Privacy

Colours by Lee is an independent editorial resource operated by Lee. Privacy and correction enquiries can be sent to [email protected].

If you subscribe, the site collects the email address you provide so occasional Colours by Lee updates can be sent. Email addresses are encrypted at rest in protected local site storage. A separate keyed value prevents duplicate subscriptions without storing another readable copy of the address.

Subscriber details may be exported by an authenticated administrator to an email delivery or customer relationship provider, such as Mailchimp, Brevo, HubSpot or another chosen provider. That provider will process the information under its own terms and privacy policy.

When optional analytics has not been accepted, the site can receive limited first-party events such as the requested path, content identifier, event time, broad referrer category, internal search text and result count. These events contain no analytics visitor ID or session ID, do not use fingerprinting, and are not stitched into a persistent journey. Search text is length-limited; please do not enter personal information into site search.

If you accept analytics, the browser creates one random pseudonymous visitor identifier and one inactivity-session record in local storage. The visitor identifier expires after 90 days by default. A session ends after 30 minutes without activity, is shared across tabs in the same browser, and can therefore describe approximate journeys, repeat visits and returning-browser behaviour. It does not identify a named person or connect activity across devices.

Rejecting or withdrawing analytics clears those optional identifiers and stops future journey tracking. The site remains fully usable. Earlier aggregate statistics cannot necessarily be isolated or removed. Use Privacy / Cookie Settings to change your choice.

A strictly necessary first-party preference cookie remembers the analytics choice and its version for 180 days. Security sessions support forms, accounts and administration. The optional theme preference is stored only when you choose a theme.

Google Search Console supplies server-side, aggregated search-performance information and current URL indexing information. Google Analytics 4 supplies supplementary, aggregated acquisition reports such as landing page, channel, source and medium, sessions, users and engagement totals. These read-only reporting sources help assess editorial content alongside the site's first-party analytics. Imported reports are stored locally in aggregate form, do not include individual user profiles or advertising identifiers, and are not used to request indexing or submit URLs to Google.

If you accept analytics, Google Tag Manager may load Google Analytics 4 and send measurement events to Google. Depending on the configured tags, these can include pages viewed, referral and campaign information, approximate location derived from an IP address, and browser, device and interaction information. Google may set or access analytics identifiers for this purpose and processes that information under Google's Privacy Policy. Rejecting or withdrawing analytics prevents optional Google analytics tags from being used. GA4 is supplementary; the site's first-party analytics remain authoritative for on-site journeys and are controlled by the same analytics choice.

Community accounts store email, a secure password hash, verification state, public profile choices, saved book references, accepted terms/privacy versions and submission/moderation records. Account identity is not linked to analytics visitor IDs. Public profiles expose only the chosen display name, optional approved social links, joined date, selected book collection and approved public completions.

Original uploads and pending or rejected derivatives are held in private storage. Images are decoded, validated, randomly named, cropped and re-encoded; metadata including EXIF/GPS is removed from public WebP derivatives. Original quarantined uploads are scheduled for removal after 30 days. Deleting an account anonymises private identity, revokes tokens and makes its profile/contributions non-public while moderation records are retained for safety and legal administration.

Raw anonymous-basic events are normally retained for 90 days and raw consented events for 180 days; scheduled maintenance enforces configurable limits. Aggregated analytics may be retained longer because it does not contain browser identifiers. Search Console, GA4 aggregate reports, community transactions, moderation and newsletter records have separate operational or legal retention needs.

You may ask what personal information is held, request correction or deletion where applicable, withdraw analytics consent, unsubscribe, or raise a concern. Reasonable identity verification may be required before acting on an account request.

This notice may be updated when newsletter delivery, analytics or service providers change. Contact [email protected] for privacy enquiries or content corrections.