This Privacy Policy explains how Colorant, LLC ("Colorant", "we", "our", or "us") collects, uses, discloses, and protects your information when you use our hardware and software products (collectively, the "Services"). By using the Services, you acknowledge that you have read and understood this Policy. If you do not agree, please do not use the Services. This Policy should be read together with our Terms of Service and EULA.
1. Data We Collect
1.1 Technical Information
- Hardware Identification (HWID): unique identifiers for your hardware, used for authentication and license management
- IP Address: for security purposes and to determine your general location
- Operating System Information: version and configuration details used to operate and improve the Services
- Device and Performance Metrics: technical data about how the Services function on your system
1.2 Account Information
- Account details: your name, email address, and password (stored only as a salted, one-way hash), and when you signed up and signed in
- Discord Information: username, avatar, email address, and Discord ID when you sign in with or link Discord
- Payment Information: your plan, payments, refunds, and the billing country, handled through our payment processor (Stripe); we do not store full card numbers
- Communication Records: the emails we send you and records of your interactions with our support team
1.3 Cookies and Similar Technologies
Our website uses a small number of cookies and similar technologies that are necessary for it to function, including a session cookie that keeps you signed in, and security cookies set by our infrastructure provider (Cloudflare) to protect against abuse. You can control or delete cookies through your browser settings, although some features may stop working without them. We do not use cookies to sell your information or to build advertising profiles.
2. How We Use Your Information
2.1 Primary Uses
- To provide, maintain, and improve the Services
- To authenticate your identity and manage your account and licenses
- To prevent fraud, unauthorized access, ban evasion, and abuse
- To communicate with you about updates, support, and service-related notices
- To understand usage and optimize performance
2.2 Legal Bases for Processing (EEA and UK)
Where the EU or UK GDPR applies, we rely on the following legal bases:
- Performance of our contract with you
- Our legitimate interests in operating, securing, and improving the Services
- Your consent, where we ask for it
- Compliance with our legal obligations
3. Data Sharing and Disclosure
3.1 Service Providers
We share information with third parties who help us operate the Services, only as needed for them to provide their services to us. These include our payment processor (Stripe), our email provider (Resend), cloud hosting and security providers (such as Cloudflare), Discord (when you sign in with it, and for the member count and avatars on our home page, which your browser loads from Discord), and services that check whether an email address is disposable or a password has appeared in a data breach (only a short prefix of a one-way hash of your password is sent, never the password). These providers are required to use your information only on our behalf.
3.2 Legal Requirements
We may disclose your information if required by law, regulation, legal process, or a valid governmental request, or where necessary to protect our rights, our users, or the security of the Services.
3.3 Business Transfers
In the event of a merger, acquisition, or sale of all or part of our assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or control of your personal information.
3.4 No Sale of Personal Information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
4. Data Security
We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
5. Data Retention
We keep your information only for as long as it is needed for the purposes described in this Policy. In general:
- Account and license data is kept while your account is active and for up to 24 months after it is closed, for fraud prevention and to meet legal obligations.
- Records of banned accounts may be kept for longer where necessary to prevent ban evasion.
- We delete or anonymize information when it is no longer needed.
6. Your Rights and Choices
6.1 Account Information
You can review and update your account information on your account page (name, password, linked Discord account, signed-in browsers and your computer), or by contacting us. You cannot change your email address yourself: you can add one there if your account has none, or ask us on Discord to change it.
6.2 Data Subject Rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Request deletion of your personal information
- Restrict or object to certain processing
- Request portability of your information
- Withdraw consent where processing is based on consent
To exercise any of these rights, contact us using the details in the "Contact Us" section. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.
6.3 Do Not Track
We do not currently respond to "Do Not Track" browser signals.
7. Children's Privacy
The Services are not intended for, and we do not knowingly collect personal information from, anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us and we will take steps to delete it.
8. International Data Transfers
Your information may be transferred to and processed in countries other than the one in which you live, which may have different data protection laws. Where required, we rely on appropriate safeguards for such transfers, including:
- Standard contractual clauses approved by the European Commission (and the UK addendum, where applicable)
- Adequacy decisions for certain countries
- Other lawful transfer mechanisms, such as your explicit consent
9. Regulatory Compliance
9.1 European Economic Area and United Kingdom
For users in the EEA and UK, we comply with the EU GDPR and the UK GDPR. The data controller is Colorant, LLC, 1111B S Governors Ave, STE 28806, Dover, DE 19904, US. You may contact us using the details below, and you have the right to lodge a complaint with your local supervisory authority.
9.2 California Residents
If you are a California resident, the CCPA (as amended by the CPRA) gives you certain rights. In the preceding 12 months we have collected these categories of personal information: identifiers (such as your name, email address, Discord ID and username, and your IP address); device and hardware identifiers (such as HWID and operating-system details); commercial information (such as products purchased); and internet or network activity (such as how you use the Services). We collect this information for the purposes described in Section 2 and disclose it to the service providers described in Section 3.
We do not sell your personal information and do not share it for cross-context behavioral advertising. As a California resident you have the right to know what we collect, to request deletion, to request correction, and not to be discriminated against for exercising your rights. To exercise these rights, contact us using the details below.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or regulatory reasons. When we do, we will update the "Last updated" date above, and for material changes we will provide additional notice through the Services where appropriate. Your continued use of the Services after changes take effect constitutes acceptance of the revised Policy.
11. Contact Us
If you have questions or requests regarding this Policy or your personal information, contact us:
We will respond to your inquiry as soon as reasonably possible.