Privacy Policy
Tonu.App (“we”, “us”) is operated by ChangKun Jiang, an individual based in China. This policy explains what data we handle when you use tonu.app, why, and for how long.
The short version
Your photos are processed in your own browser and are not uploaded unless you choose to share. Signing in needs only an email address. We do not sell data and we do not use advertising cookies. Only if you allow it, we use Google Analytics to count visits (section 4).
1. When you use Tonu.App without an account
- Photos. Colors are extracted and posters are drawn in your browser. Your photos are not sent to our servers.
- Saved work, styles and settings. Recent work (with a reduced copy of the image), saved styles, fonts you add, and preferences such as language and theme are stored in your browser’s local storage on this device only. Clearing your browser data deletes them.
- Fonts from Google Fonts. If you choose to add a font from Google Fonts, your browser downloads it directly from Google, which receives your IP address under Google’s privacy policy.
- AI features. If you enter your own AI provider key, it is kept in your browser only. Requests go from your browser directly to that provider, not through our servers, and that provider’s privacy policy applies.
- Code libraries. Some page libraries are loaded from public CDNs (cdnjs, run by Cloudflare; and jsDelivr, only when you use AI features). These services receive your IP address when your browser fetches the files.
- Human check. When you ask for a sign-in email, or share a palette without being signed in, your browser loads Cloudflare Turnstile to tell people from bots. Cloudflare receives your IP address and some browser signals, under Cloudflare’s privacy policy. Signed-in visitors are not asked.
2. When you share a poster
When you press Share to create a link, we upload and store:
- the rendered poster image — deleted automatically after 24 hours; it is kept only so social networks can fetch a preview;
- the palette, style settings and any credit text — kept so the link keeps working and others can “make the same look”;
- a salted hash of your IP address — used only to limit how often uploads can be made; it cannot be turned back into your IP address.
3. When you sign in
- Email sign-in. We store your email address and send you a 6-digit code and a sign-in link through Cloudflare’s email service. We keep only a one-way hash of the code; it expires after 30 minutes.
- Google sign-in. Google shares your account ID, email address, name and profile picture with us. We do not get access to your Gmail, contacts, or any other Google data.
- Staying signed in. A cookie named
tonu_sidkeeps you signed in for up to 400 days. On our side we store only a hash of it, plus the browser and system type and the time it was last used, so you can see and sign out your devices. - Account data. Anything you choose to save to your account is stored on our servers until you delete it or delete your account.
4. Cookies
We use one cookie to keep you signed in, tonu_sid, set only after you sign in. While you sign in with Google, a second short-lived cookie, tonu_oauth (10 minutes), guards against forged sign-in requests and is deleted when you return. Both are strictly necessary. We do not use advertising or third-party tracking cookies. Visit statistics. We use Google Analytics 4 (Google LLC) to count visits and see which parts of Tonu.App are used. Until you press Allow on the notice, it sends only anonymous pings with no cookie and no visitor ID. If you press Allow, it sets analytics cookies (such as _ga). It receives the page address, your approximate location derived from your IP address, your device, browser and language, and the site you came from. It never receives your photos, colors or palettes, and we switch off Google signals and ad personalization. Browsers that send Global Privacy Control or Do Not Track load nothing. You can change your choice at any time at tonu.app/?consent=1, or by clearing this site’s data in your browser.
5. Service providers
- Cloudflare, Inc. — hosting, database, image storage, sending sign-in emails, forwarding mail sent to privacy@tonu.app and support@tonu.app, and server logs.
- Google LLC — only if you sign in with Google, add a Google font, or allow Google Analytics.
These providers process data on our behalf or as described above. Our servers are run by Cloudflare and data may be processed in the United States and other countries where Cloudflare operates.
6. How long we keep data
| Data | Kept for |
|---|---|
| Shared poster image | 24 hours |
| Palette and style behind a share link | Until you ask us to delete it |
| Sign-in code | 30 minutes; cleared within a day |
| Sign-in session | Up to 400 days, or until you sign out |
| Account | Until you delete it; fully erased within 30 days after that |
| Server logs | About 7 days |
7. Your choices and rights
- Sign out of one device or all devices from your account menu.
- Delete your account from your account menu; it is fully erased within 30 days.
- Email privacy@tonu.app to access, export, correct or delete your data, including share links you created.
Depending on where you live (for example California, the EU or the UK), you may have further rights under local law, such as the right to object to processing or to complain to a data protection authority. You can exercise them by emailing us. We do not sell or share personal information for cross-context behavioral advertising.
8. Children
Tonu.App is not directed to children under 13, and we do not knowingly collect their personal information. If the law where you live sets a higher age for consenting to online services (up to 16 in parts of Europe), you must be at least that age or have a parent’s permission. If you believe a child has given us personal information, email us and we will delete it.
9. Security
Connections use HTTPS. Sign-in codes, links and session tokens are stored only as hashes. No system is perfectly secure, but we take reasonable measures to protect your data.
10. Changes
If we make significant changes, we will show a notice on the site and update the date at the top of this page.
11. Contact
ChangKun Jiang, privacy@tonu.app