Effective date: 28 August 2026
Last updated: 28 August 2026
At Qolorio, we value privacy and the protection of personal data.
This Privacy Policy explains how Qolorio handles information when you visit Qolorio.com, use our free color tools or contact us.
Qolorio is established in the Netherlands. Where we process personal data, we do so in accordance with the General Data Protection Regulation (“GDPR”), applicable Dutch privacy and electronic communications law, and other applicable privacy requirements.
A key principle behind Qolorio is that our color tools should require as little personal information as possible. You do not need to create an account, provide your name or email address, or purchase anything to use the publicly available tools.
1. Who we are
The data controller responsible for the processing described in this Privacy Policy is:
Qolorio
Website: https://qolorio.com
Country of establishment: The Netherlands
Email: hello@qolorio.com
For formal privacy or legal correspondence for which a postal address is reasonably required, postal contact details can be requested by email.
For privacy-related questions, requests or concerns, please contact:
2. What Qolorio provides
Qolorio provides free browser-based color tools, resources and informational content.
These include tools for creating, analysing, comparing, converting, testing and exporting colors and color palettes.
Qolorio currently does not require public user accounts and does not offer paid services through the website.
You can use the publicly available color tools without providing your name, email address or other directly identifying information.
3. Browser-based processing and your files
Many Qolorio tools perform their work directly in your browser.
This is particularly important when using tools that work with images.
If you select, drop or capture an image for color extraction or analysis, the image is processed locally in your browser. Qolorio does not upload the selected image to our server for color analysis, and we do not receive or store the image.
Likewise, many exports are generated on your device and downloaded directly through your browser.
Some Qolorio features use browser or device storage to provide functionality you request. This may include:
- an active Studio project;
- project snapshots;
- tool preferences;
- temporary selections; and
- temporary palette favourites.
Some information may remain in local browser storage until you remove it or clear your browser data. Other information, such as certain temporary favourites, may exist only for the current browser session or tab.
This browser-based information is not an online Qolorio account and should not be treated as a permanent backup.
Clearing browser data, using private browsing, changing devices or browsers, or changing browser privacy settings may remove locally stored projects or preferences.
Qolorio does not use this local project storage to build advertising profiles about users.
4. Personal data we may process
Although Qolorio does not require you to provide personal information to use its tools, limited personal data may be processed in certain circumstances.
Information you provide directly
If you contact us by email, we may process information such as:
- your email address;
- your name, if you include it;
- the contents of your message;
- files or information you voluntarily attach to your message; and
- other information you voluntarily provide as part of your correspondence.
Please do not send sensitive personal information unless it is genuinely necessary for your request.
Technical information
When you access a website, some technical information is necessarily exchanged between your device and the systems used to deliver the website.
Depending on the circumstances, Qolorio, its hosting provider or its technical service providers may process information such as:
- IP address;
- date and time of a request;
- requested page or resource;
- browser and device information;
- operating system;
- referring page;
- technical error information; and
- information used to detect abuse, malicious traffic or security incidents.
We do not use ordinary server and security logs for the purpose of identifying individual visitors or creating visitor profiles.
5. Why we process personal data
We only process personal data when there is an appropriate legal basis.
Operating and securing Qolorio
Technical information may be processed where necessary to:
- deliver the website and its resources;
- maintain website availability and performance;
- diagnose technical errors;
- prevent fraud, abuse and malicious activity; and
- protect Qolorio and its visitors.
Where personal data are involved, this processing is generally based on our legitimate interest in operating, maintaining and securing the website.
Responding to messages
If you contact us, we process the information contained in your message in order to read, manage and respond to your communication.
The legal basis is generally our legitimate interest in communicating with visitors and responding to legitimate enquiries, or another applicable legal basis where required by the circumstances.
Consent management and compliance
We process information about cookie and privacy choices in order to remember those choices and demonstrate that consent was obtained or refused where applicable.
This processing is necessary for managing privacy preferences and complying with applicable privacy and electronic communications requirements.
Analytics
Where required, analytical processing is based on your consent.
You can refuse or later withdraw this consent through the Cookie Settings on Qolorio.
6. Google Analytics
Qolorio uses Google Analytics 4 (“Google Analytics”) to understand how the website is used and to improve its content, tools, usability and performance.
Depending on your consent choices and Google’s technical processing, Analytics information may include matters such as:
- pages viewed;
- general website interactions;
- browser and device characteristics;
- approximate geographic information;
- referral information; and
- technical identifiers.
Qolorio does not use Google Analytics for the purpose of identifying individual visitors by name.
