Privacy Policy

1. Data we collect

When you use colorpalette.org, we may collect:

• Account details from Google sign-in: your name, email address, and profile image.
• Your saved/favourited palettes, so they sync across your devices.
• Order records and the email address used for a purchase, so you can re-download it later.
• Basic usage analytics collected on our own servers (page views, referrers) — we do not use Google Analytics or any third-party tracker for this.

2. How we use it

We use this data to run the service: signing you in, syncing favourites, fulfilling and delivering orders, providing support, and understanding overall site usage so we can improve it.

3. Cookies & local storage

We use a small number of cookies and browser local-storage entries for sign-in and preferences. See the Cookie Policy for the full list and how to control them.

4. Third parties

We work with a small number of service providers to run the site:

• Cloudflare — content delivery network (CDN) and security.
• Cloudflare R2 — hosting for palette and product images.
• Resend — transactional email delivery (order receipts, contact form).
• Google — OAuth sign-in.
• Razorpay (live) and PayPal (planned) — payment processing.
• Pexels, Pixabay, and Unsplash — source photos used by our color tools.

Each of these providers only receives the data needed to perform its function.

5. Data retention

We keep account and order data for as long as your account is active, and as needed to satisfy tax, accounting, and legal obligations after that. You can delete your account and associated data at any time — see below.

6. Your rights

You can request access to the personal data we hold about you, or delete your account and data yourself at any time from /account/settings/. For anything the self-serve page doesn't cover, email [email protected].

7. Children's privacy

colorpalette.org is not directed at children under 13 (or under 16 where that's the applicable threshold), and we do not knowingly collect personal data from them.

8. Security

We use industry-standard measures (encrypted connections, access controls) to protect your data, but no method of transmission or storage is 100% secure.

9. International transfers

Our service providers may process data outside your country of residence. Where this happens, we rely on those providers' own safeguards for cross-border data transfer.

10. Changes to this policy

We may update this policy from time to time; material changes will update the “Last updated” date above.

11. Contact

Questions about this policy? Email [email protected].