# Privacy Policy
Effective date: April 19, 2026
This Privacy Policy explains how Ihrén Consulting AB ("we," "us," or "our") collects, uses, stores, and shares information when you use Toonfront (the "Game") or visit www.troonfront.com (the "Website").
If you have any questions about this Privacy Policy or want to make a privacy request, contact us at:
- Email: support@toonfront.com
If required by applicable law, Ihrén Consulting AB is the controller of the personal data described in this Privacy Policy.
## 1. Scope
This Privacy Policy applies to information processed through the Game and the Website.
It does not apply to third-party websites, stores, or services that may have their own privacy policies, including platform operators, payment providers, hosting providers, and third-party game service providers.
## 2. Information We Collect
We may collect the following categories of information.
### Account and identity information
If you create or use an online account, we may collect:
- email address;
- password used for sign-in;
- PlayFab ID or similar account identifier;
- display name or username;
- account linking status;
- email verification status; and
- authentication tokens or session data required to sign you in.
### Multiplayer and social information
If you use multiplayer, matchmaking, friends, or private-room features, we may collect:
- Photon or similar multiplayer user identifiers;
- room name, room code, region, room membership, and matchmaking or lobby status;
- PlayFab friends list data;
- friend identifiers, display names, usernames, and friend-presence information;
- invite target identifiers; and
- technical information needed to establish and maintain online sessions.
Private room note: certain room-presence information may be stored in PlayFab user data with public-read permissions so friends or invited players can find and join private matches. This may include room code, room region, invite target PlayFab ID, and a last-updated timestamp. Private-room codes should not be treated as long-term secrets.
### Gameplay and analytics information
If analytics are enabled, we may collect gameplay and telemetry information such as:
- menu actions;
- matchmaking actions, modes, statuses, reasons, player counts, room names, and host status;
- match actions, match mode, match result, match duration, local team, winner team, and whether the match was multiplayer;
- in-game enemy-send events, including slot index, enemy type index, cost, and sender team;
- current scene or screen name; and
- game build version.
### Device, app, and local storage information
We may collect or generate device or app-related information such as:
- app version and runtime configuration data;
- persistent locally stored identifiers used to support sign-in and multiplayer continuity;
- analytics consent choices;
- saved preferences and settings; and
- locally stored sign-in convenience data, including remembered credentials if that feature is used.
The Game may store certain information locally on your device using Unity PlayerPrefs or similar local storage systems, including analytics consent, stable multiplayer or account identifiers, and remembered sign-in data.
### Website information
When you visit the Website, we or our hosting providers may automatically receive standard web request information such as:
- IP address;
- browser and device information;
- operating system;
- referring URLs;
- page requests and timestamps; and
- basic server log data needed to operate, secure, and troubleshoot the Website.
If you use a contact form, mailing-list form, or support form, we may also collect the information you submit.
### Information we do not intentionally collect
The Game is not intended to directly collect the following types of information for gameplay purposes unless we clearly tell you otherwise in the future:
- microphone recordings;
- camera captures;
- contact list data;
- precise location data;
- advertising identifiers for ad targeting; or
- payment card details processed directly by us.
If this changes in a future release, we will update this Privacy Policy.
## 3. How We Collect Information
We collect information:
- directly from you when you create an account, sign in, update account details, add friends, or contact us;
- automatically when you play the Game or use online features;
- from third-party service providers that help us operate the Game and Website, such as PlayFab, Photon, Unity Gaming Services, platform providers, and hosting providers; and
- from your device when the Game stores settings, identifiers, or remembered sign-in information locally.
## 4. How We Use Information
We may use information to:
- provide and operate the Game and Website;
- create and manage player accounts;
- authenticate users and secure online features;
- provide friends, matchmaking, private-room, and multiplayer functionality;
- store and retrieve room-presence and friend-related information;
- send account-related emails such as verification or recovery messages through our service providers;
- measure feature usage and improve gameplay, matchmaking, menus, balance, stability, and performance;
- maintain security and help prevent fraud, abuse, and cheating;
- comply with legal obligations; and
- establish, exercise, or defend legal claims.
## 5. Legal Bases for Processing
If you are located in the EEA, UK, or another jurisdiction that requires a legal basis for processing, we may rely on one or more of the following:
- performance of a contract, where processing is necessary to provide the Game, the Website, or the services you request;
- legitimate interests, where processing is necessary to secure, maintain, improve, and analyze the Game or Website and those interests are not overridden by your rights;
- consent, where required by law, including for analytics or certain Website technologies; and
- legal obligation, where processing is necessary to comply with applicable law.
## 6. Analytics and Consent
The Game uses Unity Analytics.
The Game includes an analytics consent setting intended to control whether analytics events are sent through the in-game analytics flow. If analytics consent is denied, analytics events are intended not to be recorded through that flow.
Some platform, hosting, or third-party services may still process limited technical data that is necessary to provide their services, secure systems, or deliver core functionality.
