Privacy Policy

1. Who operates this site

The Site is operated by an individual (“we”, “us”), not a registered company. You can learn more about the operator at z1x.us.

Operator: z1xus (individual).

2. What data we collect

We aim to collect as little data as possible. In normal use, the Site:

• does not require you to create an account or log in;
• does not ask you to submit personal information through forms;
• does not process payments;
• processes the images you open entirely within your browser. Your images are not uploaded to or stored on our servers.

The limited information we do receive is described in the sections below and is, where possible, anonymized or aggregated.

3. Automatically collected technical data

Like most websites, when you visit, our hosting and analytics providers may automatically receive standard technical information necessary to deliver the Site and keep it secure — for example your IP address (used transiently to route the connection and, where applicable, to derive an approximate country), the type of device, browser and operating system, the pages you view, and the referring page.

We aim to use this information only in aggregated or anonymized form and do not use it to build profiles of individuals.

4. Analytics, cookies, and similar technologies

Analytics. We use a self-hosted instance of Plausible Analytics to understand, in aggregate, how the Site is used (for example, page views, broad device/browser categories, approximate country, and a small number of anonymous usage events such as which features are used and the selected interface language). Plausible is designed to be privacy-friendly: it does not use cookies and aims not to collect personal data or track individuals across sites.

Cookies. The Site itself does not set tracking cookies. To remember your preferences (such as choosing to hide the support banner, or palettes you create), we use your browser’s local storage on your own device; this information stays in your browser and is not transmitted to us.

5. Why we use this data

• to provide, operate, and maintain the Site;
• to keep the Site secure and to diagnose technical problems;
• to understand overall usage trends, in aggregate, so we can improve the Site;
• to display a small advertisement that helps cover running costs (see section 7), where applicable.

6. Legal basis for processing (EU/EEA and UK)

Depending on your location, data-protection laws such as the EU/EEA General Data Protection Regulation (GDPR) and the UK GDPR may apply. Where they do, we rely on the following legal bases, to the extent required by law:

• Legitimate interests (Art. 6(1)(f) GDPR) — to operate, secure, and improve the Site, and to measure usage in a privacy-preserving, aggregated way, balanced against your rights and freedoms;
• Consent (Art. 6(1)(a) GDPR) — where consent is required for any specific processing (for example certain cookies or similar technologies, where applicable);
• Legal obligation (Art. 6(1)(c) GDPR) — where we must process data to comply with applicable law.

7. Third-party services

We do not sell your personal information, and we do not share it with third parties for their own marketing. We do rely on a small number of service providers to run the Site. Depending on configuration, these may include:

• Hosting / content delivery. The Site is served via Cloudflare, which processes connection data (such as your IP address) to deliver content and protect against abuse.
• Analytics. A self-hosted Plausible Analytics instance, as described in section 4.
• Advertising. Where shown, advertisements may be served via A-ADS, an advertising network that states it does not use cookies or collect personal data. You can hide the advertisement using the “disable ads” option.
• Optional palette import. If you choose to import a palette from an external source (for example Lospec), your browser contacts that third party directly to fetch it. This only happens at your request.

Fonts and other static assets are served directly from the Site rather than from third-party font CDNs, so loading the Site does not, by itself, send your IP address to a separate font provider.

These providers act as independent services or processors and have their own privacy policies. We encourage you to review them.

8. Data retention

Because the Site does not collect personal accounts or store your images, there is little personal data to retain. Aggregated analytics are kept only for as long as needed to understand usage trends, and technical logs held by our providers are retained according to their own policies.

9. International data transfers

The Site and its providers may operate from, or route traffic through, servers located in different countries. Where personal data is transferred across borders, we aim to rely on appropriate safeguards to the extent required by applicable law (for example, recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses, where relevant).

10. Your rights

Depending on your location, you may have rights regarding your personal data. For users in the EU/EEA and the UK, these may include the right to access, correct, delete, or restrict processing of your data, the right to object to processing, the right to data portability, and the right to withdraw consent where processing is based on consent.

Because we aim to collect only anonymized or aggregated data and do not maintain user accounts, we may not hold information that can identify you individually, which can limit our ability to act on some requests. To exercise any applicable right, please contact us using the details in section 15. You may also have the right to lodge a complaint with your local data-protection authority.

11. Regional privacy rights

Depending on where you live, additional privacy rights may apply under local law (for example, in some U.S. states such as California). To the extent such laws apply to us, we do not sell or share personal information in the sense those laws define, and we aim to honor applicable rights such as the right to know, access, or delete personal information. Where a regional law grants you specific rights, you may exercise them by contacting us.

12. Children’s privacy

The Site is intended for a general audience and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take reasonable steps to address it.

13. Security

We aim to use reasonable technical and organizational measures to protect the limited data involved in operating the Site, including serving the Site over encrypted connections (HTTPS). However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

14. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Where required by law, we will take additional steps to notify you of significant changes. We encourage you to review this page periodically.

15. Contact

If you have questions about this policy or wish to exercise any applicable rights, you can reach us at:

privacy@yawcc.z1x.us