Privacy Policy

ColorFrom lets you generate color palettes without an account. Optional accounts let you save palettes and access them later. This Privacy Policy explains what information may be processed when you use colorfrom.cc.

Information ColorFrom collects

ColorFrom does not require you to create an account to generate or export palettes. If you create an optional account, we collect the information needed to provide and secure that account.

When you use the image search feature, your search term is sent through our Netlify function to Unsplash so matching images can be returned to your browser. When you click an image and sample a color, that processing happens in your browser.

Accounts and saved palettes

You can create an account with email and password or sign in with Google. Supabase processes your account credentials, email address, account identifier, authentication events, and related security information. If you use Google sign-in, Google may provide your name, email address, profile image, and Google account identifier. ColorFrom uses this information only to authenticate you, operate your account, communicate about account security, and associate saved palettes with you. Passwords are sent directly to Supabase over HTTPS and are not stored in ColorFrom's palette database.

When you select Save palette, we store its name, colors, source image references and metadata, and timestamps in Supabase. You can delete saved palettes from My palettes. Generating or exporting a palette alone does not save it to the database.

How ColorFrom uses information

We use information to provide image search, authenticate users, send verification and password-reset messages, store and retrieve palettes, prevent abuse, troubleshoot problems, maintain security, and comply with legal obligations. ColorFrom does not sell personal information or use account information for targeted advertising.

Third-party services

ColorFrom relies on third-party services to operate parts of the site.

These may include:

• Netlify, which hosts the site and serverless function used for image search
• Unsplash, which receives image search requests and returns search results and hosted images
• Supabase, which provides authentication and saved palette storage
• Cloudflare Turnstile, which checks for bots when you use account forms; its verification tokens are sent to Supabase to protect authentication requests
• Google, which provides optional account sign-in
• Resend, which delivers account verification and password-reset email
• Google Fonts and jsDelivr, which deliver visual and frontend assets to your browser

Those services may collect technical information such as IP address, browser details, request metadata, or usage logs under their own privacy practices.

We disclose information to these providers only as needed to operate ColorFrom, protect the service, or comply with law. These providers may process information in countries other than the one where you live.

Cookies and analytics

ColorFrom stores your sign-in session in browser local storage so you can remain signed in after refreshing. When starting sign-in with an unsaved palette, it temporarily keeps that palette in session storage to restore it after the redirect. Signing out clears the local sign-in session.

If hosting providers, CDNs, or embedded third-party services use cookies or similar technologies for delivery, security, or performance, those technologies are governed by their own policies.

Children's privacy

ColorFrom is not directed to children under 13, and we do not knowingly collect personal information from children.

Data security

Saved palettes use database access rules intended to restrict access to their owner. No method of transmission or storage is completely secure.

Retention and deletion

Saved palettes remain in your account until you delete them or your account is deleted. Account information is retained while your account remains active and for a limited period afterward when reasonably needed for security, fraud prevention, dispute resolution, backups, or legal compliance. Service providers may retain operational and security logs according to their own retention practices.

You may request access to, correction of, or deletion of your account information. You may also delete individual palettes from My palettes. To request deletion of your entire account or make another privacy request, contact info@colorfrom.cc. We may need to verify that you control the account before completing a request. Some information may be retained where legally required or reasonably necessary for security and fraud prevention.

Your choices and privacy rights

You can use the palette generator without an account, choose between email and Google sign-in, sign out to clear the local sign-in session, and delete saved palettes. Depending on where you live, you may also have rights to access, correct, delete, restrict, or obtain a copy of your personal information, or object to certain processing. ColorFrom will not discriminate against you for making a privacy request.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to the site, its features, or legal requirements. When we do, we will update the effective date on this page.

Contact

For privacy questions or requests, contact info@colorfrom.cc.