Last updated: May 15, 2026
Privacy Policy
What we collect
ToonToneColor does not require an account or payment details. Single-player and same-phone games run in your browser. When you join a friend invitation, you may optionally enter a display name of up to 24 characters.
Local browser storage
We store some data locally in your browser to make the game work smoothly:
- Your cookie consent choice — whether you accepted or rejected analytics cookies
- Your last game score — so you can see how you did after playing
- Your last achieved rank — such as "Color Rookie" or "Tone Mythic"
- When you last played — to show your recent activity
- Your daily challenge records — versioned first completed results, UTC dates, and independent game streaks
- Game progress and palettes — unfinished rounds, puzzle moves, and up to 90 saved gradient palettes
- Private invitation access — device tokens that let you retrieve your own comparison or manage an invitation you created
Daily streak data stays in this browser and is not synced to an account. Shared result text is created only after you choose a sharing action. Result card images are generated locally only after you click Share Image, Copy Image, or Download PNG; they are not uploaded to our server or written to localStorage.
Friend invitations
When you create or complete a friend challenge, our Cloudflare D1 database stores the fixed game set, your answers, the server-calculated result, timestamps, and an optional display name. This storage is needed to compare results across devices and does not depend on analytics consent. Invitations expire after 30 days; expired records are removed by a daily cleanup job. Creators can delete an invitation and its answers earlier.
Anyone with an invitation link can join, so treat it as a shareable link rather than an account-private room. Private device tokens are sent in authorization headers and stored as hashes on the server. They are not placed in public links or result images. Each participant can retrieve only their own comparison; the creator can see completed response summaries. Private access does not automatically transfer to another browser.
Analytics after consent
If you accept analytics cookies, we may load GA4, Microsoft Clarity, Ahrefs Web Analytics, and Plausible to understand page views, game starts, completions, replay, collection and share actions. Optional event data excludes display names, private tokens, raw answers, invitation IDs and personal invitation URLs. Invitation pages use only consented, manually reported Plausible events with a generic challenge address. GA4, Ahrefs and replay recording are excluded from these pages. Microsoft Clarity records interactions on public pages to help us improve the experience. If you reject, optional analytics scripts controlled by this site are not loaded. Use Cookie settings in the footer to change your choice.
Cloudflare services
Cloudflare may process limited technical data for security, routing, performance, bot mitigation, and platform diagnostics. If Cloudflare Web Analytics or Insights is enabled at the platform level, it may be controlled in Cloudflare settings rather than by this site's optional analytics banner.
Contact and removal requests
For privacy questions, bug reports, or rightsholder removal/correction requests, email support@toontonecolor.com.