Privacy policy

1Who we are

Colormockups (the "Service") is operated by Abdel Media Marketing SARL ("we", "us"). This policy explains what information we handle when you use https://colormockups.com, why, and what choices you have. Questions go to support@colormockups.com.

2The short version

• Your design files, your logo and the mockups you render never leave your computer. All image processing happens in your browser.
• We keep the minimum needed to run an account: your email, name and sign-in details, handled by our authentication provider.
• Payments are handled by Lemon Squeezy. We never see your card number or PayPal login.
• If you connect Printify, your access token is encrypted on our server, used only to talk to Printify for you, and destroyed the moment you disconnect.
• We do not sell personal information and we do not run advertising trackers.

3Information we collect

We collect the following, and only for the purposes described in section 5.

• Account information. When you sign up we receive your email address, your name, and, if you sign in with a provider such as Google, the profile picture and identifier that provider shares. Our authentication provider, Clerk, also records sign-in times and the device used, for security.
• Billing information. When you start a trial or subscribe, Lemon Squeezy collects your payment details and billing address. We receive your name, email, billing country, the plan you bought and its status. We never receive full card numbers or PayPal credentials.
• Printify connection. If you choose to import products from Printify, you paste a Printify personal access token. It is encrypted on our server with AES-256-GCM and stored against your account; it never reaches browser JavaScript. It is used only to call Printify's API on your behalf, and choosing Disconnect, or requesting account deletion, destroys it immediately.
• Trial abuse records. To enforce one free trial per person we store one-way hashes of your email address and of your payment provider customer id. These cannot be reversed into the original values and are never used to contact you.
• Technical information. Like most websites, our hosting provider records server logs containing your IP address, browser type, the pages requested and timestamps. These are used for security and troubleshooting and are kept for a short period.
• Support messages. If you email us, we keep the conversation so we can help you and refer back to it.

4What stays on your device

The core of the Service runs inside your browser. The following never reach our servers:

• The design files and logo images you add to a batch.
• The rendered mockups and the ZIP file, which are written directly to your disk.
• Your per-style settings (selected colors, placement, output format, labels), which are saved in your browser's local storage so your next session starts where you left off. Clearing your browser data removes them.

The blank mockup images are fetched from our content delivery network so your browser can draw your design on them. That request is a normal image download and does not include your designs.

When you import from Printify, the artwork file is fetched by our server from Printify and passed straight to your browser. It is not stored.

5How we use information

• To create and secure your account and let you sign in.
• To provide the plan you paid for, process renewals and refunds, and send receipts.
• To respond when you contact us.
• To keep the Service safe: detecting abuse, preventing fraud and debugging failures.
• To send service messages, such as changes to these terms or notice of a security issue. We do not send marketing email unless you opt in.
• To comply with legal obligations, such as tax record keeping.

Where the GDPR or UK GDPR applies, we rely on performance of a contract (providing the Service you signed up for), our legitimate interests (security, support, improving the Service) and legal obligation (tax and accounting records).

6Cookies

We use a small number of cookies, all of which are needed for the Service to work:

• Authentication cookies set by Clerk to keep you signed in and protect against forged requests.
• A cookie recording which Printify shop you have selected. It holds no credential. On deployments without a database the encrypted token itself is held in a separate httpOnly cookie that browser scripts cannot read.

We do not use advertising cookies or third-party tracking pixels. We do not currently run analytics. If we add privacy-respecting analytics in future, we will update this policy first.

7Service providers

We work with a few companies to run the Service. Each processes information only as needed to provide their service to us, under their own privacy policies:

• Clerk (authentication and account management).
• Lemon Squeezy (checkout, payments, tax and invoicing, acting as merchant of record).
• Vercel (application hosting and server logs).
• Cloudflare (delivery of the mockup images).
• Printify (only when you choose to connect your Printify account).

We do not sell or rent personal information, and we do not share it with anyone else except when required by law or to protect the Service and its users.

8How long we keep information

• Account information is kept while your account exists. When you delete your account it is removed from our systems and from Clerk within 30 days, except where we must keep a record for legal reasons.
• Billing records are kept for as long as tax and accounting law requires, typically up to seven years.
• Server logs are kept for a short period, typically no more than 30 days.
• Support emails are kept for up to two years so we can follow up on past issues.

9Your rights and choices

Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict certain processing, and to complain to a data protection authority. We honour these requests for everyone, wherever you are.

• To exercise any of these rights, email support@colormockups.com from the address on your account.
• You can update your name, email and password from the account menu inside the app.
• You can delete your account from the account menu, or by emailing us.
• You can disconnect Printify at any time from the import panel, which deletes the stored token outright.
• You can clear your saved per-style settings by clearing your browser's site data.

10Security

All traffic between your browser and the Service is encrypted with TLS. Sensitive cookies are httpOnly so page scripts cannot read them. Because your designs and renders never leave your device, the most sensitive data you work with is never in our hands at all. No system is perfectly secure, and if we ever learn of a breach affecting your information we will tell you without undue delay.

11International transfers

Our service providers are based in the United States, and information may be processed there. Where we transfer information out of the European Economic Area or the United Kingdom, we rely on the providers' standard contractual clauses or equivalent safeguards.

12Children

The Service is for people running a business and is not directed at anyone under 16. We do not knowingly collect information from children. If you believe a child has created an account, contact us and we will remove it.

13Changes to this policy

If we change this policy in a way that matters, we will update the date at the top and, for significant changes, email account holders before the change takes effect. Continued use after that date means you accept the updated policy.

14Contact

Abdel Media Marketing SARL. Email: support@colormockups.com. We aim to answer privacy requests within 30 days.