The most important fact about PaintGouache and your privacy: your photos are processed entirely in your browser and are never uploaded to our servers. We could not look at them if we wanted to. This policy explains the small amount of data we do collect, why, and the rights you have. It is written to meet California’s privacy laws (the CCPA/CPRA and CalOPPA).
Your photos and projects never leave your device
Everything the tool does — reducing colors, ordering layers, computing mixing recipes, generating printable sheets — runs locally in your browser. So that your work survives a reload, PaintGouache saves your projects (including the photo) in your browser’s own storage on your device. We hold no copy. You can delete a project inside the tool, or remove everything at once by clearing this site’s data in your browser settings.
What we do collect
- Usage analytics (PostHog): pages viewed, features used (for example “exported a PDF”), and general device and browser information. We do not use session recording — we do not record your screen, what you type, or the content of your photos.
- Standard server logs (Google Cloud): our hosting infrastructure logs requests — IP address, timestamp, and browser user-agent — as virtually every website does, for security and reliability.
- Email you send us: if you write to one of our contact addresses, we receive what you send. That is the only way the product ever learns your name or email — there are no accounts and no sign-up forms.
Why we collect it
We use analytics to understand which features help painters and which need work, and server logs to keep the service secure, reliable, and available. We do not use your data for advertising, and we run no third-party advertising trackers.
Who we share it with
Only the service providers that run the site, acting on our instructions: Google Cloud (hosting) and PostHog (analytics). We do not sell or share personal information within the meaning of California law, and we have no advertising partners. We may disclose information if the law requires it.
Retention
Usage analytics is kept only as long as we need it to understand product trends. Server logs rotate on our hosting provider’s standard schedule (typically about 30 days). Your photos and projects are retained nowhere except your own device, under your control.
Your California privacy rights
Under the CCPA/CPRA, you have the right to:
- Know what personal information we collect and how we use it.
- Delete the personal information we hold about you.
- Correct inaccurate personal information.
- Opt out of the sale or sharing of personal information — noting that we do not sell or share it in the first place.
- Not be discriminated against for exercising any of these rights.
To exercise any right, email privacy@paintgouache.com. Because we collect so little — and none of it under your name — the honest answer to many requests will be that we hold nothing tied to you; but the rights are yours and the inbox is monitored.
Global Privacy Control and “Do Not Track”
The Global Privacy Control (GPC) signal is a request to opt out of the sale or sharing of personal information. We do not sell or share personal information, so on this site there is nothing for a GPC signal to opt out of — the protection it requests is already everyone’s default here, whether or not their browser sends the signal. We do not respond to browser “Do Not Track” signals, for which there is no common standard; we also do no cross-site tracking for such a signal to switch off.
Children’s privacy
PaintGouache is a general-audience painting tool. We do not knowingly collect personal information from children — as described above, we collect almost none from anyone.
Changes and contact
If we change this policy, we will update the effective date at the top of this page. Questions about privacy at PaintGouache? Email privacy@paintgouache.com.