## 7. Third-Party Services We Use
We may use third-party service providers to operate parts of the Game and Website, including:
- PlayFab, by Microsoft, for account management, player identity, email sign-in, friends data, account recovery, cloud functions, and related backend features;
- Photon, by Exit Games, for real-time multiplayer networking, rooms, lobbies, and matchmaking;
- Unity Gaming Services and Unity Analytics, by Unity, for analytics and service initialization; and
- website hosting and infrastructure providers, including hostinger.com
These providers may process personal data on our behalf or under their own privacy terms, depending on the service.
## 8. How We Share Information
We may share information:
- with service providers that help us operate the Game and Website;
- with other players where necessary to provide friends, room joining, presence, matchmaking, and multiplayer functionality;
- with platform operators, hosting providers, and infrastructure providers;
- with legal, regulatory, or law-enforcement authorities where required by law or where necessary to protect rights, safety, or security;
- in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction; and
- with your consent or at your direction.
We do not sell personal information for money.
Based on the current implementation of the Game, we do not use player data for third-party behavioral advertising.
## 9. Information Visible to Other Players
If you use online features, some information may be visible to other players or friends as part of the Game’s functionality. This may include:
- your display name or username;
- your PlayFab ID or multiplayer identifier;
- your friend relationship with another player;
- room code or room region used for joining private matches;
- your status as a host, room member, or invite target; and
- other session-level information needed to synchronize matches.
Please only share private-room codes and similar identifiers with people you intend to invite.
## 10. Cookies and Similar Technologies
If the Website uses cookies, local storage, analytics tags, embedded media, or similar technologies, you should describe them here before publishing.
If your Website does not use non-essential cookies or tracking technologies, replace this section with a short statement such as: "Our Website does not currently use non-essential cookies or similar tracking technologies."
If your Website does use them, you should explain:
- what technologies are used;
- whether they are strictly necessary, functional, analytics, or marketing-related;
- which providers set them;
- how long they remain active; and
- how visitors can manage or reject them.
## 11. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:
- provide the Game and Website;
- maintain accounts and online features;
- resolve disputes;
- enforce agreements;
- comply with legal, tax, accounting, or regulatory obligations; and
- maintain security and fraud-prevention records.
Retention periods may vary depending on the type of data, the service provider involved, and whether you delete your account, withdraw consent, or stop using the Game.
Locally stored information may remain on your device until it is deleted by the Game, removed by you, or cleared when the app is uninstalled or device storage is reset, depending on your platform and device behavior.
## 12. International Data Transfers
Your information may be processed in countries other than your own, including countries where our service providers operate.
Where required by law, we take steps intended to ensure appropriate safeguards are in place for international data transfers.
## 13. Data Security
We use reasonable administrative, technical, and organizational measures intended to help protect personal data.
However, no method of transmission over the Internet, multiplayer network, cloud service, or local device storage is completely secure. We cannot guarantee absolute security.
Important note: if remembered sign-in credentials are stored locally on a device for convenience, users should avoid using that feature on shared or unsecured devices.
## 14. Your Privacy Rights
Depending on your location, you may have rights that include:
- the right to access personal data we hold about you;
- the right to correct inaccurate or incomplete personal data;
- the right to request deletion of personal data;
- the right to restrict certain processing;
- the right to object to certain processing;
- the right to data portability;
- the right to withdraw consent where processing is based on consent; and
- the right to lodge a complaint with a supervisory or regulatory authority.
To exercise a privacy right, contact us at support@toonfront.com.
To help us process your request, please include enough information for us to identify your account, such as your email address, PlayFab ID, display name, and the country or state where you live.
## 15. Region-Specific Disclosures
### EEA, UK, and Switzerland
If you are located in the EEA, UK, or Switzerland, you may have rights under the GDPR, UK GDPR, or similar laws, including the rights described in the section above.
### California and other U.S. state privacy laws
If you are a California resident or live in another U.S. state with applicable privacy laws, you may have rights to know, access, correct, delete, and limit certain uses of your personal information, subject to legal exceptions.
We do not sell personal information for money and do not knowingly share personal information for cross-context behavioral advertising based on the current Game implementation described in this Privacy Policy.
### Nevada
Nevada residents may have certain rights to opt out of the sale of covered information. We do not currently sell covered information for monetary consideration.
## 16. Children's Privacy
The Game and Website are not intended for children under 13, or under any higher age threshold required by local law, without appropriate parental or guardian authorization.
We do not knowingly collect personal data from children in violation of applicable law. If you believe a child has provided personal data unlawfully, contact us at support@toonfront.com and we will investigate.
If the Game is intended for children or a mixed audience, this section should be reviewed with legal counsel before publication.
## 17. Account Deletion and Data Requests
If you want us to delete account-related data, contact us at support@toonfront.com.
Because some account and multiplayer features rely on third-party providers such as PlayFab and Photon, deletion may require coordination with those providers where applicable.
We may retain limited information where necessary for legal compliance, fraud prevention, security, dispute resolution, or recordkeeping.
## 18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
If we make material changes, we will update the effective date and, where required, provide additional notice through the Website, the Game, or other appropriate means.
## 19. Contact Us
If you have questions, privacy concerns, or requests regarding this Privacy Policy, contact:
- Ihrén Consulting AB
- support@toonfront.com
- www.toonfront.com