Your photos
stay with you.

Tiny Color Lab is independently operated. Questions about this notice or your data can be sent to [email protected].

Creator, camera manager, and accounts

The creator and camera manager process photographs in your browser; photographs are not uploaded to Tiny Color Lab. To troubleshoot camera-manager problems, we log editor actions such as selecting a photo, changing an adjustment, applying a look, saving an edited copy, or starting a backup. These records contain an anonymous browser-session identifier, or your account identifier when signed in, along with limited action details. They do not contain photographs, camera file names, or folder paths. Saving looks requires an account. Saved looks contain names, photo or CS8 filter recipes, source and access information, revision numbers, update times, and approved preview selections. If you save an imported filter, we also keep its exact original file in private storage. We never upload your preview photographs or videos. Imported looks remain private. Eligible sharing links store a fixed recipe snapshot; verified recipients must meet any original-filter access requirements. You can revoke or permanently delete links yourself. Deleting a link does not delete copies recipients have already saved. Photo presets saved to your account contain a name, adjustment settings, an optional look identifier, revision numbers, and update times. They do not contain photographs, file names, or folder paths. We use account email addresses and server-side sessions for sign-in and recovery.

Purchases and downloads

Stripe provides checkout. We keep order identifiers, purchase email addresses, purchased products, and access status to deliver files, handle refunds and disputes, and maintain transaction records. Private files are delivered using short-lived authorized links. Our hosting provider and Cloudflare process the requests needed to serve the site.

Email and free collections

Resend sends account, purchase, and subscription email. Free collection newsletter enrollment requires your choice and email confirmation. For paid purchases, our checkout page records your marketing choice before sending you to Stripe for payment; when you opt in and complete a purchase with the same email address, we add it to the newsletter without a separate confirmation email. We keep the checkout email, consent choice, and confirmation time for this purpose. To provide free Volume 01 downloads, we keep the email address, request and confirmation times, download status, and consent wording version. Free collection download links expire after seven days; paid purchase links expire after 30 days and have a download limit. Unsubscribing from marketing does not revoke access to purchased or confirmed free downloads. Marketing messages include an unsubscribe link. An account or purchase email that exhausts delivery retries remains visible to staff for investigation; after 31 days, its queued recipient, message body, and access-link payload are removed while the failure status remains. You can request a fresh access or recovery link.

Advertising and browser storage

Advertising is confined to the separate public catalog when enabled. The creator and account pages do not run advertising scripts. Browser storage and a preference cookie remember your Dark Room theme choice between visits and across the creator and Looks catalog; you can change it with the header button or clear it with your browser’s site data. It contains no account or photo information. Another browser-local preference remembers newsletter prompt dismissal for 30 days, or interest in joining for one year; it does not contain an email address.

Your choices

You can delete your account from its settings. That removes personal recipes, imported originals, owned sharing links, photo presets, and sessions. Original-file deletion is queued for removal from active storage after a seven-day backup safety window. Encrypted backups follow our hourly, daily, weekly, and monthly retention schedule, with monthly copies retained for up to twelve months. Transaction records may be retained to provide purchase access and meet recordkeeping obligations. You can unsubscribe through any marketing email. For questions, access requests, or deletion requests concerning other records, email [email protected].