Back home

Privacy Policy

Effective September 17, 2026. The studio works on your device. Optional accounts and gallery submissions use server storage. Payments and advertising are not enabled.

Studio and local storage

Designs, previews, exports, and palette-finder images are processed in your browser. They are not uploaded by the studio. Download history, including small previews and design settings, and filename counters are saved in local browser storage. Clear this site’s data in your browser to remove them.

Accounts

When sign-in is available, Supabase stores your email address, account ID, authentication information, and account role. Google or Apple shares sign-in information if you choose that provider. Session cookies keep you signed in. This information is used to provide your account and control access to submissions and moderation.

Gallery uploads

Submitting an image uploads it for processing. We store a resized WebP copy, its title and category, your account ID, and its review status in Supabase. Administrators can review submissions. Approved images and their titles are public and downloadable. Removing an image from the gallery cannot remove copies others have already downloaded.

Cookies and popularity counts

When gallery counting is available, opening an image sets a random browser identifier in the gallery-visitor cookie. It expires 24 hours after it is last set. The database records that identifier, the image ID, and the day to limit popularity counts to one per image per browser per day. Cookie expiry does not delete those database records. No advertising cookies are used. Vercel Web Analytics provides aggregate traffic statistics without analytics cookies, including page views, referrers, approximate location, and device and browser types. Our integration excludes authentication and account pages and removes query parameters and URL fragments from page URLs before sending them.

Service providers and retention

Supabase handles accounts and submissions. The hosting provider receives technical requests, which may include IP addresses, browser details, requested pages, and timestamps, to deliver and secure the site. Account, submission, and view records currently have no automatic deletion schedule. Hosting-log retention depends on the provider’s settings. Personal information is not sold or used for cross-site advertising.

Your rights and policy updates

Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal data, restrict or object to processing, and complain to a data-protection authority. Clearing browser data does not delete your account or uploaded images. Where a legal basis is required, account and submission processing supports the service you request; technical security processing serves the legitimate interest in protecting the site. Material changes will be reflected here with a new effective date.