OM Color Lab

1. What We Collect

We collect the following categories of personal information:

Identifiers: Username, email address, display name, and IP address.; Provided by you at registration. IP address is collected automatically. Retained until you delete your account.
Profile information: Bio, profile photo, and social media links (Instagram, Flickr, X, website).; Provided by you on your account page. Retained until you delete your account.
User-generated content: Recipe titles, descriptions, camera settings, sample images, EXIF metadata, community gallery photos, comments, and ratings.; Provided by you when submitting recipes or photos. Retained until you delete the content or your account.
Contact information: Name, email address, and message text.; Provided by you via the contact form. Delivered by email only—not stored in the site database.
Internet activity: Pages visited, time on site, general location (country/region), and browser type.; Collected by Google Analytics 4, only with your consent. Retained per Google’s data retention settings.
Device & interaction data: Browser fingerprint and interaction patterns.; Collected by Cloudflare Turnstile for bot detection on forms. Retained per Cloudflare’s privacy policy.

2. How We Use Your Data

We use the data we collect to:

Operate the site and display your recipes to the community
Respond to contact form messages
Improve the site based on aggregated, anonymized analytics (only with your consent)
Protect the site from spam and abuse

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Cookies and Local Storage

Essential. WordPress uses session cookies to keep you logged in. We also store your dark mode preference in your browser's local storage. These are necessary for the site to function and do not track you.

Analytics (optional). If you click "Accept All" on the cookie banner, we load Google Analytics 4 (measurement ID: G-9PL8NBF450), which sets cookies to measure site usage. If you choose "Essential Only," analytics cookies are never loaded.

Cookie consent. Your cookie preference is stored in local storage as omcl_cookie_consent so we remember your choice on future visits.

You can change your cookie preference at any time by clearing your browser's local storage for this site, or by clicking "Cookie Settings" in the site footer.

4. Third-Party Services

We use the following third-party services:

Google Analytics 4 — anonymized usage analytics, loaded only with your consent. Google Privacy Policy
Google Fonts — serves the typefaces used on this site. Your browser sends a request to Google's servers, which may log your IP address. Google Fonts Privacy
Cloudflare Turnstile — protects forms from spam and bots. Cloudflare may collect device and interaction data for bot detection. Cloudflare Privacy Policy

5. Your Rights

All users have the right to:

Access your data — view your profile and recipes on your My Account page
Correct your data — edit your profile and recipes at any time
Delete your account and data — use the delete option on your My Account page
Export your data — contact us and we will provide a copy of your data
Withdraw consent for analytics cookies at any time via your browser settings or by clearing local storage

If you are in the European Economic Area, you also have the right to lodge a complaint with your local data protection authority.

6. Information for California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information.

Sale and Sharing of Personal Information

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. Because we do not sell or share personal information, no opt-out mechanism is required, but you may still contact us with any concerns.

Your California Privacy Rights

In addition to the rights listed in Section 5, California residents have the right to:

Know what personal information we collect, the sources, our business purpose for collecting it, and the categories of third parties with whom we share it
Delete your personal information, subject to certain exceptions
Correct inaccurate personal information
Opt out of the sale or sharing of personal information — we do not sell or share your data, so this right is already satisfied
Limit the use of sensitive personal information — we only use your email address (a sensitive identifier under CPRA) for account operations and to contact you; we do not use it for profiling or advertising
Non-discrimination — we will not deny you services, charge you different prices, or provide a different quality of service because you exercised any of these rights

Categories Disclosed to Third Parties

In the preceding 12 months, we have disclosed the following categories of personal information to third-party service providers for a business purpose:

Internet activity data — shared with Google (Analytics) when you consent to analytics cookies
IP addresses — transmitted to Google (Fonts), Cloudflare (Turnstile), and your hosting provider as part of normal web requests

No personal information has been sold or shared for cross-context behavioral advertising.

How to Submit a Request

To exercise any of these rights, contact us or email [email protected]. We will verify your identity before processing your request and respond within 45 days. You may also designate an authorized agent to submit a request on your behalf.

Financial Incentives

We do not offer financial incentives or price differences in exchange for the collection, retention, or sale of your personal information. Creating a free account gives you access to site features but does not constitute a financial incentive program under the CCPA.

7. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy:

Account data and profile information — kept until you delete your account
Recipes, photos, and user-generated content — kept until you delete the content or your account
Contact form messages — delivered by email only; not stored in the site database
Analytics data — retained per Google’s data retention settings
Rate-limiting and spam-prevention logs — stored as short-lived WordPress transients (typically under 24 hours)

8. Children

OM Color Lab is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

9. Changes to This Policy

We may update this Privacy Policy as the site evolves. The "Last updated" date at the top reflects the most recent revision. Continued use of OM Color Lab after updates means you accept the revised policy.

10. Contact

For privacy-related questions or data requests, reach us at [email protected] or through the contact page.