Privacy Policy
Last updated: July 11, 2026
PeekCSS is operated by Leon Grass, an individually-run business based in Switzerland. This policy explains what data we handle and why. We built PeekCSS to be privacy-first: the browser extension does its work locally, and we collect as little as possible.
Who is responsible
The data controller for the personal data described below is Leon Grass, who operates PeekCSS (peekcss.com) as an individually-run business in Switzerland. You can reach the controller any time at [email protected].
What the extension collects
Nothing about the pages you inspect ever leaves your device. Inspection, palette extraction, and typography analysis run entirely in your browser. The optional Pro font-pairing feature downloads Google Fonts’ public catalog from fonts.google.com after you explicitly grant access — no information about you or the pages you visit is transmitted. The extension contacts our servers only to validate your license token, which returns your plan tier and nothing else.
What the website collects
- Account data: your email address and, optionally, your name — to create and secure your account.
- Authentication data: a session cookie to keep you logged in, and, if you use Google or GitHub sign-in, the basic profile (email, name) those providers return.
- Billing data: handled by Paddle, our merchant of record (see below). We receive your subscription status and the last four digits of your card — never full card details.
- License data: the tier associated with your account and the license token issued to you.
Payment processing
Payments are processed by Paddle.com Market Ltd, which acts as the merchant of record and the data controller for transaction and tax data. Please see Paddle’s own privacy policy for how they handle payment information. We never see or store your full card details.
Legal basis & your rights
We process account and license data to provide the service you signed up for (contractual necessity). Under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU GDPR, you have the right to access, correct, export, or delete your personal data. You can delete your account and all associated data yourself from your account page, or email [email protected].
Cookies
We use a single strictly-necessary session cookie to keep you logged in. We do not use advertising or cross-site tracking cookies.
Data retention
We keep account and license data for as long as your account exists. When you delete your account, we delete the associated personal data. Paddle retains transaction records as required by tax law.
Contact
Questions about this policy? Email [email protected].