Privacy policy
Last updated 29 October 2026 · Unfiltered Intelligence, Inc.
The blush matrix is a place to compare shades. To make it better, and to build the reporting we sell to beauty brands, we record how it gets used. This page says what we collect, what we do with it, who else touches it, and how to ask us to stop.
Who we are
Unfiltered Intelligence, Inc., a Delaware corporation. For anything on this page, email lily@unfilteredintelligence.co.
What we collect
Without an account, as you use the site:
- What you do on the matrix: shades opened, searches, filters, saves, the reactions you tap (liked, disliked, want to try) and the reasons you pick, links you follow to retailers, and how long a shade was open.
- How you got here (the link or referring site), your browser and device type, screen size, and your country. We do not keep your IP address, city or postcode.
- A recording of your screen while you use the site — where you tap and scroll, and what the page showed. Anything you type into a note or a date field is masked in the recording. Product and brand searches are not, because watching somebody look for a product we don't stock is how we learn what to add.
- A random identifier stored in your browser so we can tell a returning visit from a new one. If you decline cookies, nothing is stored and each visit is new.
With an account (Google sign-in), also:
- Your name and email from Google.
- What you tell us in onboarding: undertone, skin depth, shopping market, and date of birth. These are attached to your activity in our analytics so that reporting can be cut by undertone, depth and age group.
- The shades you save and the notes you write about them.
If you tell us you are under 16, we stop recording your screen and stop linking your activity to your account.
What we do with it
- Run and improve the site.
- Rank and recommend shades for you.
- Build reporting for beauty brands about how shoppers compare and choose — as de-identified aggregates only. A brand sees that, for example, shoppers who looked at its shades also looked at four named competitors and most often cited "wrong undertone" when passing on it. A brand never sees an individual visit, a recording, a note, a location below country, or any figure drawn from fewer than twenty people. Our contracts with brands forbid them from trying to re-identify anyone.
- Decide what to add to the catalogue, from what people search for and don't find.
We do not sell personal information, and we do not show advertising. No brand pays to appear on the matrix or to rank higher on it.
Who else handles it
These companies process data on our behalf, under contracts that limit them to our instructions:
| Service | What for | Where |
|---|---|---|
| PostHog | Analytics and screen recording | United States |
| Supabase | Accounts, saved shades, notes, profile | Japan |
| Vercel | Hosting | United States and global edge |
| Sign-in | United States |
If you are in the UK or the European Economic Area, this means your data leaves that area. Each provider is bound by standard contractual clauses or an equivalent approved mechanism.
Your choices
- Cookies. If you are in Europe you are asked before anything persistent is stored, and declining is honoured. Anywhere else, you can decline through your browser's cookie settings; the matrix works either way.
- Screen recording. Declining cookies turns it off.
- Your account. Email us to see what we hold, correct it, or delete it. Deleting your account removes your profile, saved shades and notes, and the link between your account and your activity. Activity already folded into de-identified aggregates cannot be pulled back out, because it no longer points to you.
- Reporting. Because brand reporting is built only on de-identified aggregates, there is no per-person opt-out from it; the opt-out is declining cookies, which keeps your visits from being joined together.
How long we keep it
| Data | Kept for |
|---|---|
| Screen recordings | 30 days |
| Activity events | 24 months |
| Account, profile, saved shades, notes | Until you delete the account |
| De-identified aggregates | Indefinitely |
Your rights
Depending on where you live you may have the right to access, correct, delete or port your data, to object to or restrict how it is used, and to complain to a regulator — in Australia the OAIC, in the UK the ICO, in the EEA your national authority, in California the Attorney General. We will answer any request within 30 days. We will not treat you differently for exercising a right.
Changes
If this page changes in a way that matters, the date at the top changes and the footer says so for a month.