRIVACY RIGHTS?
10. CONTROLS FOR DO-NOT-TRACK FEATURES
11. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
12. DO WE MAKE UPDATES TO THIS NOTICE?
13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
15. COOKIES AND SIMILAR TECHNOLOGIES


1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short:We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:
  • email addresses
  • passwords
  • first and last names
  • optional profile and general location information, including country, state, province, or region, and time zone
Sensitive Information. We do not process sensitive information.

Social Media Login Data.We may provide you with the option to register with us using your existing Google account. Google is the only third-party sign-in provider we support. If you choose to register in this way, we will collect certain profile information about you from Google, as described in the section called"HOW DO WE HANDLE YOUR SOCIAL LOGINS?" below.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Google API

Our use of information received from Google APIs will adhere to  Google API Services User Data Policy, including the  Limited Use requirements.


2. HOW DO WE PROCESS YOUR INFORMATION?

In Short:We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:
  • To generate the educational materials you ask for. We send the details you enter on the create form, including anything in the additional instructions field, to Google's Gemini API, which writes the material. We store the material and the inputs that produced it so you can reopen, export, and reuse them. To take payment for a subscription. We share your email address and account number with Stripe to set up and manage a subscription, and we keep a local record of invoice status. To facilitate account creation and authentication and otherwise manage user accounts.We may process your information so you can create and log in to your account, as well as keep your account in working order.
  • To personalize account settings and understand general usage by location. We may process your optional country, state, province, or region, and time zone to display dates and times appropriately, maintain your account preferences, and understand generally where ChalkDraft users are located.

  • To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
  • To comply with our legal obligations. We may process your information to comply with our legal obligations, respond to legal requests, and exercise, establish, or defend our legal rights.

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described in this section and/or with the following third parties.

We may need to share your personal information in the following situations:
  • Service Providers. We share personal information with the companies that run parts of the Service on our behalf: Google, to generate materials and to sign you in; Stripe, to take payments; Brevo, to send email; PostHog, for product analytics; Render, which hosts the application and database; and Termly, which runs our cookie banner. The table headed “Who we share data with” at the top of this notice sets out exactly what each one receives and why. Each acts under a written contract and may use the information only to provide its service to us.
  • Legal Requests. We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.
  • Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

4. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?

In Short: We offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies.

As part of our Services, we offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies (collectively, "AI Products"). These tools are designed to enhance your experience and provide you with innovative solutions. The terms in this Privacy Notice govern your use of the AI Products within our Services.

Use of AI Technologies

We provide the AI Products through third-party service providers ("AI Service Providers"), including Google (Gemini API). As outlined in this Privacy Notice, your input, output, and personal information will be shared with and processed by these AI Service Providers to enable your use of our AI Products for purposes outlined in "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?" You must not use the AI Products in any way that violates the terms or policies of any AI Service Provider.

Our AI Products
Our AI Products are designed for the following functions:
  • AI document generation

How We Process Your Data Using AI
All personal information processed using our AI Products is handled in line with our Privacy Notice and our agreement with third parties. This ensures high security and safeguards your personal information throughout the process, giving you peace of mind about your data's safety.

How to Opt Out

We believe in giving you the power to decide how your data is used. To opt out, you can:
  • Contact us using the contact information provided

5. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short:If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.

Our Services offer you the ability to register and log in using your Google account. Google is the only third-party sign-in provider we support; we do not offer sign-in through Facebook, X, or any other social media platform. Where you choose to sign in with Google, we receive your Google account identifier, your email address, whether Google has verified that address, and your first and last name. We do not receive a friends list, a contact list, a profile picture, or anything else you have made public on any platform.

We will use the information we receive only for the purposes that are described in this Privacy Notice or that are otherwise made clear to you on the relevant Services. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party social media provider. We recommend that you review their privacy notice to understand how they collect, use, and share your personal information, and how you can set your privacy preferences on their sites and apps.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short:We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). We keep your personal information for as long as you have an account with us. When you delete your account it closes immediately, and everything in it is permanently erased 30 days later. That delay exists so you can cancel the deletion if you change your mind. Shorter periods apply to some records: password reset links are deleted after 10 minutes, email verification links after 24 hours, and an export to Google Docs that was started but never finished after 24 hours. Two things outlive your account. We keep an internal record that a deletion took place, with your email address removed from it, and Stripe keeps its own record of payments you made because tax and accounting law requires it.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short:We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

8. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at support@chalkdraft.com

9. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.

Withdrawing your consent: If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below.

However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Account Information

You can review, change, download, or delete your account yourself at any time from My Profile. If you would rather we did it, or you cannot sign in, you can:
  • Contact us using the contact information provided.
Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

If you have questions or comments about your privacy rights, you may email us at support@chalkdraft.com

10. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.

California law requires us to let you know how we respond to web browser DNT signals. Because there currently is not an industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.

11. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short:If you are a resident of California, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. More information is provided below.

Categories of Personal Information We Collect

The table below shows the categories of personal information we have collected in the past twelve (12) months. The table includes illustrative examples of each category and does not reflect the personal information we collect from you. For a comprehensive inventory of all personal information we process, please refer to the section "WHAT INFORMATION DO WE COLLECT?"

Category Examples Collected
A. Identifiers
Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name

YES

B. Personal information as defined in the California Customer Records statute
Name, contact information, education, employment, employment history, and financial information

NO

C. Protected classification characteristics under state or federal law
Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data

YES

D. Commercial information
Transaction information, purchase history, financial details, and payment information

NO

E. Biometric information
Fingerprints and voiceprints

NO

F. Internet or other similar network activity
Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements

NO

G. Geolocation data
General location information, such as country, state, province, or region, and time zone. We do not collect precise GPS location through these profile fields.

YES

H. Audio, electronic, sensory, or similar information
Images and audio, video or call recordings created in connection with our business activities

NO

I. Professional or employment-related information
Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us

NO

J. Education Information
Student records and directory information

NO

K. Inferences drawn from collected personal information
Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics

NO

L. Sensitive personal Information

NO


We may also collect other personal information outside of these categories through instances where you interact with us in person, online, or by phone or mail in the context of:
  • Receiving help through our customer support channels;
  • Support and feedback messages you send us; and
  • Facilitation in the delivery of our Services and to respond to your inquiries.
We will use and retain the collected personal information as needed to provide the Services or for:
  • Category A - As long as the user has an account with us
  • Category C - Date of birth is used once to confirm you are 18 or older and is not stored. We keep only the date on which that check passed.

Sources of Personal Information

Learn more about the sources of personal information we collect in "WHAT INFORMATION DO WE COLLECT?"

How We Use and Share Personal Information

Learn more about how we use your personal information in the section, "HOW DO WE PROCESS YOUR INFORMATION?"

Will your information be shared with anyone else?

We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Learn more about how we disclose personal information to in the section, "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?"

We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered to be "selling" of your personal information.

We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. Wewill not sell or share personal information in the future belonging to website visitors, users, and other consumers.

Your Rights

You have rights under certain US state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights include:
  • Right to know whether or not we are processing your personal data
  • Right to accessyour personal data
  • Right to correctinaccuracies in your personal data
  • Right to request the deletion of your personal data
  • Right to obtain a copyof the personal data you previously shared with us
  • Right to non-discrimination for exercising your rights
  • Right to opt out of the processing of your personal data if it is used for targeted advertising (or sharing as defined under California’s privacy law), the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling")
Depending upon the state where you live, you may also have the following rights:
  • Right to obtain a list of the categories of third parties to which we have disclosed personal data (as permitted by applicable law, including the privacy law in California)
  • Right to limit use and disclosure of sensitive personal data (as permitted by applicable law, including the privacy law in California)

How to Exercise Your Rights

To exercise these rights, you can contact us by submitting a data subject access request, or by emailing us at support@chalkdraft.com.

Under certain US state data protection laws, you can designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with applicable laws.

Request Verification

Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. We will only use personal information provided in your request to verify your identity or authority to make the request. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes.

If you submit the request through an authorized agent, we may need to collect additional information to verify your identity before processing your request and the agent will need to provide a written and signed permission from you to submit such request on your behalf.

California "Shine The Light" Law

California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us by using the contact details provided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?"

12. DO WE MAKE UPDATES TO THIS NOTICE?

In Short:Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at support@chalkdraft.com
.


14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. You can review, correct, download, and delete your information yourself at any time from My Profile; the “Your privacy rights” section at the top of this notice sets out what each control does. If you would rather we handled it, or you cannot sign in to your account, email support@chalkdraft.com.

COOKIE POLICY
Last updated August 16, 2026



This Cookie Policy explains how ChalkDraft ("Company," "we," "us," and "our") uses cookies and similar technologies to recognize you when you visit our website at https://chalkdraft.com ("Website"). It explains what these technologies are and why we use them, as well as your rights to control our use of them.

In some cases we may use cookies to collect personal information, or that becomes personal information if we combine it with other information.

Analytics and consent-management services
PostHog. We use PostHog to understand how people use ChalkDraft and to improve the reliability, usability, and performance of the Services. Subject to your consent choices and our configuration, PostHog may process information such as pages viewed, buttons or features used, referring pages, approximate location derived from an IP address, browser and device information, timestamps, and identifiers used to distinguish one browser or account from another. We do not use PostHog to sell personal information or for third-party behavioral advertising.

Termly. We use Termly to provide our cookie consent banner, record and manage consent choices, categorize cookies and similar technologies, and allow you to reopen the preference center. Where required by applicable law, optional analytics technologies are intended to operate only in accordance with the choices you make through Termly.

