Privacy Policy
Last updated August 13, 2026
The short version. Your photos never leave your phone. Color detection runs entirely on the device, so we never receive, see, or store an image. There are no accounts, no analytics SDK, no advertising identifiers, and no profile of you anywhere on our servers. What we do receive is the list of color names you picked and the filters you set, because that's what a shopping search is made of — plus an email address, but only if you deliberately type one into the optional prompt the app shows after you save a palette.
This policy covers the Color Swag iPhone app and the website at colorswag.xyz. It explains what Color Swag collects, why, who else touches it, and what you can ask us to do about it.
Your photos
Photos are never uploaded. When you pick an image or take one in the app, Color Swag analyses it on your device to find its dominant colors. The image data stays in the app on your phone. It is not transmitted to us, not stored on a server, not backed up by us, and not shared with anyone.
The app asks for camera and photo library access only to let you choose the one image you want to analyse. It does not scan, index, or read your photo library beyond the picture you hand it.
If you save a search, the app keeps that search — including its image, palette, filters, and the results it found — in local storage on your device. Deleting the search, or deleting the app, removes it. We have no copy.
What the app sends when you search
To find clothing, the app sends a request to our search service containing only:
- the color names you selected, as words ("navy", "rust")
- the department you chose, menswear or womenswear
- the categories you filtered to, such as hoodies or sneakers
That service assembles a search query and passes it to SerpAPI, which returns Google Shopping listings. The request carries no name, no email, no account, no device identifier, and no advertising ID, because the app has none of those to send. Searches are not logged against you, because there is no "you" for them to be logged against.
IP addresses
Like any internet service, our search service receives the IP address your request arrives from. We use it for one purpose: rate limiting — stopping a single source from flooding a paid API. The service keeps a short-lived counter keyed to the address for up to one hour, then discards it. That counter is not linked to your searches, not used to build a profile, not used for advertising, and not sold or shared.
Email, if you choose to give it
After you save a palette, the app may offer to email it to you. This is entirely optional. If you decline, nothing is sent and nothing is recorded about the fact that you declined beyond a local counter on your device that stops us asking again.
If you do enter an address, we store it — lowercased, with the date and the fact that it came from the app — so we can send you that palette. We do not attach it to your searches, your photos, your saved palettes, or your preference profile, none of which we have. It does not create an account, and it is not linked to a device identifier.
We will not sell or rent your address, and we will not pass it to advertisers. Every email we send includes a way to unsubscribe, and you can ask us to delete the address at any time by writing to hello@colorswag.xyz.
The app asks at most twice, ever, and never at all if you subscribe or if you only ever save one palette.
Preferences and personalization
Color Swag adapts to the colors and categories you reach for most. That preference profile is computed and stored on your device only. It is never uploaded, and it is not visible to us. Deleting the app deletes it.
The website waitlist
If you enter an email address on colorswag.xyz, we store that address so we can email you once, when the app launches. That is the only thing the list is used for. We do not send a newsletter, we do not sell or rent the list, and we do not share it with advertisers.
Submissions are handled and stored by Netlify, our website host. You can ask us to remove your address at any time by emailing hello@colorswag.xyz.
What we don't do
- No accounts. There is no sign-up, no login, no password, and no profile.
- No analytics or crash SDKs. The app contains no third-party analytics, attribution, or advertising frameworks.
- No tracking across apps or websites. We do not use the Advertising Identifier and do not ask for tracking permission.
- No selling or sharing of personal information as those terms are defined under California law, and no cross-context behavioural advertising.
- No cookies for tracking on the website. The site sets only a local browser preference for light or dark mode, which never leaves your browser.
Who else is involved
We use a small number of service providers to run Color Swag. They process data on our behalf, under their own privacy policies:
- Vercel — hosts the search service that relays your color search.
- SerpAPI — performs the Google Shopping search from the assembled query.
- Upstash — stores the short-lived rate-limiting counters described above.
- Netlify — hosts this website and stores waitlist submissions.
Retailer links and affiliate programs
When you tap a product, you leave Color Swag and go to the retailer's own website. Some of those links are affiliate links: if you buy, we may earn a commission, at no extra cost to you. The price you see is the price you would pay going direct.
An affiliate link carries a tag that tells the retailer or its affiliate network — such as Amazon Associates, ShareASale, or Skimlinks — that the visit came from us. Once you are on the retailer's site, that retailer and its network collect information about your visit under their own privacy policies, not ours. We receive only aggregate commission reporting, never your identity or your order details.
Children
Color Swag is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has submitted an email address to our waitlist, email us and we will delete it.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to its processing. For almost everything Color Swag does, you can exercise those rights yourself: the data is on your device, and deleting the app deletes it.
The only records we hold that could identify you are email addresses you gave us deliberately — from the website waitlist, or from the optional prompt in the app. To see one, correct it, or have it deleted, email hello@colorswag.xyz and we will act within 30 days. We will not discriminate against you for making a request.
If you are in the EEA or UK, our lawful basis is your consent for any email address you give us, and our legitimate interest in running a functioning, non-abusable service for the transient IP processing described above. You can withdraw consent at any time.
How long we keep things
- Photos: never received, so never retained.
- Search requests: not stored after the search is answered.
- Rate-limiting counters: up to one hour.
- Waitlist email: until the launch email goes out, or until you ask us to delete it, whichever comes first.
- Email given in the app: until you unsubscribe or ask us to delete it.
Security
Traffic between the app, this site, and our services is encrypted in transit with TLS. API credentials live in server-side environment variables and are never shipped inside the app. No system is perfectly secure, but the strongest protection here is structural: we hold almost nothing worth stealing.
Changes to this policy
If we change this policy we will update the date at the top of the page. If a change materially affects what we collect, we will say so prominently in the app or on this site before it takes effect.
Contact
Questions, requests, or corrections: hello@colorswag.xyz.