Privacy policy
Last updated: October 5, 2026. This policy explains what Oolshak (oolshak.com) collects, why, and the choices you have.
Summary
- You can browse and use the editors without an account.
- Downloads, cloud saving and sharing require Sign in with Google. We receive your name, email address and Google account ID — never access to your Gmail inbox, contacts or files.
- Your photos and text are private by default and are not used to train anything. If you enable an unlisted share link, anyone with that link can view and forward the preview.
- Unsaved drafts are kept temporarily and removed during routine cleanup when inactive. Temporary PDF files are also removed during routine cleanup.
- Our own analytics are aggregate counts with no advertising profile.
Information we collect
When you sign in with Google
Google sends us a signed token containing your Google account ID, email address, name and language. We verify the token, store your account ID, email address and name, and use them to link your projects and downloads to you. We do not receive your Google password.
Projects and photos
When you create a magazine or blind bag set, we store the text you enter and the photos you upload so we can show previews and produce your PDF. Photos are re-encoded on our server and their metadata (such as camera details and location) is removed. Projects are stored privately and are only visible to you, and to people you deliberately share a link with.
Technical data
Like every website, our server receives your IP address and browser details with each request. We use them briefly for security, abuse prevention and rate limiting, and keep server logs for a short period.
Analytics
We count events such as template views, editor starts, sign-ins and successful downloads as daily totals per page and language. These counts contain no names, photos, messages or Google tokens.
Cookies
- Essential: a session cookie keeps your draft and sign-in working, and a security token protects forms. These are needed for the site to work.
- Preferences: your browser may remember your language choice and dismissed messages (stored on your device).
- Advertising: when advertising is enabled, our advertising partner (Google AdSense) may use cookies or similar technologies on public pages to show and measure ads. Where the law requires it, you will be asked for consent first and can change your choice at any time. Ads never appear in the editor or your projects.
How long we keep data
| Data | Kept for |
|---|---|
| Unsaved drafts and their photos | Kept temporarily; removed during routine cleanup when inactive |
| Generated PDFs | Cached temporarily. Reusing a cached PDF can extend its retention. Expired files are removed during routine cleanup; saved projects can generate a new PDF when needed. |
| Saved projects | Until you delete them or your account |
| Share links | Until you revoke them or delete the project |
| Account (Google ID, email, name) | Until you ask us to delete your account |
| Aggregate analytics counts | Indefinitely (they contain no personal data) |
Who we share data with
We do not sell personal data. We use service providers to run the site: our web host (Hostinger) stores the site and your projects; Google provides sign-in and, when enabled, advertising. People you send a share link to can view a read-only preview of that project until you revoke the link.
Your rights
You can delete saved projects at any time. You can ask us for a copy of your data, to correct it, or to delete your account by emailing hello@oolshak.com from your Google account’s email address. Depending on where you live, you may also have the right to object to processing or to complain to a data protection authority.
Children
Oolshak is designed for adults and teenagers making gifts, including gifts for children. Sign-in is intended for people old enough to have their own Google account under local law. Parents should only upload photos of children they are allowed to share.
Security
Projects, photos and PDFs are stored outside the public web folder and every download checks that you are signed in and own the project. No system is perfectly secure, so please do not upload anything you would not want stored online.
Changes
We will update this page if our practices change and change the date at the top.
Optional analytics
· Analytics update
Google Analytics loads on public pages only after you allow it. It uses cookies and receives public page addresses, browser and device information, and approximate location information. We remove query strings and share only the origin of external referring sites. We do not send names, email addresses, account IDs, project text or photos. Editors, saved projects and share previews do not load this tag. Google signals and advertising personalization are disabled. We remember your choice on this browser for 180 days. Use Analytics choices in the footer to change it; declining stops future collection and removes our Analytics cookies. Essential features and our own aggregate counts continue to work. We also send predefined promotion labels, never arbitrary URL text. Our aggregate counts may retain those labels in your existing editor session for up to four hours; the counters contain no visitor identifiers.