Introduction

Welcome to Image Color Picker. We are committed to protecting your privacy and being transparent about our data practices. This Privacy Policy explains how we handle information when you use our online color extraction tool, including our free features and paid export services.

Image Color Picker is designed with privacy as a core principle. Our color extraction tool processes images entirely in your browser, meaning your image files never leave your device. When you choose to purchase palette exports or create an account, we collect only the minimum information necessary to provide these services.

Information We Collect

Images You Use

Your images are processed entirely in your web browser using client-side JavaScript. We do not upload, store, transmit, or have access to any images you use with our tool. All color extraction and palette generation happens locally on your device.

URL-Based Images

When you provide an image URL, our server acts as a proxy to fetch the image and bypass CORS (Cross-Origin Resource Sharing) restrictions. The image data is temporarily processed to deliver it to your browser but is not stored on our servers. This proxy is necessary because web browsers restrict direct access to images from other websites for security reasons.

Account Information

If you choose to create an account (required for lifetime access purchases), we collect:

• Email address (from your Google or GitHub account)
• Authentication identifier from your chosen sign-in provider
• Account creation date

Account creation is optional and only required if you purchase lifetime access to palette exports.

Payment Information

When you make a purchase, payment processing is handled entirely by Stripe, our third-party payment processor. We do not directly collect, store, or have access to your full credit card number, CVV, or other sensitive payment details. We receive and store:

• Stripe customer identifier (a reference ID, not your actual payment details)
• Transaction records (purchase type, amount, date)
• Payment status (completed, failed, refunded)

For single palette purchases, no account is required and we do not store any personal information beyond the transaction record.

Palette Export Data

When you purchase a palette export, we temporarily store:

• Color values in your palette (hex codes)
• Unique bundle identifier for download access
• Purchase association (to enable re-downloads)

This data is retained to allow you to re-download your purchased palette files.

Analytics Data

We use Umami Analytics, a privacy-focused analytics platform, to understand how visitors interact with our website. Umami collects:

• Page views and navigation patterns
• General usage events (such as when colors are copied or palettes are exported)
• Browser type and device category (desktop, mobile, tablet)
• Approximate geographic region based on anonymized data

Umami does not use cookies, does not collect personal information, and does not track users across websites. All data is aggregated and anonymized.

Theme Preferences

We store your theme preference (light or dark mode) in your browser's local storage. This data stays on your device and is never transmitted to our servers.

Information We Do Not Collect

We want to be clear about what we do not collect:

• Your actual credit card numbers or CVV (handled by Stripe)
• Image content or metadata from your uploads
• Precise location data
• Tracking cookies or advertising identifiers
• Browsing history on other websites
• Personal information beyond what is necessary for account and payment services

Cookies and Local Storage

Our website uses minimal browser storage:

Local Storage

We use browser local storage to save your theme preference (light/dark mode) and authentication session information. This data cannot be used to track you across websites.

Authentication Cookies

If you sign in to your account, we use secure, HTTP-only session cookies to maintain your authenticated state. These cookies are essential for account functionality and are not used for tracking or advertising.

No Tracking Cookies

We do not use tracking cookies, advertising cookies, or any third-party cookies that could identify you or track your browsing behavior across websites.

Third-Party Services

We use the following third-party services:

Stripe (Payment Processing)

We use Stripe to process all payments securely. When you make a purchase, you interact directly with Stripe's payment form. Stripe collects and processes your payment information according to their privacy policy. We do not have access to your full credit card details. Stripe is PCI-DSS compliant, the highest level of payment security certification. For more information, see Stripe's privacy policy at stripe.com/privacy.

Firebase Authentication (Google)

If you choose to sign in with Google, we use Firebase Authentication to securely manage your account. Firebase receives your authentication data from Google and provides us with a user identifier and email address. For more information, see Google's privacy policy.

GitHub Authentication

If you choose to sign in with GitHub, we use GitHub's OAuth service. GitHub provides us with your user identifier and email address. For more information, see GitHub's privacy statement.

Umami Analytics

A privacy-focused, open-source analytics platform that helps us understand website usage without compromising user privacy. Umami is GDPR compliant and does not collect personal data.

Vercel

Our website is hosted on Vercel. Vercel may collect standard web server logs including IP addresses for security and performance purposes. Please refer to Vercel's privacy policy for more information.

Image Proxy

When loading images from URLs, we use a server-side proxy to handle CORS restrictions. The proxy temporarily fetches images but does not store them.

Data Retention

We retain your data for the following periods:

• Account information: Retained while your account is active and for a reasonable period thereafter to comply with legal obligations
• Transaction records: Retained for 7 years to comply with tax and accounting requirements
• Palette export data: Retained indefinitely to allow re-downloads of purchased content
• Analytics data: Aggregated and anonymized, retained for up to 24 months

You may request deletion of your account and associated personal data by contacting us. Note that we may retain certain information as required by law or for legitimate business purposes.

Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• HTTPS encryption for all connections
• Client-side processing to keep your images on your device
• Secure, encrypted database storage for account and transaction data
• PCI-DSS compliant payment processing through Stripe
• Regular security updates and monitoring
• Access controls limiting who can access personal data

While we take reasonable precautions, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

Children's Privacy

Our paid services and account registration are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

The free color extraction features of our tool do not collect any personal information and can be used by anyone.

Your Rights

Depending on your location, you may have certain rights regarding your data:

For EU/EEA Residents (GDPR)

You have the right to: access your personal data; rectify inaccurate data; request deletion of your data (subject to legal retention requirements); restrict or object to processing; data portability; and withdraw consent. To exercise these rights, contact us using the information below.

For California Residents (CCPA)

You have the right to: know what personal information we collect and how it is used; request deletion of your personal information; opt-out of the sale of personal information (we do not sell personal information); and non-discrimination for exercising your rights.

For All Users

You can: clear your theme preference by clearing your browser's local storage; block analytics by using browser privacy settings or extensions; request a copy of your account data; and request deletion of your account by contacting us.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Significant changes will be noted on this page. Continued use of our service after changes constitutes acceptance of the updated policy. If we make material changes that affect how we handle personal information, we will notify you by email (if you have an account) or through a prominent notice on our website.

Contact Us

If you have questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, you can:

• Email us at the address provided on our website
• Open an issue on our GitHub repository

We are committed to addressing your concerns and responding to requests within 30 days.