Privacy policy
Effective 24 September 2026. Last updated 24 September 2026.
This page says what the Pigmo extension records, where that is kept, and what this website and our shop hold about you. The short version: the extension sends nothing anywhere, and the only personal data we hold is what it takes to sell you a licence key and to count visits to this site.
1. Who we are
Pigmo is published by GRAN Software Solutions GmbH, Am Hamburger Bahnhof 3 c/o Glazewski, 10557 Berlin, Germany, registered at Amtsgericht Berlin Charlottenburg under HRB 245105 B and represented by its managing directors Grzegorz Glazewski and Dusan Odalovic. We are the controller for the data described on this page.
You can reach us at hello@gransoftware.de, or by post at the address above.
2. The extension: nothing leaves your machine
Pigmo picks a color from any page, grabs the palette of a page, and keeps what you save. You pick, you save, you copy. Pro adds saved palettes, copying a whole palette at once, restoring a backup, and the code and image exports.
The extension makes no network request at all. Not while picking, grabbing, saving or exporting, and not when you enter a licence key. There is no Pigmo account and no Pigmo server, so nothing you save can leave your machine. There is no telemetry, no crash reporting and no analytics in it, and nobody at Pigmo can see your colors.
What it records
- Your colors and palettes. What you save, with the name you give it.
- Your settings. The theme, and the format you copy colors in.
- A licence key, if you paste one.
- Page colors during a grab. Read from the page in your current tab, after your click, to build the palette. They are only kept if you save them.
- A snapshot while picking. Picking a color takes a picture of the visible part of the current tab, after your click, so the magnifier can show you the pixels under the cursor. It stays in memory in that tab and is dropped when the pick ends. It is never stored and never sent.
The permissions it asks for
| Permission | Why |
|---|---|
activeTab |
Read the tab you are picking from, only after you click the Pigmo button. |
storage |
Keep your colors and settings in this browser. |
scripting |
Draw the picker and its magnifier on the page you clicked. |
It asks for no site access at install and no access to your browsing history, and it has no host permissions at all.
Where it is kept
All of it sits in your browser profile on your own device, in the extension’s own storage (chrome.storage.local). It is not synced to your Google account and it never reaches another device. Backup files are files you save yourself, and they stay wherever you put them. A backup does not contain your licence key.
How to delete it
Delete a color or a palette in Pigmo and it is gone. Remove the key with “Remove licence” in the Licence panel. Uninstall the extension and everything it stored goes with it. There is no other copy anywhere, because nothing was ever sent to us.
3. Buying Pigmo Pro
You buy on this website, not in the extension. Stripe runs the checkout as the seller of record, so your card and billing details go to Stripe and are handled under Stripe’s privacy policy, at stripe.com/privacy. We never see your card.
What reaches us is that an order was completed, the email address it was placed with, and the plan that was bought. We use that to create your licence key and email it to you.
What we keep
One record per order:
| Data | Why |
|---|---|
| Your email address | To send your key, and to send it again if you lose it |
| The checkout reference, the plan and the number of seats | To trace the sale when you write to us |
| The key we issued, and when we created and sent it | To re-send the same key instead of making a new one |
It is stored with Scaleway in Paris, with a copy in Amsterdam, both in the European Union, encrypted at rest, under a data processing agreement. The email itself goes out through Scaleway’s transactional email service, which handles your address and the message to deliver it and keeps delivery logs for a short time. The function that mints the key logs the checkout reference and whether it succeeded, for 30 days. It never logs your email address or your key.
Why we may keep it, and for how long
We need that record to deliver what you bought (Art. 6(1)(b) GDPR). Keeping it afterwards, so we can replace a lost key, answer a support question and prove the sale, is our legitimate interest (Art. 6(1)(f) GDPR).
We keep it for as long as the licence can be used, which is indefinitely because a key never expires, and at least for the ten years German tax law requires for records of a sale. Ask us to erase it earlier and we will, except where we must keep proof of the purchase. Erasing the record does not end your licence, but after it is gone we can no longer send you your key again, so keep the original email.
We do not use your address for marketing.
4. Visiting this website
The extension is one thing and this website is another. Here is what the site does.
Visit counts
This site counts its visits with umami, an open-source counter we run ourselves on the same servers as this site, at Hetzner in Germany. The counting script is a file on this site, not one fetched from somewhere else, and the only request it makes off this origin is its own count, sent to stats.pigmo.app, which is our own analytics host.
Each visit records the page address, the page you came from, the page title, the language and screen size your browser reports, and the browser, system and rough region worked out from your IP address. The IP address itself is not stored: it is turned into a one-way value with a secret that changes every day, so a visit today cannot be linked to one yesterday. If your browser sends a Do Not Track signal, nothing is counted at all.
No cookie is set and nothing is written to your device, which is why there is no consent banner: § 25 TDDDG asks for consent before something is stored on or read from your device, and this counter does neither. The counting rests on our legitimate interest in knowing whether these pages are read (Art. 6(1)(f) GDPR). Once the day’s secret is gone, the counts lead back to nobody, so there is nothing in them to look up, correct or delete for you.
The theme you choose
If you switch between the light and dark theme, your browser remembers that choice in its own local storage, on your device. It is only the word “light” or “dark”, it is never sent to us, and clearing your browser data removes it. § 25 TDDDG allows this without consent, because it is storage you asked for by using the switch.
Server logs
This site runs on servers we operate at Hetzner Online GmbH in Germany. Our web server keeps technical access logs: the IP address, the time, the page requested and the browser type. We use them to run and protect the site and we keep them for 30 days, then they are deleted. Legal basis: Art. 6(1)(f) GDPR, our interest in a secure and working website.
What the site does not do
No cookies, no advertising, no third-party scripts and no embedded content. The fonts are served from this site.
5. Your rights
For any personal data we hold about you, you can ask us to tell you what we hold and give you a copy, to correct it, to erase it, to restrict what we do with it, and to hand it over in a portable format. You can object to any processing we base on legitimate interest (Art. 15 to 21 GDPR). Write to hello@gransoftware.de and we answer within a month. For an order record, write from the address you bought with.
You do not have to give us any data to use the extension. To buy a licence we need an email address to send the key to, and nothing else. We make no automated decisions about you and we build no profiles.
For data held by Stripe as its own controller, please contact Stripe.
You can also complain to a data protection authority. The one responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin, Germany. You may instead complain to the authority where you live.
6. Who receives data
- Stripe: the checkout and the payment, as its own controller.
- Hetzner Online GmbH, Germany: the servers this website and its visit counter run on, as our processor under a data processing agreement.
- Scaleway SAS, France: the order record and sending your licence email, as our processor under a data processing agreement.
We do not sell data, and nothing on our side leaves the European Union. Stripe describes its own international transfers in its privacy policy.
7. Changes and contact
We update this page when the extension or the site changes what it handles, and the date at the top changes with it. If a change affects what the extension records, we say so in the release notes for that version.
Questions about this policy or about your data go to hello@gransoftware.de, or by post to GRAN Software Solutions GmbH, Am Hamburger Bahnhof 3 c/o Glazewski, 10557 Berlin, Germany.