Skintonic

Privacy Policy

Last updated: October 24, 2026

Skintonic LLC ("Skintonic," "we," "us") is the data controller for this website. This policy explains what happens to your information when you use it. The short version: your photo never leaves your device, we never see your payment details, and the measurement we run — one analytics tool and four advertising tags — never receives your photo or your results.

1. Your photo

Your photo is never uploaded to us, and we never see or store it. When you add a photo, it is read directly into your browser and drawn onto an HTML canvas on your own device. Sampling your skin, eye and hair color reads pixel values from that canvas locally. No copy of the image is transmitted to Skintonic or to anyone else.

The photo is held in memory only, for as long as the page is open. It is deliberately excluded from anything saved to your browser's storage, so closing or reloading the tab discards it. If you would rather not use a photo at all, manual color pickers produce the same analysis.

2. What is stored on your device

Skintonic keeps a small amount of information in your browser's localStorage. This stays on your device, is not transmitted to us, and can be cleared at any time through your browser settings:

Because this lives only in your browser, we cannot see it, and clearing your browser data removes it. We hold no accounts and no server-side database of users.

3. Payment

The full report is a one-time $9 USD purchase. Payment is processed by PayPal, which collects your payment and billing information directly. We never see, receive or store your card details.

When you pay, our server asks PayPal to confirm that the order was genuinely completed and for the correct amount, before unlocking your report. That check returns only the order reference, the amount and the currency — no card number, and no personal details about you.

PayPal processes your payment as an independent controller under its own terms and privacy policy, which we do not control. See PayPal's privacy statement.

4. Analytics and advertising measurement

We run one analytics tool and four advertising tags. This section lists all of them. An earlier version of this policy said the Meta and TikTok pixels were the only tracking on the site and that there was no Google Analytics; that is no longer accurate, and the full list is below.

None of them ever receives your photo or your color analysis. That processing is entirely separate and stays on your device exactly as described in sections 1 and 2. No image, no sampled color, no palette and no result is included in anything sent to any of these companies, and adding them changed nothing about how any of it works.

What they do receive is the page you are on, your IP address, your browser and device type, and a small number of events: a page view, the moment you start the photo step, the moment your free result appears, the moment you open the checkout, and a completed purchase. The free-result event carries the name of your color season as a word — for example "Soft Autumn" — and nothing else about you. The purchase event carries the amount paid and the payment order reference, so a sale can be matched to the right transaction; it carries no card details, no name, no address and no email.

To do this, these tools set cookies in your browser. Meta sets a first-party _fbp cookie, TikTok a first-party _ttp cookie, Google Analytics _ga and a per-property _ga_… cookie, the Google Ads tag a _gcl_… cookie, and Pinterest its own cookies. Meta, TikTok, Google or Pinterest may link this activity to your account with them if you have one. These tags run only on skintonic.app itself and are not loaded on local or preview builds.

Each of these companies acts as an independent controller for the data it receives, under its own terms:

You can also stop all of them at once: an ad blocker, your browser's tracking protection, or blocking third-party cookies in your browser settings will prevent these tags loading. The site works normally without any of them — the color analysis itself runs entirely in your browser and does not depend on them.

5. Third-party services your browser contacts

The site is hosted on Netlify, which necessarily receives standard web-server request data — including your IP address — in order to serve pages to you. Your browser also loads some assets from third-party providers. Those providers can see your IP address and basic request information as a consequence of serving the file, but they receive nothing about your photo or your analysis:

The share buttons are ordinary links. Nothing is sent to X, Facebook or WhatsApp unless you click one, and what is shared is the text and link shown to you at the time.

6. Email

If you email us at skintonicapp@gmail.com — for a refund, a technical problem, or a question — we hold that correspondence in order to answer you, and for as long as needed to resolve it. We do not add you to a mailing list, and there is no mailing list to add you to.

7. Reviews

If you leave a review, what you submit — your rating, your review text, any first name or initials, and your email if you give one — is stored with Netlify, who host this site, through their form service. Your email is optional and is used only to reply to you; it is never added to a mailing list. Reviews are not published on this site automatically, and nothing is shown publicly unless you tick the box asking us to and then only the first name you gave. You can ask us to delete a review at any time by emailing skintonicapp@gmail.com.

8. Your rights

Because we hold no accounts and no server-side profile of you, most data about your use of Skintonic is already entirely under your control: clearing your browser data erases your analysis, your unlock status and your theme preference.

For anything we do hold — email correspondence, and the payment records PayPal makes available to us as the merchant — you may request access, correction or deletion by emailing skintonicapp@gmail.com. Depending on where you live, you may have rights under the GDPR, the UK GDPR or the CCPA; we will honour those requests regardless of where you live. Note that we may be required to retain transaction records for tax and accounting purposes even after a deletion request.

9. Children

Skintonic is not directed at children. You must be at least 16 years old to use the Service, or the applicable age of consent in your jurisdiction.

10. Changes to this policy

If this policy changes, the date at the top of this page changes with it. If we ever begin collecting something we do not collect today — analytics, accounts, or anything else — we will say so here before it starts, not after.

11. Contact

Skintonic LLC — skintonicapp@gmail.com.

See also our Terms of Service and our Refund Policy.