Privacy

Short version: no account, no cookies, no tracking pixels. Your quiz answers stay in your own browser.

Who is responsible

Florian Breitenberger, Münchener Str. 3, 82211 Breitbrunn-Herrsching, Germany. Email: .

Hosting

This site is hosted on Cloudflare Pages (Cloudflare, Inc.). Cloudflare processes the technical data every web request produces, such as your IP address, the requested URL, the time and your browser's user agent, in order to deliver the page and to defend against attacks. Cloudflare acts as our processor under a data processing agreement, and transfers are covered by the EU standard contractual clauses.

Your quiz answers

The quiz runs entirely in your browser. Your answers and your result are written to your browser's localStorage under the key tonesy.quiz.v1 so you can close the tab and continue later. They are not sent to a server, and we cannot read them. Clearing your browser storage deletes them permanently.

Cookies

We set no cookies. localStorage is not a cookie: it is never sent with requests and is only read by this site's own code in your browser.

Payments

The Palette Pass is paid through Stripe Payments Europe, Ltd. When you start a checkout we send Stripe your color season and your four axis values, so that your report can be rebuilt after payment. Card details are entered on Stripe's own page and never reach us. Stripe processes your payment data as an independent controller under its own privacy policy, and the legal basis is the performance of the contract, Art. 6(1)(b) GDPR.

Your report

After payment, your browser receives a signed token containing your season, your axis values and an expiry date 30 days out. The token is what unlocks the report. We keep no database of buyers: the token is the record.

Analytics

Analytics are not enabled yet. When they are, we will use a self-hosted, cookieless Matomo instance that stores no personal identifiers and no cross-site profile. This page will name it before it goes live.

Your rights

You can ask for access, correction, deletion, restriction or portability of any personal data we hold, and you can object to processing. In practice we hold almost nothing: write to the address above and we will tell you exactly what exists. You may also complain to a supervisory authority, in our case the Bayerisches Landesamt für Datenschutzaufsicht.

Changes

If this page changes, the change is made here. There is no mailing list to notify.