Privacy Policy
Last updated: 2026-05-17
This Website and Application are owned and operated by OFT Games LLC, a Georgia, USA limited liability company.
Who we are
Color by Nonogram is published by OFT Games LLC. For privacy questions, requests, or to exercise your rights, contact privacy@otfdp.com.
What we collect
Anonymous account
When you first launch the App, we create an anonymous account with our backend provider (Supabase). This account is identified by a randomly-generated UUID. It is not linked to your name, email, phone number, or any other identifier from your device or app store account, unless and until you choose to sign in with Apple or Google.
Game state
We store the following per anonymous account, on our backend:
- Puzzle progress (which puzzles you’ve started, solved, your best times)
- In-app currency state (energy balance, last regen timestamp)
- Entitlements (which packs / palettes / ads-removed status you own)
- Aggregate progression (total cells solved, derived level)
The same data is also cached locally on your device for offline play.
Repaint canvas (free-fill mode)
After completing a puzzle, you can repaint it. Your custom color choices are stored only on your device and never sent to our backend.
Device-level settings
We store local-only settings on your device: sound on/off, haptics on/off, auto-pick-next-picross preference, cell size, completed onboarding flag.
Advertising identifiers
On native (iOS / Android) builds, our ad partner (Google AdMob) may read your device’s advertising identifier (IDFA on iOS, GAID on Android) to deliver and measure ads. On iOS 14+, we are required to ask your permission first via the App Tracking Transparency prompt. You can decline; ads will still be served but will not be personalized.
In the European Economic Area, the UK, and Switzerland, we present Google’s UMP consent form on first launch. You may withdraw consent at any time via Settings → Privacy options.
Purchases
In-app purchases (packs, energy refills, remove-ads) are processed by Apple App Store or Google Play. Your payment information (card details, billing address, etc.) is handled entirely by Apple or Google and is never seen or captured by us. We receive only:
- A transaction ID confirming the purchase succeeded
- The product ID purchased
These are stored against your anonymous account for entitlement tracking.
What we do not collect
- Your name, email, postal address, phone number (unless you sign in with Apple or Google later)
- Your contacts, photos, microphone, camera, or precise location
- Any data from outside this App
How we use what we collect
| Purpose | Data used |
|---|---|
| Saving and syncing your progress across reinstalls | Anonymous account + game state |
| Showing ads | Advertising ID, consent state, ad interactions |
| Granting entitlements after purchase | Transaction ID, product ID |
| Improving the App (aggregate analytics only) | Aggregate progression data |
We do not sell personal data. We do not share data with third parties except as listed below.
Third parties
The App relies on these services, each with its own privacy policy:
- Supabase (backend storage and authentication) — https://supabase.com/privacy
- Google AdMob (advertising) — https://policies.google.com/privacy
- Apple App Store (iOS in-app purchases, app distribution) — https://www.apple.com/legal/privacy/
- Google Play (Android in-app purchases, app distribution) — https://policies.google.com/privacy
Your rights
Depending on your jurisdiction, you may have the right to:
- Access the data we hold about you
- Correct inaccurate data
- Delete your data (“right to be forgotten”)
- Export your data in a portable format
- Object to processing for direct marketing or analytics
- Withdraw consent for advertising at any time
To exercise any of these rights, email privacy@otfdp.com with a description of your request. Because accounts are anonymous, we may ask you to provide the anonymous account ID shown in the App’s Settings screen so we can locate your data. We will respond within 30 days.
You can also:
- Disable personalized ads at any time by opening the Privacy options link in Settings (EEA/UK/CH users), or by revoking tracking permission in iOS Settings → Privacy & Security → Tracking.
- Reset your advertising identifier in your device’s settings.
California Residents (CCPA / CPRA)
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:
- The right to know what personal information we collect, use, and disclose
- The right to delete your personal information
- The right to opt out of the sale or sharing of your personal information. We do not sell or share your personal information as those terms are defined under CCPA / CPRA.
- The right to non-discrimination for exercising your privacy rights
To exercise your California privacy rights, contact us at privacy@otfdp.com.