For users in the European Economic Area, Switzerland and the United Kingdom, Google states that Google Analytics does not log or store individual IP addresses. IP information may be used temporarily to derive general geographic information before being discarded.
We use Google Consent Mode so that relevant Google services can receive and respond to the consent status selected through our cookie management system.
Where consent is required, Analytics storage is set to denied unless and until the visitor gives the relevant consent.
Google Consent Mode may allow Google tags to adjust their behaviour when consent has not been granted. A denied consent state is not equivalent to permission to place Analytics cookies.
Google Analytics user-level and event-level information that is subject to the configurable GA4 data-retention setting is retained for no longer than 14 months.
The legal basis for non-essential Analytics cookies and comparable storage is consent.
7. Cookies, browser storage and CookieScript
Qolorio uses cookies and similar technologies.
Some are necessary to provide website functionality, security or privacy controls. Others, such as Analytics technologies, are used only in accordance with the applicable consent requirements.
We use CookieScript as our Consent Management Platform (“CMP”).
CookieScript allows you to:
- accept cookies;
- decline non-essential cookies;
- choose individual cookie categories;
- review information about cookies and vendors; and
- change or withdraw your previous choices.
Qolorio has enabled consent recording in CookieScript. This allows us to demonstrate that a consent choice was made.
Depending on the functionality used, consent information can include a consent identifier, consent status, selected categories, date and time and technical information required to record the choice. CookieScript states that IP information used in connection with its consent system is anonymised rather than permanently recorded as a complete IP address in its consent records.
Cookie consent is periodically renewed. You can also change your choice at any time without waiting for the consent period to expire.
Use the Cookie Settings control on the website to reopen the consent interface.
Detailed information about the cookies and technologies currently detected on Qolorio, including their provider, purpose and expiration period, is available through the Cookie Declaration inside the Cookie Settings.
How long we keep consent cookies
CookieScript stores a consent cookie on your device to remember your cookie preferences. This cookie is retained for 90 days, unless you delete it earlier through your browser settings. After 90 days, we will ask you to confirm or update your preferences again.
You can change or withdraw your consent at any time via Cookie Settings.
8. IAB Transparency & Consent Framework
Our consent management system is configured to support the IAB Transparency & Consent Framework (TCF).
The framework can be used to communicate advertising-related privacy choices to participating technology providers.
Enabling this framework does not itself mean that Qolorio currently displays advertising.
Qolorio currently does not display third-party advertisements through Google AdSense.
If Qolorio introduces Google AdSense or another advertising service in the future, this Privacy Policy and the relevant consent information will be updated before or when that processing becomes active.
9. Do Not Track and browser privacy settings
Some browsers and privacy tools provide a Do Not Track (“DNT”) setting or other privacy controls.
DNT has not developed into a universally implemented standard, and different websites, browsers and third-party services may respond to it differently.
For this reason, Qolorio does not treat a DNT signal as a replacement for the specific consent choices available through our Cookie Settings.
You can manage privacy through:
- Qolorio’s Cookie Settings;
- your browser’s cookie and site-data settings;
- private or incognito browsing features;
- browser extensions and privacy tools; and
- privacy settings offered directly by third-party services.
If you block all cookies or browser storage, some Qolorio functionality may not work as intended, and the website may be unable to remember your privacy choices or locally saved tool settings.
10. External links and third-party websites
Qolorio may contain links to websites, applications, tools, resources or services operated by third parties.
When you follow an external link, you leave Qolorio and interact directly with that third party.
Third-party websites determine their own purposes and methods for processing personal data and may use cookies or other technologies according to their own privacy policies.
Qolorio does not control the independent data-processing practices of external websites.
We therefore recommend reviewing the privacy information provided by the relevant third party.
Questions about data processing performed directly by an external website or service should generally be addressed to that third party.
11. Who may receive personal data
Qolorio does not sell or rent personal data.
Where necessary, limited personal data may be processed by service providers used to operate and secure Qolorio.
Depending on the situation, these may include:
- website hosting and infrastructure providers;
- domain and technical service providers;
- security and maintenance providers;
- email service providers;
- CookieScript for consent management;
- Google in connection with Google Analytics; and
- legal, accounting or professional advisers where reasonably necessary.
We may also disclose information when required by law or where reasonably necessary for the establishment, exercise or defence of legal claims.
12. International data transfers
Some technology providers may process information outside the European Economic Area.
Where personal data are transferred internationally, applicable safeguards must be used in accordance with data protection law.
