Legal

Cookie Policy

Last updated: April 7, 2026

This Cookie Policy explains how ColorArchive uses cookies and similar technologies when you visit colorarchive.org.

1. What Are Cookies

Cookies are small text files stored on your device by your web browser when you visit a website. They are widely used to make websites work efficiently and to provide information to site operators.

2. Cookies We Use

ColorArchive uses a minimal set of cookies, limited to what is strictly necessary for the service to function:

Session cookie (ca_session): A single authentication cookie that keeps you logged in after signing in via magic link or Google OAuth. Type: first-party, httpOnly. Duration: 7 days. This cookie is essential for account features such as favorites sync, purchase history, and API key management.
No tracking cookies: We do not use third-party tracking cookies, advertising cookies, or analytics cookies that identify individual users.

Because we only use strictly necessary cookies, consent is not required under the EU ePrivacy Directive. We do not display a cookie consent banner.

3. Local Storage

In addition to cookies, ColorArchive uses your browser's localStorage to store non-sensitive preferences locally on your device:

Favorites: Colors you mark as favorites (if not logged in, these are stored only in your browser).
Recent colors: A list of recently viewed colors for quick access.
UI preferences: Theme preference and other display settings.
Pinterest token: If you connect your Pinterest account, the OAuth access token is stored in localStorage for the duration of your session.

This data never leaves your device unless you are logged in, in which case favorites are synced to your account on our server.

4. Third-Party Services

The following third-party services may set their own cookies or collect data when you interact with them:

Google OAuth: If you sign in with Google, Google may set cookies as part of the authentication flow. See Google's Privacy Policy.
Vercel: Our hosting provider may collect anonymous performance metrics. See Vercel's Privacy Policy.
Stripe: When you are redirected to Stripe's checkout page for purchases, Stripe may set cookies for fraud prevention and payment processing. See Stripe's Privacy Policy.
Pinterest: If you use the Pinterest integration, Pinterest may set cookies during the OAuth authorization flow. See Pinterest's Privacy Policy.

We do not control the cookies set by third-party services. Please refer to their respective privacy policies for more information.

5. Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to:

View what cookies are stored and delete them individually.
Block third-party cookies.
Block all cookies from specific sites.
Clear all cookies when you close the browser.

Please note that disabling the session cookie will prevent you from staying logged in, and clearing localStorage will remove your locally saved favorites and preferences.

6. Do Not Track (DNT)

ColorArchive does not currently respond to Do Not Track (DNT) browser signals, as there is no industry-standard implementation. However, we do not engage in cross-site tracking or serve targeted advertisements, so the practical effect is the same regardless of your DNT setting.

7. Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in our practices or for legal or regulatory reasons. The updated policy will be posted on this page with a revised date.

8. Contact

If you have questions about our use of cookies, please contact us at support@colorarchive.org.