Privacy policy
The short version: we collect a grown-up's email only if you hand it over, we count page views without tracking you, and we never sell anything about you.
Last updated: 18 September 2026
Silly Taters is a small story studio in Sydney, Australia. We call ourselves "we" and "us" below. This policy explains what personal information we collect, why we collect it, who we share it with, and how you can get a copy or have it deleted.
We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
1. What we collect
Free colouring pages signup
When you enter an email address to get free pages, we collect that address and a note of which page on the site you signed up from. We ask for a grown-up's email on purpose. See section 5.
Analytics
We use Umami to count how the site gets used. It records page views, the site that referred you, your rough country or region, and your browser and device type. It sets no cookies, stores nothing on your device, and does not follow you to other websites. We cannot use it to work out who you are.
Server logs
Our host, Vercel, records standard request data such as IP address and browser type, for security and reliability. We do not use these logs to build a picture of you.
Email to us
If you email hello@sillytaters.com, we have whatever you put in the message.
What we do not collect
We do not ask for sensitive information as the Privacy Act defines it: health, biometrics, race, political opinions, religious beliefs, sexual orientation, or criminal record. Please do not send it to us.
We have no accounts, no logins, and no payments on this site, so we hold no passwords and no card details.
2. Why we collect it
- To send you the free colouring pages you asked for.
- To send new pages and studio news, only where you asked to receive them. Every message has an unsubscribe link, and unsubscribing takes effect promptly.
- To answer your email.
- To see which pages people actually use, so we make more of what works.
- To keep the site up and safe.
We do not sell personal information. We do not use it for automated decision-making, and we do not use it to target advertising.
3. Who we share it with
Only with providers who process it on our behalf, and only as far as they need to do the job:
| Provider | What it handles | Where |
|---|---|---|
| Vercel | Website hosting and server logs | United States and global edge network |
| Buttondown | Our email list and sending | United States |
| Umami | Site analytics | United States and European Union |
We may also disclose information where the law requires it, or where it is needed to establish or defend a legal claim.
Information sent overseas
The providers above store and process information outside Australia, including in the United States. Before disclosing your information to them we take reasonable steps to check they handle it consistently with the Australian Privacy Principles. By giving us your information, you consent to this overseas disclosure.
4. Cookies
This site sets no advertising cookies and no tracking cookies. Our analytics runs without cookies, which is why you see no cookie banner here. If we ever add a cookie, we will update this policy and ask for consent first where that is required.
5. Children
Silly Taters makes things for children, but this website is built for the grown-ups who buy, print and download them. The signup form asks for a grown-up's email for that reason.
We do not knowingly collect personal information from a child. We do not ask visitors their age, we do not build profiles, and we do not serve advertising.
If you are a parent or guardian and believe a child has given us their information, email hello@sillytaters.com and we will delete it. You can also ask us at any time for a copy of anything we hold about your child, or ask us to remove it.
6. How we protect it
We take reasonable steps to protect personal information from misuse, loss, and unauthorised access:
- The site is served over HTTPS.
- The key that talks to our email provider is held as an encrypted setting on our host, used only on the server, and never sent to your browser or stored in our code.
- Accounts that touch your information use two-factor authentication, and our passwords live in a password manager.
- The devices we work on have encrypted storage.
- Only the studio can see the email list.
- We collect no passwords and no payment details, so there are none to lose.
No method of transmission or storage is completely secure. If a data breach happens that is likely to cause serious harm, we will notify the people affected and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.
7. How long we keep it
- Email list: until you unsubscribe, then we remove your address.
- Emails you send us: up to 24 months, unless the conversation needs keeping longer.
- Analytics: aggregate only, kept up to 6 months, never tied to a person.
- Server logs: kept by our host on their standard schedule.
8. Getting your information, or getting rid of it
Email hello@sillytaters.com to ask for a copy of what we hold, to correct it, or to have it deleted. There is no fee.
We will respond within 30 days. If we refuse access or correction we will tell you why in writing. We will delete your information unless the law requires us to keep it.
To leave the email list, use the unsubscribe link at the bottom of any email. That works without contacting us.
9. Complaints
If you think we have mishandled your personal information, tell us first at hello@sillytaters.com. We will acknowledge it within 5 business days and aim to resolve it within 30 days.
If our answer does not satisfy you, you can complain to the Office of the Australian Information Commissioner: oaic.gov.au, 1300 363 992, or GPO Box 5218, Sydney NSW 2001.
10. Changes
We may update this policy. The current version always lives at sillytaters.com/privacy, with the date it changed at the top.
11. Contact
Silly Taters
Sydney, Australia
hello@sillytaters.com