Privacy policy

The short version

• The color tools run in your browser. Camera frames and photos are processed on your device and are not sent to us or to anyone else.
• If you join the waitlist for the Full Color Report, we store your email address, which tool you came from, your language and the time. That is the only thing the site saves on a server.
• Google Analytics and PostHog count page visits, clicks and a few steps of each tool. They never receive an image, a face measurement or your email address. You can turn them off below.
• There is no advertising on this site and no payment is taken.

Your camera and your photos

A tool opens the camera only after you start it, and your browser asks for permission first. If you upload a photo instead, your browser opens it locally.

The frames are read inside your browser by open models from Google’s MediaPipe, which find the position of your face, and sometimes your hair and clothes, and by our own code, which reads colors from the pixels. These run as WebAssembly on your device. The model files are downloaded from this website the first time you use a tool; they are program files and contain nothing about you. No frame, photo, face landmark or color reading is sent over the internet, and the free tools call no server model.

Our pages carry a Content Security Policy that tells your browser to block the page from connecting to any website except this one, Google Analytics and PostHog. You can check this yourself: open your browser’s developer tools, go to the Network tab and run a tool. You will see the model files download and, unless analytics is off, small requests to those two services.

Share cards and downloads are made in your browser. They leave your device only if you choose to share or send them, through your device’s own sharing or by copying a link or text.

What is stored on your device

We use your browser’s own storage for two things, and you can clear both by clearing this site’s data in your browser settings:

• Your latest result and the tool’s state, in session or local storage, so a page can show your result again. This stays on your device. Nothing of it is sent anywhere.
• Your analytics choice, in local storage (key cas:analytics), if you use the switch below.

The waitlist

The Full Color Report isn’t available yet. If you press its button, you can leave your email address so we can tell you when it is. When you do, we store:

• your email address;
• which tool or page you came from, and the language of the page;
• the date and time.

These are stored in a database on Cloudflare. We use them only to tell you about the report and to see how much interest there is. We don’t sell them and they never go to Google Analytics or PostHog. No email is sent by the site today, and no payment details are ever asked for. To be removed, email hello@coloranalysisscan.com.

To stop abuse of the form we count requests per connection. The count is kept against a one-way hash of your IP address, never the address itself, and the hash is deleted after about an hour.

Server logs and hosting

This website is hosted on Cloudflare. Like any web host, Cloudflare handles your IP address to deliver the pages and keeps short-lived technical logs of requests (such as IP address, browser type and the page requested) for security and reliability. Those logs contain no images and no color readings.

Analytics

We use two analytics services to see which pages people find and where a tool loses them: Google Analytics 4, run by Google, and PostHog, run by PostHog Inc. on its EU cloud. They receive:

• Page views: the page address, the page you came from, how long you stayed, and the browser, device type, screen size and approximate location that each service works out from the request.
• Clicks and replays (PostHog only): where on the page you clicked and, when replays are switched on, a replay of how the page was used, with form fields masked. Camera stages and results are excluded: in a replay those areas are a blank placeholder, and clicks inside them are not recorded.
• Seven steps of a tool: a tool was started, its input was ready, a result was shown, the report offer was seen, its button was pressed, someone joined the waitlist, a result was shared. Each step carries the tool, the language and whether the camera, a photo, a sample or a form was used, and a result can carry its coarse outcome, such as the season name or the word for your undertone. Never an image, a landmark, a pixel value or your email address.

To recognise a returning browser, Google Analytics sets cookies named _ga and _ga_ followed by its measurement id, and PostHog sets a cookie and uses local storage, both named ph_ followed by its project key. Neither service is used for advertising: Google signals and advertising features are off. Google describes how it handles this data in how Google uses information from sites that use its services, PostHog in its privacy policy.

Wherever you are, you can turn analytics off here, and we remember it in this browser:

Face data

Measurements of a face can count as biometric data under laws such as the EU and UK GDPR and the Swiss Federal Act on Data Protection. Here, frames and landmarks are processed only on your device and never reach us.

Using a tool on someone else

Only use the camera or a photo of yourself, or of someone who has agreed to it.

Age

You must be 18 or older to use Color Analysis Scan. It is not meant for children.

Your rights and contact

Color Analysis Scan is operated by David Novotny, Bahnhofstrasse 1, 8001 Zurich, Switzerland. To ask about the records we hold, such as access, correction or deletion where the law allows, email hello@coloranalysisscan.com. You also have the right to complain to your data protection authority.