Privacy Policy

1. Information We Collect

When you create an account, we receive basic profile information from your sign-in provider via Clerk. Typically your name, email address, and profile photo. We also store:

• Palettes, gradients and mesh gradients you save, create or submit, and their tags
• Items you bookmark
• Your display name, bio and avatar, if you set them
• Fonts you upload to the Color Studio (stored privately)
• Technical logs: when a request fails, the error, the page and the time, kept briefly to fix bugs — and anonymous page-speed measurements. These carry no cookies and are not linked to your account.
• If you use Tinta from an AI assistant (the MCP server at /mcp): for each request, which tool ran, how long it took, whether it worked, and the client's user-agent and protocol version. Not your questions, colors, code or image links. For a palette from an image, Tinta fetches the image at the link it is given, has Cloudflare shrink it, samples its colors and discards it; the resulting colors are kept in Cloudflare's cache for a day so the same link is not fetched again. Tinta itself uses the requesting IP address only in memory, to rate-limit requests (through Claude, that address is Anthropic's, not yours); Cloudflare's request logs (section 3) apply as for the website. The assistant itself handles your conversation under its own privacy policy.

2. How We Use Your Data

We use your data to run Tinta: keeping your library and bookmarks in sync, processing your submissions, showing your display name on items you contributed, and fixing errors. We do not use it for advertising, we do not profile you, and we do not sell it to anyone.

3. Third-Party Services

Tinta is built on a small set of trusted third-party infrastructure:

• Clerk. Handles authentication and session management
• Supabase. Stores platform data (database in Seoul, South Korea)
• Cloudflare. Hosts and serves the site from its global network, and holds request logs

Each of these services has its own privacy policy. We only share the minimum data needed for them to function.

4. Cookies & Local Storage

Clerk sets cookies to keep you signed in. Local storage remembers small preferences, such as whether you have seen the Color Studio tour. There are no tracking, analytics or advertising cookies: page-view counts come from Cloudflare Web Analytics, which sets no cookies, stores nothing on your device and does not follow you across sites.

5. Data Retention

We keep your data while your account is active. When you delete your account (Profile → Account settings), your profile, avatar, fonts, bookmarks, drafts and unapproved items are deleted right away. Items that were already approved stay in the public library with your name removed. Error logs are kept for at most 30 days.

6. Your Rights

You can see, edit and delete your content in My library at any time. Under Malaysia's Personal Data Protection Act (and the GDPR, if you are in the EU) you can also ask for a copy of your data, a correction, or removal of approved items you contributed — email us and we will respond within 30 days. Tinta is run by Haikal Akif, who is responsible for this data.

7. Changes to This Policy

If we make significant changes to this policy, we will update the "last updated" date at the top. Continued use of Tinta after changes means you accept the updated policy.

8. Governing Law

This policy is governed by the laws of Malaysia. Any disputes arising from your use of Tinta will be subject to the jurisdiction of Malaysian courts.

9. Contact

Questions about this policy? Reach out at haikalakif17@gmail.com .