JsonBox
← Back to Home

Privacy Policy

Last Updated:

Privacy Policy

Last updated: February 6, 2026

JsonBox ("JsonBox", "we", "us", or "our") operates the online image color picker service (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service, and the choices you have.

Our Core Promise: Your Images Are Never Uploaded

JsonBox's core feature (picking colors from images) runs entirely in your browser. When you upload an image or paste an image URL to pick colors:

  • Image files are never uploaded to our servers. Images are processed locally in your browser using the FileReader and Canvas APIs.
  • Remote image URLs are loaded directly in your browser and are subject to the image server's cross-origin (CORS) policy; images that block cross-origin access cannot be read. No image data is ever routed through our servers.
  • We do not store, analyze, or view the images you use for color picking.

1. Information We Collect

1.1 Account and Profile Information (If You Register)

We do not currently offer account registration. If we introduce accounts in the future, we may collect:

  • Email address
  • Name and profile details you choose to provide
  • Authentication data from OAuth providers (e.g., Google, GitHub)

1.2 Usage and Device Data

We may collect usage information such as:

  • IP address, browser type, device identifiers
  • Pages viewed, actions taken, and time spent
  • Diagnostic logs and performance data

1.3 Local Storage

  • Color history is stored in your browser's localStorage and is never uploaded to our servers.
  • Theme and language preferences are also stored locally or in cookies.

1.4 Cookies and Similar Technologies

We use cookies and similar technologies to operate the Service and remember your preferences. See our Cookie Policy for details.

2. How We Use Information

We use the information we collect to:

  • Provide and operate the Service (image color picking)
  • Improve and maintain product performance and reliability
  • Detect and prevent abuse, fraud, or security issues
  • Communicate with you about updates and security notices (where applicable)

If you are in the EEA or UK, we rely on the following legal bases:

  • Contract - to provide the Service
  • Legitimate interests - to improve, secure, and operate the Service
  • Consent - for optional features such as marketing or analytics cookies
  • Legal obligations - to comply with applicable laws

4. Data Retention

We retain logs and other personal data only as long as necessary to provide the Service and meet legal obligations. Because images are never uploaded, there is no image retention. You can clear your color history in your browser at any time.

5. International Transfers

Your information may be processed in countries where we or our service providers operate, which may have different data protection laws than your country. We take steps to ensure appropriate safeguards for such transfers.

6. Data Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit (TLS) and access controls. However, no method of transmission or storage is 100% secure.

7. Your Rights

7.1 All Users

  • Access, correct, or delete your personal information
  • Request a copy of your data
  • Clear your local color history (in your browser settings)

7.2 EEA/UK Residents (GDPR)

  • Object to or restrict processing
  • Withdraw consent at any time

7.3 California Residents (CCPA/CPRA)

  • Know what personal information we collect
  • Request deletion of personal information
  • Opt out of the sale of personal information (we do not sell personal information)

8. Service Providers

We use trusted service providers to operate the Service, which may include:

  • Hosting providers (e.g., Vercel)
  • Analytics and monitoring (e.g., Sentry)
  • Authentication providers (Google, GitHub — if accounts are introduced in the future)

These providers are authorized to process personal information only as needed to provide their services to us.

9. Children's Privacy

The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

Our Service may contain links to third-party sites. We are not responsible for the privacy practices of those sites.

11. Changes to This Privacy Policy

We may update this policy from time to time. We will post the updated policy and revise the "Last updated" date.

12. Contact Us

If you have questions or requests regarding this Privacy Policy, contact us at:

By using JsonBox, you acknowledge that you have read and understood this Privacy Policy.