Privacy and cookies

Last updated: 4 November 2026

Data controller

4Colors. Registered office, VAT number and contact details: being updated.

What data we process and why

Browsing. Like any website, the server receives your IP address and technical request data, to run and protect the site. Legal basis: legitimate interest (GDPR art. 6.1.f).

Language. The IP address is used to work out your country and show the site in the right language. The result is kept for up to 30 days with an encrypted fingerprint of the IP, not the IP itself.

Management area. For site managers: username, email and encrypted password. For anyone trying to sign in: the IP address of failed attempts, deleted after about 15 minutes, to stop abuse.

The site has no visitor forms, no sign-up, and no profiling or marketing.

Cookies and browser storage

__Host-4c_session: technical cookie, only for people signing in to the management area. Lasts 7 days.

fc-theme and fc-ck: preferences saved in your browser, namely the chosen theme and the closed cookie notice. They are not sent to the server.

We use no analytics, advertising or profiling cookies, so no consent is needed. You can delete this data from your browser settings.

Who receives the data

Hostinger: hosting and content delivery provider.

country.is: external service that may receive the IP address to determine the country. It may operate outside the European Union.

Your rights

You can ask for access, correction, deletion, restriction and portability of your data, and object to processing (GDPR arts. 15–22), by writing to the controller’s contact details. You can also complain to your data protection authority.