Privacy Policy

ToonToneColor does not require an account or payment details. Single-player and same-phone games run in your browser. When you join a friend invitation, you may optionally enter a display name of up to 24 characters.

We store some data locally in your browser to make the game work smoothly:

• Your cookie consent choice — whether you accepted or rejected analytics cookies, saved with a revision in local storage, session storage, and a necessary first-party preference cookie lasting up to one year
• Your last game score — so you can see how you did after playing
• Your last achieved rank — such as "Color Rookie" or "Tone Mythic"
• When you last played — to show your recent activity
• Your daily challenge records — versioned first completed results, UTC dates, and independent game streaks
• Game progress and palettes — unfinished rounds, puzzle moves, and up to 90 saved gradient palettes
• Private invitation access — device tokens that let you retrieve your own comparison or manage an invitation you created
• Invitation retry access — private retry credentials for creating or joining an invitation, and the name from your first join attempt, so a retry can recover the same invitation or participant

Daily streak data stays in this browser and is not synced to an account. Shared result text is created only after you choose a sharing action. Result card images are generated locally only after you click Share Image, Copy Image, or Download PNG; they are not uploaded to our server or written to localStorage.

When you create or complete a friend challenge, our Cloudflare D1 database stores the fixed game set, your answers, the server-calculated result, timestamps, and an optional display name. This storage is needed to compare results across devices and does not depend on analytics consent. Invitations expire after 30 days; expired records are removed by a daily cleanup job. Creators can delete an invitation and its answers earlier.

Anyone with an invitation link can join, so treat it as a shareable link rather than an account-private room. Private device tokens are sent in authorization headers and stored as hashes on the server. They are not placed in public links or result images. Each participant can retrieve only their own comparison; the creator can see completed response summaries. Private access does not automatically transfer to another browser.

Retry credentials are private access data sent only to our invitation service, never in public links or optional analytics. They and the first-attempt name remain in browser storage until you clear site data; server expiry or creator deletion does not automatically clear your browser. If saving is unavailable, retry access stays in the current tab, so keep it open until you finish.

If you accept analytics cookies, we may load GA4, Microsoft Clarity, Ahrefs Web Analytics, and Plausible to understand page views, game starts, completions, replay, collection and share actions. Optional event data excludes display names, private tokens, raw answers, invitation IDs and personal invitation URLs. Invitation pages use only consented, manually reported Plausible events with a generic challenge address. GA4, Ahrefs and replay recording are excluded from these pages. Microsoft Clarity records interactions only on our home and information pages. Recording is disabled on game and invitation pages to keep colors, answers, and personal invitation links out of replay recordings. If you reject, optional analytics scripts controlled by this site are not loaded. Use Cookie settings in the footer to change your choice.

After analytics consent, we may also keep a bounded record of the five practice colors already played on this browser, alongside a small first-play record on this browser to distinguish an initial game from a replay and measure returns on exact UTC days. It contains local run references and dates; run references are not sent to analytics providers. The record lasts until you reject analytics or clear browser storage. Older or unreadable history may be excluded, and clearing storage or changing devices can affect these measurements.

Cloudflare may process limited technical data for security, routing, performance, bot mitigation, and platform diagnostics. If Cloudflare Web Analytics or Insights is enabled at the platform level, it may be controlled in Cloudflare settings rather than by this site's optional analytics banner.

For privacy questions, bug reports, or rightsholder removal/correction requests, email support@toontonecolor.com.