Photo privacy & service terms

Updated October 26, 2026. Vistuma is a product of Ven Ventures LLC. One photo produces one coloring scene. The free allowance needs no account or payment; membership requires an account and a separate, explicit checkout. Neither option is a finished coloring book or a guarantee of likeness.

Choose only photos you have permission to use

Upload one clear, close-up portrait of one person, or one family photo with two to four people together, including two adults and two children. Make every face large and fully visible. Confirm the number shown; this is your declaration, not automatic identity recognition. We do not combine people from separate photos. You must have permission from everyone shown. For a child’s photo, their parent or legal guardian must authorize its use. Do not upload identification documents, intimate images or other sensitive material.

What happens to your photos

Selecting a photo initially opens it in your browser. Nothing is submitted until you confirm consent, complete human verification and press the Create button. The browser prepares a smaller copy without the original filename or embedded photo metadata. That copy is sent over HTTPS to Vistuma’s server, held in a private queue, and retrieved by our local image computer for processing. We do not send these photos to paid image-generation APIs.

Coloring online on your device

The Color online editor lets you add colors manually without using a generation credit. Files opened directly in that editor and the colors you add stay in browser memory; they are not uploaded or saved to Vistuma. Public examples are downloaded from this site. Opening a private generated result retrieves it using your existing session and does not extend its expiry. There is no automatic or cloud save: download your colored PNG before closing or replacing the page. Local images may be reduced to a maximum 1,024-pixel edge. Anyone with access to your open browser or saved downloads can see them.

Making a PDF coloring book on your device

The book maker assembles 1–20 saved images into a PDF on your device, with an optional title cover. Files, cover text and page order are not uploaded or saved to Vistuma. Opening a private result retrieves it through your existing session without extending its expiry. Public examples are downloaded from this site. Images are flattened on white and may be reduced to a maximum 1,600-pixel edge; export does not add detail or create new scenes. There is no automatic or cloud save. Keep your original images and the downloaded PDF before leaving. Anyone with access to your browser, downloads or chosen printer can see the book.

Pixel color-by-number on your device

This free activity turns one photo into a small numbered pixel grid, not a new AI-generated image. Your selected file, coloring progress, PNG and PDF stay in browser memory and are not uploaded or saved to Vistuma. The licensed apple example is downloaded from this site. Photos are flattened on white, reduced to a maximum 1,024-pixel working edge, then simplified into a grid of up to 32 squares along the longer side. Downloaded files contain the activity, not the original filename or photo metadata. There is no automatic save. Changing the photo or grid settings resets coloring progress; save before leaving. Anyone with access to your open browser, downloaded files or printer can see your picture.

Making a printable card on your device

The card maker combines one saved picture with your greeting and message. Your file, words, preview, PNG and PDF stay in browser memory and are not uploaded or saved to Vistuma. Only public fictional examples are downloaded from this site, or a private result through your existing authorized session without extending its expiry. Images are flattened on white and may be reduced to a 1,600-pixel edge; the card maker does not add resolution or change faces. Downloads contain the card, not the original filename or embedded photo metadata. There is no automatic save. Keep the download before leaving; anyone with access to your open browser, saved files or printer can see it. This tool uses no generation credits.

Private access, not a public gallery

When you submit, the service automatically creates a separate private browser session. The server sets a secure, HttpOnly session cookie to authorize your jobs and results. There is no shared public access code or public photo gallery. Return on the same browser and device; clearing cookies or using a private-browsing window that later closes can lose access to your results. Anyone using your browser session can access them. Older invitation sessions remain valid, and anyone holding an older invite code can still access that invite’s results. Do not share screenshots containing someone else’s photo without their permission.

No training or public reuse

Your uploaded photos and generated results are not used for model training, marketing, public examples or a stock library. The local workflow uses existing model weights; it does not train a personal model from your photos.

Membership accounts and recovery

A membership account stores your email, a salted password hash, hashed session and recovery credentials, and records of your plan and page allowance. Passwords and recovery codes are not stored as readable text. Member access uses a separate secure, HttpOnly session cookie. Keep the recovery code supplied at account creation in a safe place: email-based password recovery is not available in this MVP. Recovering your account rotates that code and signs out existing sessions. Your account email is not proof of a verified identity.

