Plain privacy. No fine print games.

Chromilla is operated by Marco, as a sole proprietorship based in Norway, and is the data controller for the account data and analytics described below. That means we decide why and how your data is processed, and we are the ones you contact with a question or request.

You can use the free mixer without an account. If you sign up, you can sign in with an email address or with Google. When you have an account, we store the things that make the app useful to you: your email, your saved mixing formulas, your recent colour history, your plan and trial status, and any formula feedback you send. This account data is held in our backend (Lovable Cloud, built on Supabase) and is tied to your account, not sold or shared for advertising. You can ask us to export or delete your account data at any time (see "Your rights" below).

We store account data because it is necessary to run the service you signed up for (a contract basis), and we run analytics based on your consent, which you can withdraw at any time. We keep account data for as long as your account is active. If you delete your account, we delete the account data with it, other than what we are required to keep for tax or accounting records (billing history, where it applies). Analytics data is kept for up to 14 months, in line with Google Analytics' standard retention setting.

Separately from your account, your most recent picked colours are kept in your browser's local storage (key: chromilla:history) so the picker can show them again. Clearing your browser data removes them.

When you ask for mixing tips, we send a short text request: a hex value and the chosen role (highlight, midtone, or shadow). That request goes through the Lovable AI Gateway to a Google Gemini or Anthropic Claude model that writes the steps. We never send your image, only the colour value.

To understand how the app is used and where to improve it, Chromilla uses Google Analytics and Google Tag Manager. If you sign up, we also use Klaviyo to send lifecycle emails (like a welcome series or a trial reminder) tied to your email address, and Meta Pixel to measure whether our ads led to a signup, trial, or subscription. None of these load until you accept on the cookie banner or the Cookies page. All of them stop the moment you withdraw consent. We do not sell your data. Meta Pixel is used to measure our own ad performance (did an ad lead to a signup or a subscription), not to build ad audiences from your activity elsewhere on the app. Full detail on every cookie and tracker, and the accept/reject control, is on the Cookies page.

Paid plans are billed through Stripe. Stripe handles your card details directly. Chromilla never sees or stores your full card number. We keep only what we need to manage your subscription, such as your plan, status, and renewal date.

Lovable Cloud and Supabase for hosting, database, and sign-in. Google for optional Google sign-in and for Analytics. Google Gemini and Anthropic, through the Lovable AI Gateway, to write mixing tips. Stripe for billing on paid plans. Klaviyo for lifecycle email, once you've accepted cookies. Meta, for ad measurement, once you've accepted cookies. Some of these run on servers outside Norway and the EEA. Where that happens, they do it under their own standard contractual clauses or an equivalent safeguard. We don't run our own servers outside the EEA.

You can use the free mixer without an account. You can block analytics cookies in your browser. If you have an account, you have the right to:

• ask what data we hold about you, and get a copy of it
• correct anything that's wrong
• ask us to delete your data, other than what we must keep for accounting purposes
• ask us to limit or object to how we use it
• take your data to another service (data portability)
• withdraw analytics consent at any time, without affecting the free mixer

To use any of these, use the Feedback page and we will get back to you. If you think we've got it wrong and we can't sort it out together, you also have the right to complain to your local data protection authority, in Norway that's Datatilsynet (datatilsynet.no).

If we change how Chromilla handles data, we update this page and the date at the top. Material changes will be called out plainly, not buried.