Privacy Policy
Privacy Policy
This policy explains what data PaletteReveal collects, how it is processed, who it is shared with, and what rights you have. It applies to https://palettereveal.com and any subdomain we operate.
1. Who we are
PaletteReveal ("we", "us") operates the website at palettereveal.com. For privacy questions, contact [email protected].
2. The photos you upload
Your photos stay in your browser. When you use the color analysis tool, your image is loaded into a local <canvas> element on your device. We do not upload, store, or transmit the image to our servers. We do not use your photos for training any machine-learning model. We do not share, sell, or analyze your photos for any other purpose.
What does reach our servers are only the sampled RGB values from the points you click — short numerical arrays like [{"r":214,"g":162,"b":145}, ...]. These are processed in real time to compute a refined color analysis result and are not retained after the request is served. They are not personally identifiable.
3. Other data we may collect
When you visit the site, our web server logs basic technical information needed to operate the service: IP address, user-agent string, request path, response status, and timestamp. These logs are kept for up to 30 days for security and abuse-prevention purposes, then deleted.
We use Cloudflare as a CDN/security layer. Cloudflare may process your IP address, request metadata, and basic browser fingerprint information to deliver the site, mitigate attacks, and route traffic. See Cloudflare's privacy policy.
4. Cookies and similar technologies
The PaletteReveal site itself uses minimal client-side storage — only what's needed to remember your interface preferences (such as language) and to keep the cookie consent state. We do not set any first-party tracking cookies for analytics.
Third-party services we embed (see "Advertising" and "Cloudflare" above) may set their own cookies. You can review and change your consent at any time using the cookie banner that appears at the bottom of every page.
5. Advertising
This site uses Google AdSense to display advertisements. Google and its partners may use cookies and similar technologies to serve ads based on your prior visits to this and other sites. Specifically:
- Google, as a third-party vendor, uses cookies to serve ads on this site.
- Google's use of advertising cookies enables it and its partners to serve ads to users based on their visits to this site and/or other sites on the Internet.
- Users may opt out of personalized advertising by visiting Google's Ads Settings or aboutads.info/choices.
For users in the European Economic Area, the United Kingdom, and Switzerland, the cookie banner offers a clear "Accept" and "Reject" choice for personalized advertising before any non-essential third-party cookies are set, in accordance with the EU GDPR / ePrivacy Directive and the IAB Transparency & Consent Framework.
6. Payments
If you purchase a paid product (e.g., the premium PDF report), payment is processed by Stripe. We do not see, store, or have access to your card details. Stripe processes the payment and shares with us only the order metadata required to fulfill it (e.g., your email address, the product purchased, and the transaction ID). See Stripe's privacy policy.
7. Email
If you email us at [email protected], your message is delivered via Cloudflare Email Routing and stored in our mailbox. We use it only to reply to you. We do not add you to any newsletter without your explicit opt-in.
8. Legal basis (GDPR users)
Under the EU General Data Protection Regulation, our legal bases for processing are:
- Legitimate interest for security logs and fraud prevention.
- Consent for non-essential cookies and personalized advertising (collected via the cookie banner).
- Contractual necessity for processing payment metadata when you purchase a product.
9. Your rights
If you are in the EU, UK, EEA, or another jurisdiction with similar legislation, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure of your data
- Object to or restrict processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with your national data protection authority
To exercise any of these rights, email [email protected]. We respond within 30 days.
10. Children
PaletteReveal is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe a child has used the site, contact us and we will help.
11. International transfers
Some of our service providers (Cloudflare, Google, Stripe) may process data outside the EEA. Where this happens, we rely on the European Commission's Standard Contractual Clauses or equivalent safeguards.
12. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be announced on the homepage.
13. Contact
For any privacy question, write to [email protected].