Last updated: October 23, 2026
This policy explains what personal data colorlib.com collects, why, who we share it with and what rights you have. It covers colorlib.com, including the blog at colorlib.com/wp/ and our template store.
Who we are
colorlib.com is operated by Divilab LLC, which is responsible for your personal data on this website (the “data controller”). You can contact us about privacy at [email protected] or through our contact form.
What we collect and why
When you browse the site
Our server and our content delivery network, Cloudflare, process your IP address, browser type and the pages you request. We use this to deliver the site, keep it secure and block abusive traffic. Server logs are kept for a limited time and then deleted.
We use Google Analytics (loaded through Google Tag Manager) to understand which pages people visit and how they find us. Google Analytics uses cookies and receives information such as your approximate location, device and the pages you view. More information is in how Google uses data from sites that use its services.
When you buy a template
To process your order we collect your name, email address, billing country and, if you give it, your VAT number. We use these to deliver your downloads, provide your account, send receipts and invoices, and meet tax and accounting rules. Payments are handled by PayPal, including card and Apple Pay payments made through PayPal. We never see or store your full card details. PayPal’s own privacy statement applies to the payment.
When you sign up for emails or free downloads
If you subscribe to our newsletter, or enter your email to receive a free download, we store your email address, the date, your IP address, your country and the consent you gave. You confirm your subscription by email before we send anything else. Every email has an unsubscribe link, and you can also ask us to remove you. Newsletters are sent from our own Sendy installation through Amazon Simple Email Service.
Some forms are protected by Cloudflare Turnstile, which checks that a real person is submitting them. It processes information about your browser for that purpose only.
When you contact us or comment
Messages sent through our contact form reach us by email, with the name, email address and any file you attach. We use them only to answer you and keep them only as long as needed for that.
If you leave a comment, we store your name, email address, website (optional), the comment, your IP address and browser details, which help us fight spam. A scrambled version of your email address (a hash) may be sent to Gravatar to show your profile picture if you have one; see the Gravatar privacy policy. Approved comments and the name you entered are public.
Our support forum at colorlibsupport.com is a separate site with its own account system.
Cookies
We use cookies and similar storage for these purposes:
- Necessary: keeping you logged in to your account, your cart and checkout, remembering your cookie choice, security checks by Cloudflare, and remembering that you have closed a popup.
- Analytics: Google Analytics, to measure visits and how people use the site.
- Comments: if you choose to, your name, email and website are saved in your browser for one year so you do not have to type them again.
You can change your cookie choice at any time through the cookie settings link or banner, and you can delete cookies in your browser.
Links, affiliate links and embedded content
Many links on Colorlib lead to other websites, and some are affiliate links (see our affiliate disclosure). When you follow one, that website may set its own cookies to record that you came from us. We do not receive your personal details from it. Embedded content such as videos behaves as if you had visited the website it comes from, and that website may collect data about you.
Who we share data with
We do not sell your personal data. We share it only with service providers that help us run the site, and only as much as they need:
- Hetzner (web hosting) and Cloudflare (content delivery, security and bot protection)
- Google (analytics and tag management)
- PayPal (payments)
- Amazon Web Services (newsletter delivery) and SendGrid (account and order emails)
- CookieYes (cookie consent banner)
- Gravatar (comment profile pictures)
We may also disclose data when the law requires it, or to a buyer if the business is sold, in which case this policy would continue to apply to your data.
Some of these providers are based in, or transfer data to, the United States. Where the GDPR applies, these transfers rely on the safeguards it requires, such as the EU-US Data Privacy Framework or Standard Contractual Clauses.
How long we keep data
- Orders and invoices: as long as tax and accounting laws require.
- Your account: until you ask us to delete it. Order records we must keep by law are kept separately.
- Newsletter: until you unsubscribe.
- Comments: indefinitely, unless you ask us to remove them.
- Contact messages: only as long as needed to answer and follow up.
Your rights
You can ask us to give you a copy of your personal data, correct it, delete it, restrict or object to how we use it, or send it to you in a portable format. Where we rely on your consent, such as for the newsletter, you can withdraw it at any time. To use any of these rights, email [email protected]. We will reply within one month.
If you are in the European Economic Area or the United Kingdom and believe we have not handled your data properly, you can complain to the data protection authority in your country.
Security
The whole site uses HTTPS encryption, administrator accounts are protected with strong passwords, and we keep our software up to date and take regular backups. If a data breach affects your personal data, we will notify the relevant authorities and you as the law requires.
Changes to this policy
We update this policy when the services we use or the way we handle data change. The date at the top shows the latest update.