Last updated: 7 November 2026 · Applies to the Dropper Bottle app and dropperbottleapp.com
Dropper Bottle is built and operated by OakLeaf Studios, a solo-developer project. This page explains what data the app touches, what it doesn't, and where the handful of third parties involved fit in.
Your paint collection, specialty items, recipes, and projects are stored entirely on your own device. There is no account system and no server copy of this data — it never leaves your phone as part of normal use.
The "scan a bottle" feature reads a photo you take or choose, and samples pixel color from it entirely on your device. The photo itself is never uploaded, transmitted, or stored anywhere outside your device's own memory during that session.
Purchases and donations are handled entirely by Stripe, a third-party payment processor. When you pay, Stripe collects whatever information it needs to process that payment (e.g. card details, billing email) — we don't see or store your payment card information ourselves. As the merchant of record, OakLeaf Studios does have access to transaction records (amount, date, email used for the receipt) through our own Stripe dashboard, the same as any business using Stripe.
To confirm a purchase is real, the app sends the Stripe checkout session identifier you're given after payment to a small server function we run on Cloudflare. That function asks Stripe whether the session actually completed payment, and keeps a simple count of how many times that specific purchase has been used to unlock the app (to prevent one code being shared indefinitely). No other personal information passes through this step.
The app and this website are separate things, so they are described separately. dropperbottleapp.com is a plain static site hosted on Cloudflare Pages. It sets no cookies and builds no profile of you, which is why you have never been shown a cookie banner here.
Cloudflare does keep standard server logs for delivering and protecting the site — the sort of request records any web host keeps, including IP address and browser type. We do not combine those with anything else or use them to identify individual visitors.
Visitor statistics are switched on, in the cookieless form this
section always said they would take. Cloudflare Web Analytics adds a
small script to each page, served from
static.cloudflareinsights.com, which reports a page view
when the page finishes loading and when you leave it.
It sets no cookies and stores nothing in your browser — checked on this site rather than taken on trust. Cloudflare states that Web Analytics uses no client-side storage to gather its metrics and never fingerprints individual users, and that a visit is counted from the referring address rather than from anything kept on your device — so these are counts of visits, not of people. Query strings are not logged.
What reaches us is a dashboard of totals: page views, which pages, referring sites and countries. Nothing in it identifies you to us, and we cannot single out one visit. Cloudflare’s own handling of that data is governed by its privacy policy.
Dropper Bottle is not directed at children under 13, and we don't knowingly collect information from anyone in that age group.
Since your collection data lives on your device, you control it directly — edit or delete anything from within the app, or uninstall it to remove everything at once. For questions about payment records held by Stripe, or to request removal of the activation-count entry tied to a purchase, contact us using the details below.
If what the app collects or how it's processed changes, this page will be updated and the date at the top revised accordingly.
[email protected], for privacy questions, data requests, or anything else.