Last updated: February 2026
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Ioannis Fotiou
Sole trader operating as "MalMagic"
Karaiskaki 34
62121 Serres
Greece
Phone: +49 176 37192147
Email: info@malmagic.de
This Privacy Policy applies to the use of the web application "MalMagic" (AI colouring page generator).
It describes the nature, scope and purpose of the processing of personal data of users, in particular those in the European Union.
Personal data is processed on the following legal bases:
When creating an account, the following data is processed:
Purpose: Provision of a user account · Legal basis: Art. 6(1)(b) GDPR
To generate personalised colouring pages, users may upload photos. These photos are:
The generated colouring page is stored in the user account.
Legal basis: Art. 6(1)(b) GDPR
Payment processing is handled by Stripe Inc. Payment data is entered and processed directly through Stripe. MalMagic does not store full payment card details.
Legal basis: Art. 6(1)(b) GDPR
When visiting the website, the following data is collected automatically:
Purpose: Ensuring technical functionality and system security
Legal basis: Art. 6(1)(f) GDPR
Server log data is stored for a maximum of 7 days for security purposes and then automatically deleted, unless a security incident requires longer retention.
This web application uses technically necessary cookies and comparable storage technologies (e.g. local storage) to ensure the functionality of the application, in particular for:
These technologies are required for the operation of the web application.
Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR
To generate colouring pages, uploaded images are temporarily transmitted to the following service provider:
Replicate Inc., USA
Purpose: AI-based image processing
The transfer of data to the USA is based on EU Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR.
When transferring data to the USA, there is a risk that US authorities may access the data under national security laws without effective legal remedies for EU citizens. Standard Contractual Clauses provide appropriate safeguards within the meaning of Art. 46 GDPR.
Original images are automatically deleted after successful processing.
The following service providers are engaged as data processors pursuant to Art. 28 GDPR:
Data processing agreements are in place with all service providers.
The provision of personal data is contractually necessary to use the web application. Without the required data (e.g. email address, payment details), no user account can be created and no paid service can be provided.
There is no statutory obligation to provide data.
You have the following rights under GDPR:
To exercise any of these rights, please send an email to: info@malmagic.de
You have the right to lodge a complaint with a supervisory authority.
The competent supervisory authority based on our place of establishment is:
Hellenic Data Protection Authority (HDPA)
www.dpa.grYou may also lodge a complaint with the supervisory authority in your country of residence.
No automated decision-making within the meaning of Art. 22 GDPR takes place.
The AI-based image processing is used solely to technically generate the requested colouring page and has no legal effect on users.
We implement appropriate technical and organisational measures pursuant to Art. 32 GDPR to protect personal data against loss, manipulation and unauthorised access.