Privacy Policy
Last updated: September 2026
1. Who we are
NanoPalettes (“we”, “us”) is a free online tool for creating, managing, and sharing color palettes, available at nanopalettes.com. For any privacy question or request, contact us at info@nanopalettes.com.
2. What data we collect
Account data (only if you register)
- Email address and a hashed password (we never see or store your plain password).
- Optional profile data: username and avatar URL.
- Technical data required for security (IP address and user agent at sign-up/sign-in, used for rate limiting and abuse prevention).
Content you create
- The palettes, colors, tags, names, and descriptions you save to your account.
- Palettes you mark as public are displayed in the public gallery with their name, colors, and tags.
- Favorites and basic activity records (e.g., “created”, “exported”) linked to your account.
Usage without an account
All tools (palette editor, contrast checker, color wheel, scales, image extraction) work fully in your browser without an account. Colors you play with while not saving a palette never leave your device.
Analytics (only with your consent)
If you accept the cookie notice, we load Google Analytics with IP anonymization to understand aggregate usage of the site. If you reject, no analytics are loaded at all.
3. Why we process your data
- To provide your account and saved palettes — performance of the service you requested (GDPR art. 6.1.b).
- Analytics — only with your consent, which you can withdraw at any time by clearing your browser storage for this site (GDPR art. 6.1.a).
- Security and abuse prevention — our legitimate interest in keeping the service safe (GDPR art. 6.1.f).
We never sell your personal data, and we do not use it for advertising.
4. Cookies and local storage
| Name | Type | Purpose |
|---|---|---|
| nanopalettes-theme | Local storage | Remembers light/dark theme. |
| nanopalettes:cookie-consent | Local storage | Stores your cookie choice (accept/reject). |
| nanopalettes:remix | Local storage | Hands a public palette over to the editor when you click “Remix”. |
| sb-* | Local storage | Keeps you signed in (authentication session). |
| _ga, _ga_* | Cookie | Google Analytics, only after you accept (up to 2 years). |
5. Third-party services
- Supabase — hosts user accounts (authentication) and the database. Your account data is stored on Supabase infrastructure within the European Union. Supabase acts as our data processor.
- Hosting provider — serves the website and its API.
- Google Analytics 4 — aggregate, anonymized usage analytics, loaded only after consent.
6. Data retention
- Account and palette data are kept while your account exists.
- When you request account deletion, your profile, palettes, and related data are deleted.
- Security/audit records are kept for a limited period and are not used to identify you personally.
7. Your rights
If you are in the EEA/UK or elsewhere where these rights apply, you can request access, rectification, erasure, restriction, portability, or objection regarding your personal data.
- Delete your account: email info@nanopalettes.com from your account email and we will delete it (including saved palettes).
- Export your data: every palette can be exported as JSON/CSS from the editor; for a full account export, contact us.
- You may also lodge a complaint with your local data protection authority.
8. Security
Passwords are stored hashed by our authentication provider. All traffic runs over HTTPS, and database access is protected by row-level security so users can only read and write their own data.
9. Children
NanoPalettes is not directed to children under 14, and we do not knowingly collect their personal data.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version on this page and update the “Last updated” date above.