Privacy policy

Last updated: 08.08.2026

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

2. Your screenshots are not uploaded

This is the most important point on this page, so it comes first. When you select a screenshot of an Instagram profile, that image is read and analysed entirely inside your own browser. The colour extraction runs locally on your device. The image is never transmitted to our servers or to any third party, is not stored by us, and is not used for any other purpose.

The image stays in your browser's working memory only for as long as the page is open. Closing or reloading the tab discards it. The resulting artwork is likewise generated on your device; when you download it, the file is written directly by your browser.

Because no transmission takes place, this step involves no processing of personal data by us — including any personal data that may be visible in the screenshot itself, such as names, profile pictures or the content of posts.

3. Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the site, the provider's servers automatically record information that your browser transmits, in what are known as server log files:

• the requested page or file
• browser type and version
• operating system in use
• referrer URL
• date and time of the request
• IP address

This data is not merged with other data sources and is not used to identify you personally. The legal basis is Art. 6(1)(f) GDPR: Our legitimate interest lies in the secure, reliable and technically error-free provision of the website.

Technical data is retained only for as long as necessary for the respective operational and security purposes and is subsequently deleted or anonymised, subject to any statutory retention obligations.

Data processing and international transfers. Vercel Inc. is based in the United States and its primary processing facilities are located in the United States. Where Vercel processes personal data on our behalf, such processing is governed by Vercel's Data Processing Addendum, where applicable. Transfers of personal data from the EEA to the United States and other countries without an EU adequacy decision are safeguarded in particular by the European Commission's Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

4. Analytics (Plausible)

To understand how this site is used, we use Plausible Analytics, a privacy-focused analytics service provided by Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia.

Plausible does not use cookies and does not store any information on your device. It does not collect personal data and does not track visitors across websites or over time. All measurement data is aggregated: page views, referrer, browser, operating system, device type and country, the latter derived from the IP address without the IP address itself being stored. Your IP address is never written to disk and no persistent identifier is created, which means individual visitors cannot be identified or recognised on a return visit.

In addition to page views, we record a small number of anonymous interaction events — for example that a demo was viewed, that the checkout dialog was opened, or that a price was shown. These events carry no personal data. They tell us which steps of the flow people complete, which is how we decide what to build next.

Data is processed on servers within the European Union. Because Plausible neither sets cookies nor otherwise accesses information stored on your device, consent under § 25 TDDDG is not required and this site therefore does not show a cookie banner. The legal basis for the processing is Art. 6(1)(f) GDPR — our legitimate interest in the needs-based design and statistical analysis of our website. You can object to this processing at any time (see section 9).

Plausible's own privacy information is available at plausible.io/privacy.

5. Local storage on your device

This site does not use advertising or tracking cookies. It does store two small technical values in your browser's local and session storage, which remain on your device and are never transmitted to us:

• Price variant (ss-price-variant, local storage): while we are testing pricing, each visitor is randomly assigned one of several prices. Storing it means you see the same price on every visit instead of a different one each time. It contains a number and nothing else, and it persists until you clear your browser storage.
• View mode (session storage): remembers that you opened the page in a particular display mode, so it survives a reload. It is deleted when you close the tab.

Neither value identifies you. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a consistent presentation of the site). You can delete both at any time through your browser settings, and prevent them being set by blocking storage for this site; the site remains usable if you do.

6. Email sign-up for the launch notification

If you enter your email address to be notified when the full version launches, we process that address in order to send you the launch announcement and information about the launch discount, as described at the point where you enter it.

Legal basis. Processing is based on your consent under Art. 6(1)(a) GDPR and § 7(2) no. 2 UWG. Consent is given by ticking the consent box and submitting the form. You can withdraw your consent at any time with effect for the future — by clicking the unsubscribe link in any email we send you, or by contacting us at the address in section 1. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Scope. We store your email address and the date of your sign-up. We do not pass it to third parties for their own purposes and we do not use it for anything other than the purpose described above.

Processor. The form is handled by Formspree, Inc., 1007 N Orange St, 4th Floor, Wilmington, DE 19801, USA, which processes the submitted data on our behalf. Formspree states that it complies with the GDPR and relies on the EU Standard Contractual Clauses (SCCs) for transfers of personal data as a data processor. Formspree’s services are hosted on Amazon Web Services infrastructure in the United States.

This involves a transfer of personal data to the United States. The transfer is safeguarded by the EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

You should be aware that US authorities may, under certain circumstances, have access rights to personal data stored in the United States and that the level of data protection may not be equivalent to that in the EU in every respect.

Retention. We keep your email address until you withdraw your consent or until the purpose of the processing no longer applies. In any event, we will delete the address no later than 12 months after sending the launch announcement, unless statutory retention obligations require us to retain it for longer.

7. The Instagram username field

Creating your artwork does not require a username — it is read from your screenshot alone. If you choose to add your username afterwards to put it on the shareable picture, it is used only to label that picture in your browser. It is not sent to us, not stored on any server, and not used to look anything up on Instagram. It disappears when you close the page.

8. Payments

Payment is not yet active on this site. The purchase dialog currently records only that a purchase was attempted, as anonymous analytics, and then offers the email sign-up described in section 6. No payment details are collected, and no payment service provider receives any data from this site.

9. Your rights

Under the GDPR you have the following rights in respect of your personal data:

• Access (Art. 15) — to know what data we hold about you.
• Rectification (Art. 16) — to have inaccurate data corrected.
• Erasure (Art. 17) — to have your data deleted.
• Restriction of processing (Art. 18).
• Data portability (Art. 20) — to receive your data in a machine-readable format.
• Objection (Art. 21) — to object to processing based on legitimate interests, including the analytics described in section 4.
• Withdrawal of consent (Art. 7(3)) — at any time, with effect for the future.

To exercise any of these rights, contact us at jjklangbehn@gmail.com. Exercising them is free of charge.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, place of work or the place of the alleged infringement. The authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI)
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany

Website: https://datenschutz.hessen.de/

10. Right to object — Art. 21 GDPR

Where processing is based on Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. If you object, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where your data is processed for direct marketing purposes, you have the right to object at any time without giving reasons, after which the data will no longer be used for that purpose.

11. Data security

This site uses TLS encryption (HTTPS) for all connections, which you can recognise by the lock symbol in your browser's address bar. This prevents the data you transmit from being read by third parties in transit.

12. Changes to this policy

We will update this privacy policy when changes to the service or to the law make it necessary. The current version is always available on this page; the date at the top shows when it was last changed.