Privacy Policy

Chroma 12 · Last updated: 1 June 2026

This Privacy Policy explains what information Chroma 12 collects, how it is used, and your rights in relation to it. Chroma 12 is operated by The Introverted Entrepreneur, based in Singapore ("we", "us", "our").

We are committed to handling your data minimally and transparently, in accordance with the Singapore Personal Data Protection Act 2012 (PDPA) and, where applicable, the UK/EU General Data Protection Regulation (GDPR).

1. What We Collect and Why

Anonymous Session ID

When you play Chroma 12, a random anonymous identifier (UUID) is generated for your device and stored securely via Supabase. This contains no personal information — no name, email address, or contact details. We use it solely to remember your unlocked cosmetics and game progress across sessions.

Push Notification Subscription

If you choose to enable push notifications, your browser generates a push subscription endpoint — a browser-specific token — which is stored on our server. This allows us to send you game updates and notifications. The endpoint contains no personal information. You can withdraw consent at any time by disabling push notifications within the game.

Local Game Data

Your scores, coins, settings, and game progress are stored in your browser's local storage. This data never leaves your device and is not accessible to us.

Chroma Originals TikTok Launch Campaign

If you participate in the Chroma Originals TikTok Launch Campaign, you will voluntarily submit your email address and TikTok profile URL to us for the purpose of verifying your entry and delivering your reward code. This information is used solely for those purposes and is not shared with any third party. See our Challenge T&Cs for full campaign details.

2. Legal Basis for Processing (GDPR)

Anonymous session ID: Legitimate interest — necessary to provide persistent in-game features such as unlocked cosmetics.
Push subscription endpoint: Consent — you explicitly opt in to receive notifications.
Campaign email and TikTok URL: Consent — you submit these voluntarily by entering the campaign.

3. Data Retention

Anonymous session ID: Retained until you request deletion.
Push subscription endpoint: Retained until you unsubscribe or the endpoint becomes invalid, at which point it is automatically removed.
Campaign data (email address, TikTok URL): Retained for the duration of the campaign period plus 90 days, then permanently deleted.

4. Third Parties

We use Supabase (supabase.com) as our backend database and authentication provider. Anonymous session IDs and push subscription endpoints are stored on Supabase's servers. Supabase acts as a data processor on our behalf and does not use your data for its own purposes. See Supabase's Privacy Policy.

We do not use advertising networks, analytics SDKs, or behavioural tracking of any kind.

5. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the data we hold about you.
Erasure: Request that we delete your data ("right to be forgotten").
Rectification: Request correction of inaccurate data.
Restriction: Request that we limit how we process your data.
Portability: Request your data in a structured, machine-readable format.
Objection: Object to processing based on legitimate interest.
Withdraw consent: Withdraw consent at any time where processing is consent-based (e.g. push notifications).

To exercise any of these rights, contact us at theintrovertedentrepreneur8+chroma12@gmail.com. We will respond within 30 working days.

6. Data Security

We take reasonable technical measures to protect your data, including encrypted connections (HTTPS) and access-controlled database infrastructure via Supabase. No method of internet transmission is completely secure, and we cannot guarantee absolute security.

7. Children

Chroma 12 is suitable for all ages. We do not knowingly collect personal data from children under 13. If you believe a child has submitted personal data to us (for example, via the creator campaign), please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the game after an update constitutes acceptance of the revised policy.

9. Contact

For any privacy-related queries: theintrovertedentrepreneur8+chroma12@gmail.com

This policy is governed by the laws of the Republic of Singapore.