Privacy Policy

There is nothing to sign up for, so the only personal information we hold is what you choose to send. That is usually an email — when you report a problem with a tool, point out an error in an article, or send a copyright or legal notice. We keep those messages, and the address they came from, for as long as it takes to deal with them and to keep a record of what was decided.

Like any website, our hosting provider records technical information about requests: IP address, approximate location derived from it, browser and device type, the pages requested, the referring page, and the time of the request. This is used to keep the site running and secure, and to diagnose faults.

Three things are stored in your browser's local storage and are readable only by this site. They are never transmitted to us:

• Your colour and gradient history, shown on the Colours History page.
• Your light or dark theme preference.
• Your cookie and privacy choice, so you are not asked repeatedly.

Clearing site data in your browser removes all three. There is no copy on our side to delete.

An image you drag into the eyedropper is read directly by your browser and drawn to a canvas so individual pixels can be measured. It is never uploaded, never stored, and is discarded as soon as you remove it or close the tab.

Advertising is what keeps the colour tools on Upgrab free and unmetered. Ads are supplied by Google AdSense.

• Third-party vendors, including Google, use cookies to serve ads based on your previous visits to this and other websites.
• Google's use of advertising cookies lets it and its partners serve ads to you based on your visits to this site and other sites on the internet.
• Vendors and ad networks may set and read cookies on your browser, or use web beacons and your IP address, as a result of serving ads here.
• Some ads may be personalised to your interests; others are contextual, based only on the page content or a general location.

Your advertising choices

• Manage or switch off personalised advertising from Google at https://myadcenter.google.com.
• Read how Google uses information from sites that use its services at https://policies.google.com/technologies/partner-sites.
• Opt out of many other participating vendors through the Digital Advertising Alliance at https://optout.aboutads.info, or the European equivalent at https://www.youronlinechoices.eu.

For visitors in the EEA, the UK and Switzerland we use a Google-certified consent management platform to collect consent before any advertising cookie is set, and no advertising script is requested until you have accepted. If you decline, no ad script loads at all.

We use Google Analytics 4 to understand which pages people reach and where they struggle, so we can decide what to fix and what to write next. It records things like the pages viewed, how long a visit lasted, the referring source, an approximate city-level location derived from IP, and the browser and device type.

Google Analytics 4 does not log or store IP addresses by default, and Google processes this data as our service provider. Analytics cookies are only set after you accept them.

You can opt out of Google Analytics on every website you visit by installing Google's opt-out browser add-on at https://tools.google.com/dlpage/gaoptout, or you can decline analytics cookies here at any time using the privacy settings control on this page.

You can change your choice at any time. This control reads your current setting and updates it immediately.

We do not sell personal information for money. Information is shared only with the providers needed to run the site — our host and CDN, and the advertising and analytics providers named above — each under its own privacy policy. We also disclose information where the law requires it, or to protect the rights and safety of the site and its users.

Using advertising and analytics cookies may count as 'sharing' personal information for cross-context behavioural advertising under some United States state laws. See the section on US state privacy rights below.

If you are in the United Kingdom or the European Economic Area, you have the right to ask what personal data we hold about you, to have it corrected or erased, to restrict or object to how it is used, and to receive it in a portable form. You also have the right to complain to your national supervisory authority — in the UK, the Information Commissioner's Office.

Our lawful bases are: your consent, for advertising and analytics cookies, which you can withdraw at any time using the control above; and our legitimate interest in keeping the site available, secure and working correctly, for server logs.

To exercise any of these rights, email contact@upgrab.online. We may need to ask for enough information to be confident who we are dealing with before we act on a request.

If you live in California, Colorado, Connecticut, Virginia or another state with comparable law, you have the right to know what personal information is collected and why, to have it deleted or corrected, to opt out of targeted advertising and of the sale or sharing of personal information, and not to be treated worse for exercising any of those rights.

We do not sell personal information for money. To opt out of sharing for targeted advertising, decline advertising cookies using the control above. We honour the Global Privacy Control (GPC) signal: when your browser sends one, we treat it as an opt-out for that browser without you having to do anything else.

Where you are in a US state with an applicable opt-out right and you decline advertising cookies, we enable restricted data processing with Google, which limits how your data is used for advertising purposes.

Upgrab is a general-audience tool and is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, email contact@upgrab.online and we will delete it.

The site is served from a content delivery network with servers in many countries, so a request may be handled outside your own. Where a provider transfers personal data out of the UK or EEA, that transfer relies on the safeguards that provider has put in place, such as standard contractual clauses.

The site is served over HTTPS, and access to any correspondence we hold is limited. No method of transmission or storage is completely secure, and we cannot promise absolute security. We keep email correspondence for as long as needed to deal with the matter and to keep a record of it; server logs are kept for a short period for security and debugging.

If this policy changes, the revised version appears on this page with a new date at the top. Material changes will be flagged on the site.

Questions about this policy, or a request about your data: contact@upgrab.online