India · DPDP Act
Privacy notice for India
Under the Digital Personal Data Protection Act, 2023: what personal data this site processes, why, and what you can do about it.
The short version
ColorFinders does not collect your images, your name, or your email address. The only personal data processed about you through this site is what Google receives if you choose to allow analytics, plus the ordinary request logs any website host keeps and the request your browser makes to Google Fonts for the site's typefaces. You can say no, and every tool works exactly the same.
Who is responsible
The owner of ColorFinders, operator of colorfinders.com, is the Data Fiduciary for the processing described here. For any question about your personal data, or to exercise a right under the Act, contact hello@colorfinders.com.
Personal data, item by item
| Data | Purpose | When |
|---|---|---|
| Images you open, and colours you pick from them | None (never collected) | Never. They are processed inside your browser and are not sent to this site or anyone else. |
| IP address, browser type, page requested, time | Delivering pages, and keeping the site secure | Every visit. Recorded in the access logs of the host, Hostinger, and its CDN, kept for the period the host sets, and not used for anything else. |
| IP address and browser details, sent by your browser to Google Fonts | Showing the site in its own typefaces | Every visit. The request goes from your browser straight to Google's font servers; a content blocker can stop it, and the site then uses your system fonts. |
| A random identifier in a cookie; pages opened and their titles; the referring page (only the site's name, if it is another site); how long each page is open; device, browser, language; approximate region derived from your IP address | Counting visits and finding broken features (Google Analytics) | Only if you allow it. Deleted after 14 months. |
| Product events such as "an image was loaded" or "a palette was downloaded", with coarse labels like file format | Finding which tools work and which break (Google Analytics) | Only if you allow it |
Your theme choice and your consent answer are also stored, but only in your own browser's local storage. This site never receives them.
Your consent
Nothing in the "Only if you allow it" rows happens until you press Accept all in the consent banner, or allow that purpose under Choose. Pressing Reject all, or ignoring the banner, means the Google code is never loaded. Accepting is not a condition of using any tool.
You can withdraw consent as easily as you gave it, for each purpose separately, on the Privacy choices page, linked at the foot of every page. Collection stops at once. Withdrawing does not affect processing that already happened while your consent was in place. Refusing or withdrawing also deletes the Google Analytics cookies from this browser, so copy your analytics ID from that page first if you want its records erased.
Who else processes it
Google (Google LLC and its affiliates) processes the analytics data described above, and the font requests, and may do so outside India. The web host processes the server logs. No personal data is sold, and none is shared with anyone else.
Children
Under the Act, anyone under 18 is a child. This site is not directed at children, and it does not knowingly process children's personal data. If you are under 18, please choose Reject all in the consent banner: the tracking and advertising it offers are not for you, and this site does not collect the verifiable parental consent the Act would require.
Your rights
Under the Act you have the right to:
- get a summary of the personal data processed about you, and who it was shared with;
- have inaccurate data corrected, and data erased when it is no longer needed;
- withdraw consent at any time, as described above;
- have a grievance addressed; and
- nominate someone to exercise these rights for you if you die or become incapacitated.
This site holds no account, no profile and no copy of your images, so there is very little it can look up about any one person. Google Analytics data is tied to a random ID in your browser's _ga cookie, not to your name. The Privacy choices page shows that ID; send it with your request and the data can be found and deleted. To stop future collection, withdraw consent on the Privacy choices page. To make a request, write to hello@colorfinders.com. Requests and grievances are answered within 30 days, and never later than the 90 days the DPDP Rules allow.
Complaints
Please raise any grievance with us first, at the address above. If you are not satisfied with the response, you can complain to the Data Protection Board of India through its online platform.
Languages
This notice is in English. You can ask for it in any language listed in the Eighth Schedule to the Constitution of India by writing to hello@colorfinders.com.
Related
The privacy policy and cookie policy cover the same processing in more detail and apply to visitors everywhere.