Last updated: 2026-08-05
Last updated: 5 August 2026
Essuman Creations, LLC ("we", "our", or "us") operates the Color Season Matcher browser extension (the "Extension"). This policy describes what we collect, what stays on your own computer, who we share information with, and what happens when you delete your account.
We do not sell your personal information. We do not track your browsing, and the Extension does not read the pages you visit.
Because this is a browser extension, it is worth being explicit about what it never touches:
The eyedropper uses your browser's own built-in EyeDropper feature. When you activate it, you pick one pixel and the browser returns that single colour value to the Extension. Nothing else about the screen is read, and nothing happens unless you deliberately start it.
The following is kept in your browser's extension storage. It stays on that device, we cannot read it remotely, and it is removed if you uninstall the Extension or clear its data:
| What | Why |
|---|---|
| Your sign-in tokens | So you stay signed in between sessions |
| Your colour season | So the Extension can compare colours against it |
| Your most recent result | So reopening the popup shows what you last checked |
| A copy of your remaining daily uses | So the count displays instantly without waiting for the network |
| A short-lived flag after checkout | So the Extension can notice when a purchase completes |
Because your colour season is currently kept in the Extension's own storage, it does not automatically appear on another browser, computer, or browser profile — you would set it again there — and it is lost if you uninstall the Extension or clear its data.
Account — your email address and a securely hashed password, held through our authentication provider, Supabase. We never store your password in a readable form.
Subscription status — which plan you are on, and identifiers linking your account to your payment record with Stripe.
Usage information — how many free analyses you have left today and when that window started, and counts of the analyses you run, including which colour seasons the results fell into. We do not record the specific colours you check, or the pages or items you check them against.
Communications preferences — whether you have opted in to marketing email, when, on which screen, and which version of this policy was shown to you at the time. If you later withdraw consent, we record that too rather than erasing the earlier record, because the record of a past consent is what evidences that an email we already sent was properly authorised.
Diagnostic information — when something fails, we record the error, the operation involved, and your user identifier so the fault can be traced. Our error-monitoring provider, Sentry, receives a user identifier but not your email address.
Payments are processed by Stripe. We never receive or store your card number, expiry, or security code. We store the identifiers Stripe gives us so we can tell whether your plan is active and manage cancellations and refunds. Stripe's handling of your payment information is governed by Stripe's own privacy policy.
Service email — password resets, receipts, subscription notices, and account-deletion confirmation — is sent because you have an account and cannot be unsubscribed from while the account exists.
Marketing email is sent only if you have specifically opted in. Existing accounts created before we introduced this choice receive no marketing email at all until they actively opt in; we do not enrol anyone retroactively. You can withdraw consent at any time in the Extension or via the unsubscribe link in any marketing email, and doing so never affects service email — the two run on separate systems for that reason.
Email is delivered by Postmark, which processes your address and the message in order to send it.
The Extension declares the following permissions:
| Permission | What it allows | What we use it for |
|---|---|---|
| `storage` | Saving data in the browser's extension storage | Everything in section 2 — sign-in, your season, last result, daily count, checkout flag |
| `activeTab` | Temporary access to the current tab when you invoke the Extension | Not used. No page content is accessed |
| `scripting` | Running scripts in a page | Not used. The Extension runs no code in your pages |
We are removing the two unused permissions from the Extension's next published update so that what it requests matches what it does.
The eyedropper itself needs no extension permission — it is a standard browser feature available to any web page, and it only returns the single pixel you choose.
| Provider | Purpose | What they receive |
|---|---|---|
| Supabase | Authentication and database | Your email address, hashed password, plan, usage count |
| Stripe | Payments | Your payment details, which go directly to Stripe |
| Postmark | Email delivery | Your email address and message content |
| Sentry | Error monitoring | A user identifier and error details — not your email |
We do not sell your personal information and do not share it for advertising. The Extension shows no advertising.
You can delete your account from the account page in the Extension. Deletion is permanent and we cannot restore it.
Deleted immediately: your saved data on our servers, your usage counters, your subscription linkage, and your login itself — the account record is permanently removed, not merely deactivated. If you have an active recurring plan, we cancel it with Stripe first, so you are not billed again.
Your locally stored data — including your colour season — is on your own computer. Deleting your account does not reach into your browser; uninstall the Extension or clear its data to remove that.
What happens to your session: your sign-in is revoked at deletion. An access token already issued to your browser remains technically valid until it expires on its own shortly afterwards; it cannot be revoked earlier by any means our provider offers.
Retained after deletion, and why:
You can see and change your account details in the Extension, delete your account entirely, withdraw marketing consent at any time, and request a copy of your data by contacting us.
Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA, including rights to access, correct, delete, or port your information, and to object to certain processing. Contact us to exercise them. We do not sell personal information.
The Extension is not directed to children under 13, and we do not knowingly collect their personal information. If you are between 13 and the age of majority where you live, a parent or legal guardian must accept our Terms of Service on your behalf before you use it. If we learn we hold information belonging to a child under 13, we delete it.
We operate from the United States and our providers process data in the United States and other countries. Where information is transferred out of your region, we rely on our providers' standard contractual protections.
We may update this policy. We will change the "Last updated" date above and, where the change is significant, tell you in the Extension.
Email: [email protected]
Essuman Creations, LLC