Depending on the recipient and destination, these safeguards may include:
- an adequacy decision adopted by the European Commission;
- an applicable approved data-transfer framework;
- Standard Contractual Clauses approved by the European Commission; or
- another lawful transfer mechanism.
13. How long we keep personal data
We do not retain personal data longer than reasonably necessary for the purpose for which it was processed, unless a longer period is required by law or reasonably necessary for the establishment, exercise or defence of legal claims.
As a general rule:
Email correspondence
Routine correspondence is normally deleted when it is no longer required and will generally not be retained for more than approximately 12 months after the matter has been concluded, unless there is a legitimate reason to retain it longer.
Technical and security information
Server and security information is retained only for as long as reasonably necessary for website operation, troubleshooting, security and abuse prevention. Exact retention periods may depend on the relevant hosting or infrastructure provider.
Google Analytics
User-level and event-level data subject to the configurable Google Analytics retention setting are retained for no longer than 14 months.
Cookie consent records
Consent records may be retained for as long as reasonably necessary to record privacy choices, demonstrate compliance and resolve privacy enquiries.
Browser-based projects and preferences
Project information and preferences stored locally in your browser remain on your device until they expire, are replaced, are removed by the relevant feature, or you clear your browser storage. Qolorio does not hold a server-side copy of this locally stored project information.
14. Security
We take reasonable technical and organisational measures designed to protect personal data against accidental or unlawful loss, alteration, unauthorised access or disclosure.
Measures may include:
- HTTPS encryption;
- access restrictions;
- software and security maintenance;
- infrastructure security controls; and
- appropriate backup and recovery measures where applicable.
No website or internet-based system can guarantee absolute security.
15. Children
Qolorio is not specifically directed at children under the age of 16 and we do not knowingly seek to collect personal data from children.
The public Qolorio color tools can generally be used without creating an account or providing personal information.
If you believe that a child has provided personal information to Qolorio in circumstances where it should not have been collected, please contact hello@qolorio.com so that we can review the situation and take appropriate action.
16. Your privacy rights
Where the GDPR or another applicable privacy law applies, you may have rights in relation to your personal data.
These may include the right to:
- receive information about how your personal data are processed;
- request access to personal data concerning you;
- request correction of inaccurate or incomplete personal data;
- request deletion of personal data where the applicable requirements are met;
- request restriction of processing;
- object to certain processing, including processing based on legitimate interests;
- receive certain personal data in a structured, commonly used and machine-readable format where the right to data portability applies; and
- withdraw consent at any time where processing is based on consent.
Withdrawing consent does not affect the lawfulness of processing that took place before consent was withdrawn.
Cookie consent can be changed or withdrawn directly through Cookie Settings on Qolorio.
For other privacy requests, contact:
We may request additional information where reasonably necessary to verify that a request genuinely comes from the person concerned. We will not request more information than reasonably necessary for that purpose.
For a cookie-related enquiry, providing your CookieScript consent identifier may help us locate the relevant consent record. Providing such an identifier is not a general condition for exercising your privacy rights.
Under the GDPR, we will normally respond to a valid privacy request within one month. Where permitted by law, additional time may be required for particularly complex or numerous requests. If so, we will inform you within the initial response period.
17. Right to lodge a complaint
If you believe that Qolorio has not handled your personal data correctly, you are welcome to contact us first at:
You also have the right to lodge a complaint with a competent data protection supervisory authority.
Because Qolorio is established in the Netherlands, the Dutch supervisory authority is the:
Autoriteit Persoonsgegevens
(Dutch Data Protection Authority)
Depending on your circumstances, you may also have the right to contact the supervisory authority in another European country, for example in the country where you live or work or where an alleged infringement occurred.
18. Automated decision-making
Qolorio does not currently use personal data to make decisions based solely on automated processing that produce legal effects, or similarly significant effects, concerning individual visitors.
The automated color calculations, palette generation, color analysis and other creative functions available through Qolorio are tool functionality and are not automated decisions about individuals.
19. Changes to this Privacy Policy
We may update this Privacy Policy when Qolorio’s website, tools, technologies, service providers or legal obligations change.
The latest version will be made available on Qolorio.com and the “Last updated” date above will be changed accordingly.
Where a material change affects processing that depends on consent, we will obtain new consent where required.
In particular, this Privacy Policy will be reviewed before or when Qolorio introduces new advertising services, tracking technologies or other functionality involving materially different processing of personal data.
20. Contact
For questions about this Privacy Policy, privacy concerns or requests relating to personal data, please contact:
Qolorio
Website: https://qolorio.com
Email: hello@qolorio.com
Established in: The Netherlands