Privacy

Short version: Colorfinch has no accounts and no ads, the tools work in your browser, and the only cookie is an anonymous one set when you like a color or shade.

What we don't collect

• No accounts or sign-ups. The only personal detail we ever ask for is an email, and only if you use the contact form.
• No advertising. The only cookies are Google Analytics' (see Visitor statistics) and one if you press a Like button.
• No images. The image color picker and palette from image open your picture in your browser; it's never sent to us.

What's stored on your device

If you choose light or dark mode, that choice is saved in your browser's local storage so the site remembers it. It never leaves your device, and clearing your browser data removes it.

Tool results are kept in the page address (for example, the colors you're checking), so you can share a link. We don't store them.

Likes

When you press a Like button on a color, shades or palette page, we set one cookie, cf_vid, holding a random ID. It isn't linked to your name, email or anything else about you. We store that ID next to the colors you liked, only so each visitor counts once and the button remembers your choice. Pressing the button again removes your like. If you never press Like, no cookie is set. The cookie expires after a year, and clearing your cookies removes it.

To stop people flooding the counts, we briefly count how many likes come from each IP address. The address is scrambled (hashed) before it's stored, and the counter is deleted within a day.

Palettes you send us

If you use Add to palettes in the palette generator, we store the palette's name, colors and styles, and the time you sent it. We don't ask for your name or email. We check each palette before it appears on the site; ones we don't publish are deleted. To limit spam we count how many palettes come from each IP address, scrambled (hashed) and deleted within a day, as with likes.

Messages you send us

If you use the contact form, we store your email address, your name if you give one, the page address and your message, only so we can read and answer it. Each message is deleted automatically 90 days after you send it, or sooner once it's dealt with. As with likes, we briefly count messages per scrambled (hashed) IP address to stop spam, and that counter is deleted within a day.

Visitor statistics

We use two statistics services to see which pages and tools people use, so we know what to improve.

Vercel Web Analytics counts page views, the pages people come from, and rough location (country) and device type. It doesn't use cookies or store anything on your device.

Google Analytics records the pages you visit, how you got here, how long you stay, your rough location and your device and browser. It sets cookies named _ga and _ga_… that hold a random ID, so return visits can be counted, and they last up to two years. This information is sent to Google, which processes it under its own privacy policy. We don't send Google your name, email or anything you type into the tools. You can block these cookies in your browser settings, or install Google's Analytics opt-out add-on.

Server logs

Like any website, our hosting provider may keep standard server logs, such as IP address, browser type and the page requested, to keep the site secure and running.

Changes

If we add analytics, ads or anything else that collects data, we'll update this page first and say exactly what's collected. Questions? Contact us.