Privacy Policy

1. Who runs this site

Moodpalette: Lovable build prompts (https://moodpalette-prompts.vikataylor.com) is operated by Vika Taylor, an independent designer and creator, as part of the Vika Taylor studio (vikataylor.com). Contact: vika.taylor.one@gmail.com.

2. What data is collected and why

• Analytics (Google Analytics 4, run through Cloudflare Zaraz): only after you click "Accept" on the cookie banner. Zaraz then runs Google Analytics on Cloudflare's servers, so your browser makes no request to Google, and records pages viewed, referring source, approximate location (a country or region, derived by Google from your IP address, which Google states GA4 does not log or store) and device type, with a random ID kept in a cookie. Used to understand how the page is used. If you decline, nothing is sent to Zaraz and no analytics cookies are set.
• No account, no email. Moodpalette does not ask for, store, or process any name, email, or login. There is no user database.
• Nothing you do on this page is transmitted. This page has no text input and no server-side processing: the prompts are static HTML delivered with the page. The Copy buttons write the prompt text to your device's clipboard and nowhere else.

3. Cookies & local storage

• cfz_google-analytics_v4 (the random analytics ID, one year), cfzs_google-analytics_v4 (page views in the current session) and cf_zaraz_client (Zaraz's working cookie, one year): set by Cloudflare Zaraz for vikataylor.com, only after you click Accept, and HttpOnly, so no page script can read or delete them.
• _zaraz_google_consent_update (localStorage): written by Zaraz after you accept; it holds the consent state passed to Google (analytics allowed, advertising not) and no identifier.
• mp_consent (localStorage, not technically a cookie): remembers your consent choice and the version of this policy you answered, for 180 days or until this policy changes in a way that needs a new answer.

You can change or withdraw your choice at any time with the Cookie settings button, here or in the footer of any page. Withdrawing is as easy as giving consent: declining after you accepted stops the page sending anything to Zaraz at once and deletes the _zaraz_ entry, and from the next page Zaraz does not start at all. The Zaraz cookies are HttpOnly, so they stay until they expire or you clear cookies and site data for vikataylor.com, but nothing on this site reads them while your choice is Decline. The page also deletes leftovers from the earlier set-up: _ga, _ga_*, _gid, _gat* and _gcl_ls.

4. Third-party services

• Cloudflare Zaraz (Cloudflare, Inc., USA) and Google Analytics (Google LLC, USA): analytics, only after you accept. cloudflare.com/privacypolicy, policies.google.com/privacy
• Cloudflare (Cloudflare Inc., USA): hosting and CDN. Cloudflare may temporarily process IP addresses and headers for security and routing. cloudflare.com/privacypolicy
• Fonts are served from this site itself, not from a third party, so loading this page sends your IP address to no one but the host.
• YouTube (Google LLC, USA), and only if you press play on the build video near the end of the home page. Until then the video is a still image served from this site, and nothing is requested from YouTube or Google. Pressing play loads YouTube's player from www.youtube-nocookie.com, the privacy-enhanced embed domain, and the video then streams from Google's servers. From that moment Google receives what any website receives when your browser contacts it: your IP address, browser and device details, and the address of this site as the referring page (the site only, never the page path), which YouTube requires before its player will run. Google states that a view in this privacy-enhanced mode is not used to personalise your YouTube experience or the advertising shown to you outside this site. Inside its own frame the player may still store data in your browser under Google's domains; this site cannot read or remove it. Legal basis: your choice to press play after the notice shown under the player, GDPR Art. 6(1)(a). If you would rather not load the player here, use the Open on YouTube link next to it, which sends the same site address. If the page cannot embed the player, pressing play opens the video on youtube.com in a new tab instead.
• YouTube / portfolio links: the Watch links, the red YouTube button above the footer and the other external links are ordinary links. Clicking one takes you to that site, which has its own privacy policy.

5. Your rights (GDPR / UK GDPR / similar)

If you are in the EU, UK, or any region with similar privacy law, you have the right to:

• Access the data held about you
• Correct it
• Delete it ("right to be forgotten")
• Object to processing or withdraw consent
• Receive a copy in a portable format
• Lodge a complaint with your local data-protection authority

Since the only data tied to you is pseudonymous analytics (and only if you opt in), there is little to act on, but to exercise any of these rights email vika.taylor.one@gmail.com. I will respond within 30 days.

6. CCPA / California residents

If you are a California resident: I do not sell personal information. You have the right to know what is collected and to request deletion: same process as above.

7. Children

This site is not directed at children under 16 and does not knowingly collect their data.

8. Changes to this policy

Updates to this page are dated at the top.