What are cookies?
Cookies are small data files that are placed on your computer or mobile device when you visit a website. Cookies are widely used by website owners in order to make their websites work, or to work more efficiently, as well as to provide reporting information.

Cookies set by the website owner (in this case, ChalkDraft) are called "first-party cookies." Cookies set by parties other than the website owner are called "third-party cookies." Third-party cookies enable third-party features or functionality to be provided on or through the website (e.g., advertising, interactive content, and analytics). The parties that set these third-party cookies can recognize your computer both when it visits the website in question and also when it visits certain other websites.

Why do we use cookies?
We use first- and third-party cookies for several reasons. Some cookies are required for technical reasons in order for our Website to operate, and we refer to these as "essential" or "strictly necessary" cookies. Other cookies also enable us to track and target the interests of our users to enhance the experience on our Online Properties. Third parties serve cookies through our Website for consent management and analytics. We do not permit advertising cookies, and no advertising network operates on this site.This is described in more detail below.

How can I control cookies?
You have the right to decide whether to accept or reject cookies. You can exercise your cookie rights by setting your preferences in the Cookie Preference Center. The Cookie Preference Center allows you to select which categories of cookies you accept or reject. Essential cookies cannot be rejected as they are strictly necessary to provide you with services.

The Cookie Preference Center can be found in the notification banner and on our Website. If you choose to reject cookies, you may still use our Website though your access to some functionality and areas of our Website may be restricted. You may also set or amend your web browser controls to accept or refuse cookies.

The specific types of first- and third-party cookies served through our Website and the purposes they perform are described in the table below (please note that the specific cookies served may vary depending on the specific Online Properties you visit):

Analytics and customization cookies:

These cookies collect information that helps us understand how our Website is being used, so we can improve it. We do not run marketing campaigns and do not use these cookies for advertising.

Name: ph_<project key>_posthog
Purpose: Records which pages and features are used, so we can see what to improve. Set only if you accept analytics cookies.
Provider: us.i.posthog.com
Service: PostHog View Service Privacy Policy
Type: http_cookie
Expires in: Session

How can I control cookies on my browser?
As the means by which you can refuse cookies through your web browser controls vary from browser to browser, you should visit your browser's help menu for more information. The following is information about how to manage cookies on the most popular browsers:
In addition, most advertising networks offer you a way to opt out of targeted advertising. If you would like to find out more information, please visit:

What about other tracking technologies, like web beacons?
Cookies are not the only way to recognize or track visitors to a website. We may use other, similar technologies from time to time, like web beacons (sometimes called "tracking pixels" or "clear gifs"). These are tiny graphics files that contain a unique identifier that enables us to recognize when someone has visited our Website or opened an email including them. This allows us, for example, to monitor the traffic patterns of users from one page within a website to another, to deliver or communicate with cookies, to understand whether you have come to the website from an online advertisement displayed on a third-party website, to improve site performance, and to measure the success of email marketing campaigns. In many instances, these technologies are reliant on cookies to function properly, and so declining cookies will impair their functioning.

Do you use Flash cookies or Local Shared Objects?
Websites may also use so-called "Flash Cookies" (also known as Local Shared Objects or "LSOs") to, among other things, collect and store information about your use of our services, fraud prevention, and for other site operations.

If you do not want Flash Cookies stored on your computer, you can adjust the settings of your Flash player to block Flash Cookies storage using the tools contained in the Website Storage Settings Panel. You can also control Flash Cookies by going to theGlobal Storage Settings Panelandfollowing the instructions (which may include instructions that explain, for example, how to delete existing Flash Cookies (referred to "information" on the Macromedia site), how to prevent Flash LSOs from being placed on your computer without your being asked, and (for Flash Player 8 and later) how to block Flash Cookies that are not being delivered by the operator of the page you are on at the time).

Please note that setting the Flash Player to restrict or limit acceptance of Flash Cookies may reduce or impede the functionality of some Flash applications, including, potentially, Flash applications used in connection with our services or online content.

Do you serve targeted advertising?
No. ChalkDraft does not serve targeted advertising, and we do not permit third parties to serve advertising cookies through our Website. No advertising network, ad exchange, or advertising pixel operates on this site, and we do not share your information for cross-context behavioral advertising. The only third-party cookies used here are for consent management and product analytics, both described above. This does not enable us or anyone else to identify your name, contact details, or other details that directly identify you unless you choose to provide these.

How often will you update this Cookie Policy?
We may updatethis Cookie Policy from time to time in order to reflect, for example, changes to the cookies we use or for other operational, legal, or regulatory reasons. Please therefore revisit this Cookie Policy regularly to stay informed about our use of cookies and related technologies.

The date at the top of this Cookie Policy indicates when it was last updated.

Where can I get further information?
If you have any questions about our use of cookies or other technologies, please email us at support@chalkdraft.com

ChalkDraft