EEA / UK / Swiss residents (GDPR / UK GDPR)
Our legal basis for processing is:
- Performance of a contract (delivering App features you use)
- Consent (for personalized ads, where required)
- Legitimate interest (for non-personalized service operation and analytics)
If you are located in the EEA, UK, or Switzerland, you have additional rights under the GDPR, including:
- Right of access (Article 15) — you may request, in writing, a copy of the personal data we process about you.
- Right to rectification (Article 16) — you may request, in writing, correction of inaccurate personal data.
- Right to erasure (Article 17) — you may request deletion of your personal data, in writing, subject to applicable exceptions.
- Right to restrict processing (Article 18) — you may request, in writing, that we limit how we use your data. We are not obligated to comply with such requests and you may opt not to use the Service.
- Right to data portability (Article 20) — you may request your personal data in a structured, commonly used, machine-readable format. Such requests must be made in writing.
- Right to object (Article 21) — you may object, in writing, to processing based on legitimate interests.
- Right to withdraw consent — where processing is based on consent, you may withdraw consent in writing at any time.
To exercise these rights, contact us at privacy@otfdp.com. We will respond within 30 days (or within the timeframe required by applicable law). You have the right to lodge a complaint with your local data protection supervisory authority.
International Data Transfers
We store and process data in the United States. If you access the Service from outside the United States, your data will be transferred to and processed in the United States. By accessing and using this Service, you agree to this data transfer provision.
Children
Our Application and Website are not directed at children under the age of 13. We do not knowingly collect personal information from anyone under 13.
If we learn at any time that we have been providing services to or have collected the information of a child under 13, we will immediately destroy this personal information unless we are legally obligated to retain such data. Please email us at privacy@otfdp.com if you believe that we have unintentionally collected the information of a child under 13.
We encourage parents and guardians to observe, participate in, and monitor their child’s online activity.
Security
Data in transit between the App and our backend is encrypted via HTTPS. Data at rest in our backend is encrypted by the provider (Supabase). Anonymous accounts have no associated credentials and cannot be “hacked into” in the traditional sense.
No system is perfectly secure. While we implement reasonable security measures, we cannot guarantee absolute security. You are responsible for maintaining the security of your account.
Data retention
Account data is retained while your anonymous account is active. If you delete the App from your device, your local cache is removed, but the anonymous account on our backend persists indefinitely so that reinstalling on the same device restores your progress (subject to platform-specific identifier rules). To permanently delete all data, use the in-app deletion option (Settings → Legal → Delete my account) or email privacy@otfdp.com.
Account Deletion
You may delete your account at any time:
- In the app: Settings → Legal → Delete my account
- By email: contact us at privacy@otfdp.com
Cookies
We do not use cookies.
Changes to this policy
We may update this policy from time to time. Material changes will be surfaced in the App on next launch. The “Last updated” date at the top reflects the most recent revision.
Governing Law and Dispute Resolution
These Terms are governed by the laws of the State of Georgia, United States, without regard to conflict of law principles.
Any dispute arising from these Terms or your use of Color by Nonogram shall first be attempted to be resolved through good-faith negotiation. If negotiation fails, disputes shall be resolved through binding arbitration administered by the American Arbitration Association in accordance with its Consumer Arbitration Rules. The venue of arbitration shall be Savannah, Georgia. The arbitrator’s decision shall be final and binding.
Class Action Waiver: You agree that any dispute resolution proceedings will be conducted on an individual basis only, and not in a class, consolidated, or representative action.
Small Claims Exception: Notwithstanding the above, either party may bring an individual action in small claims court in Chatham County, Georgia.
International Users: If you reside in the European Union, European Economic Area, United Kingdom, or any other jurisdiction where mandatory consumer protection laws apply, nothing in this section limits your rights under those laws. You may bring claims in your local courts if required by applicable mandatory consumer protection legislation, and any mandatory statutory consumer rights in your jurisdiction are not waived by these Terms.
Contact
privacy@otfdp.com