Monthly plan, introductory price and cancellation

The first 100 eligible subscribers may receive $4.99 USD per month for their first three months, then $9.99 USD per month from month four. The introductory offer is once per customer, not once per email address. The final price and any applicable tax are shown in Stripe checkout before you subscribe. A paid billing month includes 100 coloring pages. Unused pages expire at the end of that billing period and do not roll over. Each successful renewal adds a new monthly allowance; visiting a success link does not create credits.

You may use a page from the same allowance for the optional watercolor keepsake beta. Each successful watercolor uses one page, not an additional charge. Coloring and watercolor share the same free-try and monthly limits. Watercolor changes the artistic medium while aiming to preserve the original people, pose, clothing and setting; likeness and fine details may vary. The same private processing, no-training policy and 24-hour result retention apply to both styles.

Subscriptions renew automatically until canceled. Use Your account → Manage billing to cancel before the next renewal or update your payment method. Canceling at the end of a paid period leaves its remaining pages available until that period ends. A failed payment, refund or dispute may pause paid generation pending resolution. Deleting a photo or result does not cancel a subscription.

A submitted member job reserves one page. A generation that fails returns that reserved page to its original billing period; it does not extend the period. Canceling a job after processing has started or deleting a completed result does not restore the page. Work is queued and processed one job at a time, with one active job per account. Membership uses the same 768 × 768 pixel output and current scene workflow shown in the examples, not a higher-resolution book or redesigned poses and outfits. Completion time and exact facial likeness are not guaranteed.

Payments and separate billing records

Stripe processes card details on its hosted checkout and billing portal. Vistuma does not receive or store your full card number or card security code. Stripe and Vistuma retain billing identifiers, subscription and invoice status, and payment-related records needed to provide membership, handle disputes and meet applicable recordkeeping obligations. These records are separate from photos and are not deleted by the 24-hour image cleanup. We do not promise that nothing is stored.

Deletion and retention

Server input copies are removed when processing completes or fails. Working copies on the image computer are removed after each job. Results and job records are automatically removed within 24 hours of submission, normally within an additional one-minute cleanup interval. Use “Delete this test and its photos” to remove server copies sooner. If a job is already processing, cancellation is checked about every 15 seconds; its temporary local copies are removed when that job stops. If a computer is offline unexpectedly, cleanup may be delayed until it is available again. Downloads you save and copies on your own device are yours to manage.

Limits and experimental quality

Updated September 12, 2026: the free allowance is 1 total try per browser. Previously accepted submissions still count; changing this allowance does not reset your usage.

Free submissions are limited per browser session and shared network. Each accepted submission produces one 768 × 768 pixel coloring scene. The server assigns a setting from eight adventures; settings rotate, but repeats are possible. People sharing Wi-Fi may encounter the shared network limit. Accepted submissions count toward these limits even if processing fails or a result is deleted. The trial has a maximum of 100 submissions overall, 50 per UTC day and ten waiting or processing jobs. Requests run one at a time. These controls identify browsers and networks, not verified individuals, and cannot perfectly prevent repeat visitors or bots. Starting a new browser session does not recover old results. The closing time is shown on the test page; reaching the cap may close access sooner. Completion time is not guaranteed. Facial features, anatomy, proportions or the number of people can look wrong; compare the result to the original. This is an experimental preview, not a finished print-ready book. There are no charges or automatic upgrades to a paid plan.

Human verification

Cloudflare Turnstile helps protect the free trial against automated submissions. Its widget processes browser and network signals under Cloudflare’s privacy terms. Vistuma verifies the challenge result on the server before accepting a generation job. Your selected photo is not sent to Turnstile. If verification is unavailable, new submissions stay blocked. A failed or expired challenge must be completed again.

Optional feedback

The feedback form collects ratings, selected problem categories and an optional comment. It does not attach your photos, results or image-job identifiers, and requires no name or email. Please do not include personal information in your comment. Answers are saved privately on Vistuma’s server for review and automatically removed after 30 days, normally within an additional one-minute cleanup interval. They are not used for model training or published as testimonials. If the service is offline, cleanup resumes when it restarts. Feedback uses a separate human-verification check. A keyed, daily network identifier is retained for up to two days to limit abuse; raw IP addresses and verification tokens are not stored in the feedback records. Hosting and security providers may still process normal connection information.

Website operation

The hosting and network providers may process normal request information such as IP addresses to deliver and protect the service. We use rate limits, a keyed network identifier for the test allocation limit, and essential session cookies, not advertising analytics. Session identifiers and minimal job state are used for private access and queue operation. Free use does not require email or billing information. Membership collects the account and billing information described above.