Privacy Policy

1. Who we are

FindColor.space (“FindColor”, “we”, “us”, “our”) is an online tool for generating, exploring, saving and exporting color palettes. For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, we act as the data controller for the personal data described in this policy.

If you have any question about this policy or about your data, you can reach us at [email protected].

2. What this policy covers

This policy applies to the website findcolor.space and all tools available on it, including the palette generator, the palette-from-image tool, the moodboard, your saved palettes and your account pages. It does not apply to third-party websites you may reach through links from our site — those have their own privacy policies.

3. Data we collect

3.1 Data you give us directly

• Account data. When you create an account we collect your email address and a password. The password is never stored in readable form — it is stored only as a secure, irreversible hash, and we cannot see it or recover it for you.
• Content you create. Palettes you choose to save, together with the color values, any name or note you add, and the date they were saved.
• Generation history. If you are logged in, palettes you generate may be recorded in your personal history so you can return to them. This history is capped at the 50 most recent entries; older entries are deleted automatically.
• Messages you send us. If you write to us by email, we keep your message and contact details in order to answer you.

3.2 Data collected automatically

• Technical server data. Like almost every website, our servers record basic request information: IP address, date and time, the page or file requested, the referring page, and your browser and operating system type. This is used for security, abuse prevention and diagnosing errors.
• Local storage in your browser. We store a small amount of data on your own device to keep you logged in and to remember a palette you were about to save. See section 6.

3.3 Data we deliberately do not collect

• Your images. When you use the palette-from-image tool or the moodboard, your files are read and analysed locally by your own browser. They are never uploaded to us, never stored on our servers, and disappear as soon as you close or reload the page.
• Payment details. The site is free to use and we do not process payments.
• Special category data. We do not ask for and do not want data about health, beliefs, ethnicity, political opinions or anything similar.
• Behavioural advertising profiles. We run no ad networks and no third-party analytics or tracking scripts.

4. How and why we use your data

We use the data described above only for the following purposes:

• To provide the service — creating your account, logging you in, showing and syncing your saved palettes and history across your devices.
• To secure your account — verifying your email address, confirming password changes, and notifying you when a sensitive change is made to your account.
• To keep the site working — finding and fixing errors, preventing abuse, spam and automated attacks.
• To communicate with you — replying to your messages and sending essential service emails (for example, email confirmation or password reset). We do not send marketing emails.
• To meet legal obligations — where we are required to keep or disclose information by law.

We do not use your data to build advertising profiles, and we do not make decisions about you by automated means that produce legal or similarly significant effects.

5. Legal bases for processing (GDPR)

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases:

• Performance of a contract — to create and maintain your account and to store the palettes you asked us to save.
• Legitimate interests — to keep the site secure and reliable, prevent abuse, and answer your enquiries, balanced against your rights and freedoms.
• Consent — where you have specifically agreed to something, for example by choosing to save data or by contacting us. You can withdraw consent at any time.
• Legal obligation — where processing is required in order to comply with the law.

6. Cookies and local storage

FindColor uses only technically necessary storage. We do not use advertising, profiling or third-party analytics cookies.

• Session data that keeps you logged in between visits, so you do not have to enter your password on every page.
• A temporary “pending palette” entry, used when you press Save while logged out: the palette is held on your device so it can be saved for you right after you log in.
• Short-lived technical flags, for example while a password reset is in progress.

This data lives in your own browser and is removed when you log out or clear your browser storage. More detail is available on our Cookies page.

7. Sharing your data

We do not sell, rent or trade your personal data, and we do not share it for advertising purposes.

We do use a small number of trusted infrastructure providers to run the service — for website hosting, secure database storage and authentication, and delivery of essential service emails. These providers act as our processors: they may only handle data on our instructions and for the purposes described in this policy, they are bound by confidentiality and data-protection agreements, and they may not use your data for their own purposes.

We may also disclose data in these limited situations:

• where we are legally required to do so by a valid request from a competent authority;
• where it is necessary to establish, exercise or defend legal claims, or to protect the rights, safety or property of our users or of FindColor;
• if the service is ever transferred to another owner, in which case your data would move with it and you would be informed beforehand.

8. International transfers

Our providers may store or process data on servers located outside your country, including outside the European Economic Area. Where that happens, the transfer is covered by appropriate safeguards recognised under data-protection law, such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

9. How long we keep data

• Account data — for as long as your account exists. If you delete your account, it is removed together with your saved content.
• Saved palettes — until you delete them or delete your account.
• Generation history — only the 50 most recent entries per account; older ones are deleted automatically.
• Technical server records — kept for a short period for security and diagnostics, then discarded or anonymised.
• Email correspondence — kept for as long as needed to deal with your request and a reasonable period afterwards.

10. Security

All traffic to and from findcolor.space is encrypted with HTTPS. Passwords are stored only as secure hashes. Saved palettes are protected by row-level access rules so that each account can read and modify only its own data. Access to production systems is restricted and protected by strong authentication.

No online service can promise absolute security. Please use a unique, strong password and do not reuse it on other sites. If you believe your account has been compromised, contact us at [email protected].

11. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and receive a copy of it;
• Rectify data that is inaccurate or incomplete;
• Erase your data (“right to be forgotten”);
• Restrict or object to certain processing;
• Portability — receive your data in a structured, machine-readable format;
• Withdraw consent at any time, without affecting processing already carried out;
• Complain to your local data-protection authority.

Much of this you can do yourself: your saved palettes can be viewed, exported and deleted from the My palettes page, and your email and password can be managed from your Account page. For anything else, write to [email protected] and we will respond within 30 days. We may need to verify your identity before acting on a request.

If you are a California resident, you also have the right to know what personal information is collected and to request its deletion, and the right not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA/CPRA.

12. Children

FindColor is not directed at children and is not intended for anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete it.

13. Links to other sites

Our pages may link to external websites and resources. We do not control those sites and we are not responsible for their content or their privacy practices. We encourage you to read the privacy policy of any site you visit.

14. Changes to this policy

We may update this Privacy Policy from time to time — for example if we add a new feature or if the law changes. The date at the top of the page always shows the current version. If a change materially affects your rights, we will make it clearly visible on the site, and where required we will ask for your consent.

15. Contact

Questions, requests or complaints about this policy or about your personal data are welcome at [email protected]. You can also use our Contact page.