Privacy Policy
Effective: July 2026
ColorMeUp LAB ("we", "us") is a color palette design tool available at lab.colormeup.co. This policy describes what data we collect, how we use it, and your rights regarding that data.
Information We Collect
Account Data
When you create an account, we collect your email address and name (optional). If you sign in with Google or GitHub, we also receive your profile avatar URL from the provider.
Passwords are hashed server-side by Firebase Authentication and are never stored in plain text. We do not have access to your plain-text password.
Palette Data
When you save a palette, we store a palette name, the encoded palette URL (containing your color and scale settings), and whether you marked it as a favorite. Each saved palette is associated with your user ID.
Usage Analytics
We use PostHog for product analytics to understand how the app is used. We track page views and product events (e.g., login method used, palette saves, color edits). Analytics is configured to be cookieless — it uses in-memory persistence and stores nothing on your device. To recognize returning visits without cookies, we derive a rotating, anonymous identifier on our server from a salted hash of your IP address and browser; it rotates weekly and is never stored on your device.
Your IP address is used to derive an approximate location and to compute the anonymous identifier described above, and is not stored long-term. Requests are proxied through lab.colormeup.co/ingest, and data is processed by PostHog Cloud (US region).
Error Logs
We use Sentry for error tracking. When an error occurs, Sentry captures technical details about the error (stack trace, browser info). This data is used solely to diagnose and fix bugs.
Local Storage
We store your UI preferences (such as dark mode) in your browser's local storage. This data stays on your device and is not sent to our servers. Our analytics uses no device storage.
Cookies & Consent
We do not use cookies or any device storage for analytics. Because no tracking cookies are set, we do not display a cookie consent banner. Our analytics processing relies on a legitimate interest in understanding and improving the service, using the minimal, privacy-preserving configuration described above.
How We Use Your Information
- Authenticate your account and manage sessions
- Save and retrieve your palettes
- Display your profile avatar
- Understand how the app is used (product analytics)
- Identify and fix errors
We do not sell your data. We do not use your data for advertising or profiling.
Third-Party Services
- Firebase (Google Cloud) — Authentication and database hosting (US region). Privacy Policy
- Google OAuth — Sign-in provider. Shares your email, name, and avatar with us during authentication. Privacy Policy
- GitHub OAuth — Sign-in provider. Shares your email, name, and avatar with us during authentication. Privacy Policy
- PostHog — Product analytics. Cookieless; US region. Privacy Policy
- Sentry — Error tracking. Captures technical error data only.
Data Storage and Security
Your account and palette data is stored on Firebase (Google Cloud) servers. All communication between your browser and our services uses HTTPS encryption.
Access to your saved palettes is restricted to your account through Firestore security rules.
Your Rights
You can:
- Access and view your saved data through the app
- Delete individual palettes at any time
- Request deletion of your account and all associated data by contacting us
Children's Privacy
This service is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, please contact us so we can remove it.
Changes to This Policy
We may update this policy from time to time. Changes will be reflected on this page with an updated effective date. Continued use of the service after changes constitutes acceptance of the updated policy.
Contact
For questions about this policy or to request data deletion, contact us at [email protected].