CalHue Privacy Policy

Information handled by the extension

CalHue runs on Google Calendar pages in your browser. It reads the structure of those pages to place your background behind the calendar, color the grid lines and add its palettes to the calendar color menu, and the page’s background color, so that the veil and the extension popup follow Calendar’s light or dark theme. It does not read the titles, times, descriptions or guests of your events.

CalHue also reads:

The names and identifiers of the calendars in Calendar’s sidebar, to offer them as a target when you add event labels. A calendar identifier can contain an email address.
When you ask it to add labels or set a calendar’s color: Google’s own menus and dialogs for that task, including the names of the labels already in the chosen calendar, so that it can avoid duplicate names, and the calendar’s color afterwards, to confirm that it was saved.

When you choose, drop or paste a background image in the extension popup, CalHue reads only that image. It decodes the image inside the extension, and scales it down and converts it to JPEG when needed. Photo metadata such as location and camera details is removed before the image is saved. CalHue can generate event colors from your background image; this also happens inside the extension. CalHue does not gain access to other files on your device.

When CalHue is installed or updated while Google Calendar is already open, it starts itself in those Calendar tabs, with the same access as described here.

Earlier versions. Earlier versions of CalHue colored single events themselves. To do so they read event and calendar identifiers, displayed event titles, event dates and times and recurrence-related information on Google Calendar pages, could load an event’s editing page in a hidden frame within Google Calendar to read its time zone without saving an edit, and kept the colors you chose for events in your Chrome profile. None of this was sent to us. Updating to the current version removes these records, as described below.

Changes CalHue makes in your Google account

CalHue writes to your Google account only when you ask it to, and only through Google Calendar’s own interface in your browser. It does not use Google’s APIs and does not ask for access to your Google account.

Event labels. When you add a palette to Google, CalHue opens the chosen calendar’s settings in your Calendar tab, adds one label per color in Google’s Labels dialog, saves it, and returns to the page you were on. It only adds labels; it never changes or removes existing labels, and never edits your events.
Calendar color. When you pick a CalHue color in a calendar’s color menu, CalHue sets it through Google’s custom color dialog for that calendar.

Google stores these changes like any change you make yourself, under Google’s own policies. Labels are visible to you and to people who can make changes to that calendar.

Information stored locally

CalHue uses extension storage in your Chrome profile to save:

Your background images, each with a small preview copy, and your appearance settings: veil, blur, which part of the image shows, and grid line color and opacity.
Saved themes: each theme’s name, its background image and settings, and which theme is currently applied.
Palette names and colors, which preset palettes are shown, the popup page it was last on, whether its one-time welcome and update tips have been closed, and when this version was installed or updated, with whether its one-time invitation to rate CalHue or send feedback has been closed.
The names of the event labels CalHue has added, listed by calendar identifier, to warn you about duplicate names.
If you enter a license key: the key, a randomly generated installation identifier, the activation identifier, the license status and when it was last checked.
If your installation was updated from an early version of CalHue: a local record that unlocks Pro for that installation, and whether its notices have been shown. This record is not sent to our servers or Creem and is removed when you uninstall CalHue.
The result of a background image that was still being processed when the popup closed, until it is shown.

While Chrome is open, CalHue also keeps a list of which tabs have Google Calendar open, with each page’s light or dark theme; it is discarded when the browser closes. If you leave a Calendar page before a calendar color was saved, CalHue keeps a temporary note in that page’s session storage so that it can tell you the color was not saved.

Updating from an earlier version. Earlier versions saved event colors and related records, such as event and calendar identifiers, in your Chrome profile. When you update, CalHue moves your background and palettes into the storage described above, keeps the colors you had set on events as a palette without the event information, and deletes the earlier records, including the earlier installation identifier, which is never sent.

CalHue does not use Chrome Sync to synchronize these settings. It does not create a CalHue account or upload this extension data to a developer-operated server, except for the license verification described below. Browser-profile backups or other software on your device are outside CalHue’s control.

Purpose and network activity

The extension uses this information only to provide its calendar appearance features. Your background, grid line colors and themes are local visual changes, visible only in the Chrome profile where CalHue is installed.

The CalHue extension has no analytics, advertising SDK, or automated crash-reporting service. Its feature code is packaged with the extension. The extension’s only request to a zojro server is license verification, described below. It does not send your calendar data, images, palettes, themes or usage information to the developer. Without a license key, CalHue sends nothing.

The popup links to CalHue’s Chrome Web Store page and to an email address for feedback. CalHue sends nothing when you use them: a rating is handled by the Chrome Web Store, and an email by your mail program.

Purchases and license keys

CalHue’s free features don’t send anything to us. If you use CalHue Pro with a license key:

Checkout happens on Creem, our Merchant of Record. Creem collects your payment details, email address and billing information under its own privacy policy. We receive order information from Creem (such as your email address, the purchase and the license key) to provide the license, refunds and support.
When you enter a license key in CalHue, the extension sends the license key and a randomly generated installation identifier to a zojro server, which activates it with Creem. About once a week, and when you check or deactivate the license, it sends the key and the activation identifier to verify it. No calendar data, event information or images are sent. The server passes these requests to Creem without keeping a log of them.
A license can be active on up to 3 devices. Uninstalling CalHue does not free a device slot; deactivate the device in CalHue first, or contact hi@zojro.com.
When a purchase completes, Creem notifies our server. We store an encrypted record of that purchase’s checkout, order, transaction, customer and product identifiers for 30 days, so that a refund can be matched to the exact purchase and its license.

