Data on This Site

Last updated: 17 September 2026

What this page is: a short, origin-specific summary of what mood-palette-generator.vikataylor.com itself does with your data. The full privacy policy, terms of use and cookie policy cover this site and every other site in the network, and they live on the legal hub: Privacy Policy, Terms of Use, Cookies and Local Storage. Where this summary and those documents differ, the documents govern.

1. Who runs this origin

Moodpalette (mood-palette-generator.vikataylor.com) is operated by Vika Taylor, an independent designer and creator, as part of the Vika Taylor studio (vikataylor.com). Contact: vika.taylor.one@gmail.com.

2. What this origin stores on your device

mp_consent (localStorage, not a cookie): your banner choice, when you made it and the version of the privacy policy you answered, as {choice:'granted'|'denied', ts:<epoch ms>, v:'2026-09-17'}. Kept for 180 days, or until that policy changes in a way that needs a new answer; then you are asked again. It is stored whichever way you answer, because remembering "no" is the only way to honour it.
cfz_google-analytics_v4, cfzs_google-analytics_v4 and cf_zaraz_client (cookies set by Cloudflare Zaraz, which runs Google Analytics for this site): set only after you press Accept, never before. The first holds the random analytics ID and lasts a year, the second counts page views in the current session, and the third is Zaraz's own working cookie and lasts a year. They are set for vikataylor.com, so every site in the network shares them, and they are HttpOnly, so no script on a page can read or delete them. While your choice here is Decline, this site does not run Zaraz, so nothing here reads them.
_zaraz_google_consent_update (localStorage): written by Zaraz after you press Accept. It holds the consent state passed to Google, analytics allowed and advertising not, and no identifier. This site's script deletes it if you decline.
Leftovers from the earlier set-up, until September 2026: the cookies _ga, _ga_*, _gid and _gat* and the storage entry _gcl_ls. This site's script deletes any it finds.

That is the whole inventory for this origin. There is nothing else in localStorage, no sessionStorage, and no cookie set by this site's own code. The palettes you generate are not saved anywhere, on your device or off it: reload the page and they are gone.

3. Who this origin talks to

Cloudflare (Cloudflare, Inc., USA): the host. Asking for any page gives Cloudflare your IP address and the usual request metadata, because that is how the page reaches you.
Cloudflare Zaraz and Google Analytics 4 (Cloudflare, Inc. and Google LLC, USA): only after Accept. Pressing Accept makes this site's own /consent.js start Zaraz, which is served from this site under /cdn-cgi/zaraz/ and runs Google Analytics on Cloudflare's servers, so your browser makes no request to Google. Zaraz tells Cloudflare the page address and title, the referring page, your screen and window size, colour depth, character set and time-zone offset. Cloudflare's servers pass Google the page view, this site's events, your browser's user-agent, your IP address and a random ID kept in a cookie, with the signal that analytics is allowed and advertising is not. Google uses the IP address to estimate an approximate location and states that Google Analytics 4 does not log or store IP addresses. Cloudflare acts as a processor, as it does for the hosting. Before Accept, and after Decline, this site sends nothing to Zaraz.
YouTube (Google LLC, USA), and only if you press play on the build video near the end of the home page. Until then the video is a still image served from this origin, and nothing is requested from YouTube or Google. Pressing play loads YouTube's player from www.youtube-nocookie.com, the privacy-enhanced embed domain, and the video then streams from Google's servers. From that moment Google receives what any website receives when your browser contacts it: your IP address, browser and device details, and the address of this site as the referring page (the site only, never the page path), which YouTube requires before its player will run. Google states that a view in this privacy-enhanced mode is not used to personalise your YouTube experience or the advertising shown to you outside this site. Inside its own frame the player may still store data in your browser under Google's domains; this site cannot read or remove it. Legal basis: your choice to press play after the notice shown under the player, GDPR Art. 6(1)(a). If you would rather not load the player here, use the Open on YouTube link next to it, which sends the same site address. If the page cannot embed the player, pressing play opens the video on youtube.com in a new tab instead.
Nobody else, before or after. The two typefaces are served from this origin, so no request goes to Google merely to render type. The still of the build video is served from this origin too. There is no CDN, no social widget and no third-party script of any other kind on these pages. The YouTube links in the header and the footer, and the red YouTube button above the footer, are ordinary outbound links: nothing loads from YouTube until you follow one.

4. The generator itself

The colour engine is rule-based and runs entirely in your browser. There is no model, no API key and no server call: the description you type is turned into a palette by JavaScript on this page, and it is never transmitted anywhere or stored. When you copy a hex code or a whole palette, it goes to your device's clipboard and nowhere else. There is no account, no login and no email field on this site, so there is no user record to hold.

One thing to be exact about: if you have pressed Accept, Google Analytics runs through Zaraz on this page as on any other, and it records the visit itself: page viewed, referring source, approximate location and device type. It does not receive what you typed into the generator: the text never leaves the page, and it is not part of the page address that Zaraz reads.

5. Changing your mind

You can change or withdraw your choice at any time with the button, here or in the footer of every page. Withdrawing is exactly as easy as giving consent, which is the point. Declining after you accepted takes effect at once, without a reload: the page stops sending anything to Zaraz and deletes the _zaraz_ entry, and from your next page here Zaraz does not start at all. The Zaraz cookies are HttpOnly, so no page can delete them; they stay until they expire or you clear them, and nothing here reads them while your choice is Decline. Clearing cookies and site data for vikataylor.com in your browser removes mp_consent and the analytics cookies too.

6. Your rights, and the full documents

Access, correction, deletion, objection, withdrawal of consent, portability and the right to complain to your data-protection authority are set out in full, with the legal bases and the regional sections (GDPR, UK GDPR, CCPA), in the network privacy policy:

Privacy Policy: what is processed, why, on what basis, and how to exercise your rights.
Cookies and Local Storage: the complete inventory across all the sites, and how the banner works.
Terms of Use: what you may do with the palettes, code and text published here.

To exercise a right, or to ask anything at all, email vika.taylor.one@gmail.com.

Note: this page is a plain-language summary of one origin's data practices, not legal advice, and it deliberately states no retention period it cannot source. The retention periods, including the 14 months set for Google Analytics, are in the full policy.

← Back to Moodpalette