Skintonic

Privacy Policy

Last updated: September 19, 2026

Skintonic LLC ("Skintonic," "we," "us") is the data controller for this website. This policy explains what happens to your information when you use it. The short version: your photo never leaves your device, we never see your payment details, and the only tracking we run is an advertising pixel that never receives your photo or your results.

1. Your photo

Your photo is never uploaded to us, and we never see or store it. When you add a photo, it is read directly into your browser and drawn onto an HTML canvas on your own device. Sampling your skin, eye and hair colour reads pixel values from that canvas locally. No copy of the image is transmitted to Skintonic or to anyone else.

The photo is held in memory only, for as long as the page is open. It is deliberately excluded from anything saved to your browser's storage, so closing or reloading the tab discards it. If you would rather not use a photo at all, manual colour pickers produce the same analysis.

2. What is stored on your device

Skintonic keeps a small amount of information in your browser's localStorage. This stays on your device, is not transmitted to us, and can be cleared at any time through your browser settings:

Because this lives only in your browser, we cannot see it, and clearing your browser data removes it. We hold no accounts and no server-side database of users.

3. Payment

The full report is a one-time $9 USD purchase. Payment is processed by PayPal, which collects your payment and billing information directly. We never see, receive or store your card details.

When you pay, our server asks PayPal to confirm that the order was genuinely completed and for the correct amount, before unlocking your report. That check returns only the order reference, the amount and the currency — no card number, and no personal details about you.

PayPal processes your payment as an independent controller under its own terms and privacy policy, which we do not control. See PayPal's privacy statement.

4. Analytics and tracking

We use one advertising tool: the Meta Pixel. It runs on every page of this site and reports to Meta (Facebook and Instagram) so we can measure whether our advertising works — how many people arrive, how many begin checkout and how many complete a purchase. It is the only tracking on the site: there is no Google Analytics, no Cloudflare Web Analytics, no Plausible, and no other advertising pixel.

The Pixel never receives your photo or your colour analysis. That processing is entirely separate and stays on your device exactly as described in sections 1 and 2. No image, no sampled colour, no palette and no result is included in anything sent to Meta, and adding the Pixel changed nothing about how any of it works.

What the Pixel does send is the page you are on, your IP address, your browser and device type, and three events: a page view, the moment you open the PayPal checkout, and a completed purchase. The purchase event includes the amount paid and the PayPal order reference, so a sale can be matched to the right transaction; it carries no card details, no name and no address. To do this the Pixel sets cookies — including a first-party _fbp cookie in your browser — and Meta may link this activity to your Facebook or Instagram account if you have one.

Meta acts as an independent controller for the data it receives, under its own terms. You can review and limit this through your Meta ad preferences and off-Facebook activity settings, and read Meta's privacy policy. An ad blocker or your browser's tracking protection will stop the Pixel loading, and the site works normally without it.

5. Third-party services your browser contacts

The site is hosted on Netlify, which necessarily receives standard web-server request data — including your IP address — in order to serve pages to you. Your browser also loads some assets from third-party providers. Those providers can see your IP address and basic request information as a consequence of serving the file, but they receive nothing about your photo or your analysis:

The share buttons are ordinary links. Nothing is sent to X, Facebook or WhatsApp unless you click one, and what is shared is the text and link shown to you at the time.

6. Email

If you email us at skintonicapp@gmail.com — for a refund, a technical problem, or a question — we hold that correspondence in order to answer you, and for as long as needed to resolve it. We do not add you to a mailing list, and there is no mailing list to add you to.

7. Your rights

Because we hold no accounts and no server-side profile of you, most data about your use of Skintonic is already entirely under your control: clearing your browser data erases your analysis, your unlock status and your theme preference.

For anything we do hold — email correspondence, and the payment records PayPal makes available to us as the merchant — you may request access, correction or deletion by emailing skintonicapp@gmail.com. Depending on where you live, you may have rights under the GDPR, the UK GDPR or the CCPA; we will honour those requests regardless of where you live. Note that we may be required to retain transaction records for tax and accounting purposes even after a deletion request.

8. Children

Skintonic is not directed at children. You must be at least 16 years old to use the Service, or the applicable age of consent in your jurisdiction.

9. Changes to this policy

If this policy changes, the date at the top of this page changes with it. If we ever begin collecting something we do not collect today — analytics, accounts, or anything else — we will say so here before it starts, not after.

10. Contact

Skintonic LLC — skintonicapp@gmail.com.

See also our Terms of Service and our Refund Policy.