To protect the license and refund services from abuse, Cloudflare, our hosting provider, processes the connection IP address. Our server converts the address into a one-way hash before using it for short-lived rate-limit counters. These counters are not analytics, and we do not add IP addresses to license, purchase or refund records or request logs.

Refund requests

You can request a refund on the refund page, linked from the extension popup and the Terms. The page asks only for your purchase email address. It uses no analytics, and does not save your email, session or orders in your browser.

Before an email is sent, the page runs Cloudflare Turnstile, a security check that tells people from automated abuse. Turnstile loads only on the email request step, not when you open a verification link. It processes signals from your browser and connection, such as your IP address and browser details, as described in Cloudflare’s Turnstile privacy addendum. Our server sends Cloudflare only the result token of the check to confirm it, not your email address.
We send a verification link to that address through Resend, our email delivery provider, which processes the address and the message under its own privacy policy. Before sending, we store the address encrypted with a one-use link that expires after 15 minutes. To limit repeated emails, we keep short-lived counters keyed by one-way hashes of the address and of your IP address; they expire within a day.
Once you verify the link, the page holds an encrypted session for up to 30 minutes in its memory. With it, our server looks up your Creem customer record and your CalHue purchases by that email address, and shows recent orders with their date, amount and refund status. We do not store this list.
When you confirm a refund, our server checks the order with Creem and asks Creem to refund it.
Once Creem confirms the refund, we email a confirmation to your purchase email address through Resend. It lists the purchase time, the Creem order identifier, the refunded amount, the refund record number and the last four characters of the refunded license key, so that you can keep it as your refund record.

Refund records

For each refund, whether requested on the refund page or handled through Creem, we look up the related transaction, checkout and customer at Creem so that the license from that exact purchase can be disabled, and not another purchase by the same customer. We store a record with the purchase email address, the refund, order, transaction, checkout and customer identifiers, the refund status, amount and currency, and the license keys of that purchase; for a refund requested on the refund page, also the purchase time and the page’s language, which are used for the confirmation email. Records are encrypted and stored on Cloudflare, and used only to complete the refund, disable the refunded license and answer refund questions.

Because Creem cannot disable a refunded license automatically, our server emails zojro at hi@zojro.com through Resend when a refund is confirmed or needs review. The email contains the Creem order identifier, the refunded amount, the refund record number and the last four characters of the license key, which is enough to find and disable the license by hand; it does not contain your email address or the full key.

The details of a record are deleted 30 days after the refund has been handled, leaving only an unreadable identifier that prevents duplicate records. Every record is deleted within 180 days of the refund. Records held by Creem and Resend, and emails you send us, are kept separately.

The developer does not receive or sell the calendar information and images processed locally by the extension, and does not use them for advertising, credit decisions or unrelated purposes. CalHue’s use of user data complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.

The purchase and refund information described above is shared only with Creem, Resend and Cloudflare as needed to provide licenses and refunds and to protect them from abuse.

If you choose to contact support, the developer receives the contact details and message contents you send, including any attachments you include. They are used to respond to your request. Please avoid sending private calendar details or background images unless necessary for your request.

Retention and your choices

Backgrounds, palettes, themes, settings and the list of added label names remain in your Chrome profile until you change or remove them, or until the extension is uninstalled.

In the extension popup you can replace or remove the background image, restore Google’s grid lines, edit or delete your palettes, hide preset palettes, and rename or delete saved themes. Deleting a theme does not change the current appearance. If Pro ends, everything you saved and your current appearance stay in place until you remove them.

Event labels and calendar colors set through CalHue are part of your Google account. Change or remove them in Google Calendar, like any label or color you set yourself; uninstalling CalHue does not remove them.

To remove all CalHue extension data, uninstall CalHue from the Chrome profile where it is installed. Disabling the extension is not the same as uninstalling it. Removing CalHue does not delete your Google Calendar events.

Security

CalHue stores its data in your browser’s extension storage and does not add a separate encryption layer to it. Device and browser-profile access controls therefore matter. Google Calendar, and our license and refund services, are accessed over HTTPS. Purchase and refund records on our server are encrypted.

This website

This website, calhue.app, uses Cloudflare Web Analytics to count page views and measure how fast pages load, in aggregate. Cloudflare does not track individual visitors across websites for this. The website has no account, no ads and no advertising trackers, and nothing from the CalHue extension is sent to it.

Changes and contact

This policy describes the current extension, its license and refund service, and this website. If future features change how information is handled, the policy and store disclosures will be updated before those features are released. The effective date will identify the updated policy.

For privacy questions, contact zojro at hi@zojro.com.