Effective Date: June 1, 2025

Introduction

Welcome to https://toolongdidntdraw.com. We value your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, share, and protect your information when you visit or interact with our website. By using our site, you agree to the practices described in this policy.

1. Who We Are

Our website address is https://toolongdidntdraw.com. We are the data controller responsible for your personal data.

2. Data Collection

We collect the following types of personal data:

• Comments: When you leave a comment, we collect the data shown in the comment form (e.g., name, email address), your IP address, and browser user agent string to help detect spam.
• Media: If you upload images, we collect the image data, including any embedded location data (EXIF GPS). We advise against uploading images with location data, as visitors can extract this information.
• Cookies: We use cookies to save your preferences (e.g., login information, screen display choices) and to improve your experience. For more details, see the “Cookies” section below.
• Embedded Content: Content from other websites (e.g., videos, images) may collect data about you, use cookies, and track your interactions as if you were visiting those sites directly.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you leave a comment or upload media, you consent to the collection and processing of your data for the purposes outlined in this policy.
• Contractual Necessity: For registered users, we process login and account data to provide access to our services.
• Legitimate Interest: We process data for spam detection and to improve our website based on our legitimate interest in maintaining security and enhancing user experience.

4. Data Usage

We use your personal data to:

• Provide, maintain, and improve our website and services.
• Detect and prevent spam in comments.
• Personalize your experience (e.g., remembering login details).
• Comply with legal obligations (e.g., responding to lawful requests).

5. Data Sharing and Transfers

We share your personal data with:

• Third-Party Services: We use an automated spam detection service to check comments, which may involve transferring your data (e.g., IP address) to third parties. These services may be located outside the EU.
• Embedded Content Providers: Websites providing embedded content may collect and process your data according to their own privacy policies.
• Legal Authorities: We may share data if required by law or to protect our rights.

International Data Transfers: If data is transferred outside the EU (e.g., for spam detection), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or reliance on adequacy decisions, to protect your data.

6. Data Retention

• Comments: Comments and their metadata are retained for as long as the associated content remains published on our website. This allows us to automatically recognize and approve follow-up comments without moderation.
• User Accounts: For registered users, we retain personal data for as long as your account is active or as needed to provide services. You can request deletion of your account at any time.
• Cookies: Cookie retention varies (e.g., login cookies last two days or two weeks if “Remember Me” is selected). See the “Cookies” section for details.

We retain data only as long as necessary for the purposes outlined in this policy or as required by law.

7. Cookies

We use cookies for the following purposes:

• Comment Cookies: If you leave a comment, you can opt-in to save your name, email, and website in cookies for one year to avoid re-entering details.
• Login Cookies: When you log in, cookies save your login information and screen preferences. These last for two days (or two weeks if “Remember Me” is selected).
• Temporary Cookies: A temporary cookie checks if your browser accepts cookies and is discarded when you close your browser.
• Editing Cookies: If you edit or publish an article, a cookie saves the post ID for one day.

You can manage cookie preferences through your browser settings.

8. Embedded Content

Embedded content from other websites (e.g., videos, images) may collect data, use cookies, and track your interactions. These sites may process your data even if you do not have an account with them. Please review their privacy policies for more information.

9. User Rights

Under the GDPR and other applicable laws, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Correct inaccuracies in your personal data.
• Erasure: Request deletion of your personal data (except data we must retain for legal or security purposes).
• Portability: Receive your personal data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw Consent: Withdraw consent where processing is based on consent.

To exercise these rights, please contact us at click to show email. We will respond within 30 days.

10. Data Security

We implement reasonable security measures to protect your personal data, including encryption, access controls, and regular security reviews. However, no method of transmission over the Internet is completely secure, and we cannot guarantee absolute security.

11. Children’s Privacy

Our website is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware of such data, we will take steps to delete it.

12. Policy Updates

We may update this privacy policy from time to time. Registered users will be notified of significant changes via email. We encourage you to review this policy periodically for any updates.

13. Contact Information

For data protection inquiries or to exercise your rights, please get in touch with us at click to show email.