Privacy Policy

This Privacy Policy explains what personal data Spectral Colors collects, why, and what your rights are. Spectral Colors is an independent studio operated by JM Roque da Silva (trading as Lux Splendore), based in the Netherlands. For anything in this policy, contact us at[email protected].

We are the "data controller" for the data described here. Spectral Colors is registered with the Dutch Chamber of Commerce (KVK) under number 76428931, VAT number NL003084277B70.

What we collect

Account information

When you create an account we store your email address and, optionally, yourname. Your password is handled and stored securely (hashed) by our authentication provider — we never see it.

Purchases

Payments are processed by Stripe. We do not receive or store your full card number — Stripe handles that. We do receive your email, name, the products you bought, the amount, and a payment reference, which we use to fulfil your order and keep a purchase record.

Licenses & software activation

We store the license keys issued to you and which products they unlock. When you activate a product on a device, we store a one-way hashed device identifier (a fingerprint we cannot reverse to identify your computer) and an optional device label. This is used only to enforce the per-license device limit and to let you manage your devices.

Emails

We send you transactional emails — license keys, receipts, password resets and account confirmations — through Resend and our authentication provider. These are necessary to operate your account and deliver what you purchased.

Technical data

Our host, Cloudflare, processes basic technical information (such as IP address and request details) to deliver the site securely and prevent abuse. We do not run advertising or cross-site tracking. The site uses your browser's local storage to keep you signed in, remember your motion preference, and remember your analytics preference.

Optional analytics

Google Analytics is loaded only after you choose Allow analytics. If you allow it, Google Analytics may use first-party cookies to measure page views, product call-to-action clicks, checkout starts and completed purchases. Purchase events contain the product, currency, value and a Stripe transaction reference; they never contain your email address, license key or payment details. Advertising storage, Google Signals and ads personalisation are disabled.

You can refuse analytics without losing any site or store functionality, and change your choice at any time using the Analytics preference control. Learn more abouthow Google uses information from sites that use its services.

Why we use it (legal bases)

• To perform our contract with you — creating your account, processing payment, issuing licenses, and providing downloads and support.
• Our legitimate interests — securing the service, preventing fraud, and enforcing license activation limits.
• Legal obligations — keeping records required for tax and accounting.

Who we share it with

We only share data with the service providers that help us run the store, each acting on our behalf:

• Stripe — payment processing
• Supabase — database & account authentication
• Resend — transactional email delivery
• Cloudflare — website hosting & email routing
• Google Analytics — optional, consent-based website and conversion measurement

We never sell your personal data. Some of these providers may process data outside the European Economic Area under appropriate safeguards (such as EU Standard Contractual Clauses).

How long we keep it

We keep your account, license and order data for as long as your account is active and as long as we need it for the purposes above or to meet legal and tax obligations. You can ask us to delete your account at any time (subject to records we must retain by law).

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent where processing is based on consent.

To exercise any of these, email [email protected]. You also have the right to lodge a complaint with your local data protection authority — in the Netherlands, the Autoriteit Persoonsgegevens.

Children

Our products and store are not directed at children under 16, and we do not knowingly collect their data.

Changes to this policy

We may update this policy from time to time. When we do, we'll change the "last updated" date at the top of this page. Material changes affecting your account may also be announced by email.