~/huecellar/privacy.md
user@huecellar:~$ cat privacy.md

# HueCellar — Privacy

updated:2026-08-20 scope:on-device only tldr:HueCellar does not collect, transmit, or share any personal information. contact:[email protected]

// HueCellar is a colour palette workshop that generates palettes from classic harmony rules, lets you lock and refine individual colours, and shelves the sets you keep in a local cellar on your device.

[01] Information collected // inputs

None. There is no sign-up, no login, and no form that sends anything anywhere. The display name and avatar mark you can set on the Dossier screen are stored locally and are never transmitted.

[02] Local storage // on-device

Kept in OS-level local storage on your device, never uploaded:

  • Saved palettes — in a local SQLite database (huecellar.db): the palette name, its colour values, the harmony rule used, whether it came from the forge or the built-in atlas, the date you saved it, whether you starred it, and any note attached to it.
  • Profile details — in local key/value preferences: the display name and avatar mark you choose, plus counters used for the stats screen (palettes mixed, colour values copied, atlas collections used) and your daily visit streak.
  • Preferences — your default harmony rule, slot count, colour notation (HEX/RGB/HSL), tap-to-copy setting, contrast target, and reduced-motion setting.
  • A first-launch flag — recording that you have seen the walkthrough.

Uninstalling the app deletes every byte.

[03] Permissions // runtime

HueCellar requests no runtime permissions. Its release Android manifest declares no permissions at all — not even internet access — and its iOS build declares no permission usage descriptions, because the app needs none of them. Copying a colour value writes to the system clipboard, and the Share button hands text to the operating system's own share sheet at the moment you tap it. Both actions are initiated by you and neither sends data to us.

[04] Network // egress

HueCellar is fully offline. It makes no network requests, contacts no servers, and includes no networking libraries. The reference palettes in the atlas are bundled inside the app itself, so it behaves identically in airplane mode.

[05] Third parties // vendors

None are integrated. HueCellar contains no analytics SDK, no advertising SDK, no crash-reporting SDK, and no attribution or tracking framework. There are no cookies, web beacons, tracking pixels, or telemetry of any kind. Its open-source dependencies — shared_preferences, sqflite, flutter_riverpod, fl_chart, share_plus, flutter_animate, gap, collection and intl — all run locally and none contact a server on the app's behalf.

[06] Children // coppa/gdpr-k

HueCellar is suitable for all ages. Because it collects no data and transmits nothing, it does not knowingly or unknowingly gather personal information from children under 13 (COPPA) or under 16 (GDPR-K). No parental consent mechanism is required, as there is nothing to consent to.

[07] Your rights // you

All of your data lives on your device and is under your direct control. You can delete individual palettes from the cellar at any time, and uninstalling HueCellar removes the local database and preferences entirely. Because nothing is transmitted, there is no server-side copy to request, export, or erase.

[08] Changes // changelog

If this policy changes, the updated field at the top of this page will be revised. Material changes are also noted in the app's release notes.