Your information, explained

Privacy policy

Play as a guest, or choose an account. Here’s what Colour Confuse needs in each case.

Last updated: 14 October 2026

Who is responsible?

Colour Confuse is developed and operated by Ryann Stevenson, the controller of the personal information described here. For privacy questions or requests, email ryann@ryannstech.com.

This policy covers the new Colour Confuse app and this website. It does not describe the earlier, legacy Colour Confuse app or its separate services.

Playing without an account

Your guest scores, game history, play dates, daily attempts, dots, unlocked skins and preferences are saved locally. You can play offline. When connected, the app may contact the game service for configuration, daily challenge information or leaderboards. These requests involve ordinary connection information, including your IP address. Guest play does not create a cloud player account.

If you choose Sign in with Apple

Apple supplies an app-specific account identifier and sign-in credentials. The app does not request your name or email address from Apple. Your chosen username is visible to other players, so avoid using information you do not want to make public. We create an internal account ID and a player name. You can choose a username; a generated alias may be used until you do.

We store account-linked game information to provide the features you request: scores and run history, play dates, daily challenge attempts, streaks and rewards, dots, owned skins, and records needed to prevent duplicate rewards. Existing guest progress can be imported when you sign in. Sign-in and session credentials are used to authenticate your account; Apple refresh credentials are encrypted on the server.

Ranked runs send timed game inputs and game metadata so the service can verify the score. Public leaderboard responses include your player name, score and internal player ID. Your detailed score history and reward records are account-only.

Device and software information

When connected from a physical device, the app reports a random app-installation identifier, device category and model, operating-system name and version, and app version and build number. This helps us count active installations and understand compatibility and support needs. Reporting can occur for guest players as well as signed-in players; it does not upload guest scores merely because you open the app.

The server records when an installation was first and most recently seen. If you sign in, its report is linked to your game account. The identifier belongs to this app installation: it is not an advertising identifier, hardware serial number, device name or precise location. An installation credential protects updates to the report. We use this information under our legitimate interests in understanding usage and maintaining app reliability.

Support and service security

If you email us, we receive your email address, message and any information you choose to include. Please avoid sending passwords, sign-in codes or unnecessary personal information.

Our hosting services process connection and request information to deliver the app and website, prevent abuse and investigate failures. The game service uses IP-based rate limiting. Its diagnostic messages are designed to exclude authentication tokens, Apple identifiers and request bodies.

Why we use this information

• Providing the game and optional account services: to fulfil your request for account access, progress synchronisation, rewards, skins and verified rankings. The lawful basis is performance of our agreement with you.
• Security, fair play and support: our legitimate interests in keeping the service reliable, preventing misuse and answering questions. You may object to processing based on legitimate interests.
• Legal requests and obligations: where necessary to meet a legal obligation or establish, exercise or defend legal claims.

Account information is optional; without it, cloud features are unavailable but guest play remains available. Score validation is automated to check game rules and rewards; it is not used for decisions with legal or similarly significant effects on you.

Service providers and sharing

Cloudflare hosts the game backend and its database. Apple provides Sign in with Apple and, when released, App Store distribution. This website is hosted by Cloudflare Pages. Apple iCloud Mail processes correspondence when you contact support. Providers receive information needed to operate these services. We do not sell your personal information or share it for targeted advertising.

These providers may process information outside the UK, including in the United States. Where UK data protection law requires safeguards for an international transfer, the relevant provider’s contractual transfer safeguards apply. You can contact us for more information. Read the Cloudflare privacy policy and Apple privacy policy for their own processing.

How long information stays

Local progress stays on your device until it is removed. Cloud account and gameplay records are retained while your account exists so we can preserve your progress, history and earned rewards. Installation reports remain available for usage and compatibility reporting. Account deletion removes the account link from those reports rather than automatically erasing the installation record; contact us about deletion of information associated with an installation. Expiry of a sign-in session prevents its use but does not by itself delete your account or all stored session records.

Deleting your account removes its active cloud records, including associated progress and rankings, and revokes the stored Apple authorisation. Recoverable database backups may retain deleted information until their recovery window expires; Cloudflare D1’s documented maximum recovery window is 30 days. Game service logs in Cloudflare Workers Logs have a documented retention period of up to seven days. Other hosting security records follow the relevant provider’s retention settings. Support messages are kept for as long as needed to resolve the request and handle related follow-up or legal obligations.

Your choices and rights

Open Settings → Delete account while signed in to request deletion in the app. This permanently removes cloud progress; signing out alone does not delete it. You can also email us if you need help deleting an account or cannot access it. We may need enough information to verify that the account is yours.

Depending on applicable law, you can ask to access, correct, erase or receive a portable copy of your information, restrict its use, or object to processing based on legitimate interests. Contact ryann@ryannstech.com. You may also complain to the UK Information Commissioner’s Office or your local data protection authority.

Website appearance preference

If you choose Light, Dark or System appearance, this website stores that preference in your browser’s local storage. It is used only to remember your display choice, stays in your browser and is not sent to us. You can clear it using your browser’s site-data controls.

Children and families

The game can be played without creating an account. We do not request a date of birth, contact list or precise location. A parent or guardian can contact us about a child’s information or help them use the in-app account deletion option. Apple’s account and family controls apply to Sign in with Apple.

This website and cookies

The website code does not add analytics, advertising cookies, tracking pixels or a mailing list. The rule example runs in your browser without saving your answers. Hosting providers may process technical requests and use strictly necessary security or access cookies. External links, including email links, take you to services with their own privacy practices.

Changes to this policy

We will update this page when the app or its data practices change and update the date above. Material changes will be communicated through the app or website where appropriate.