Privacy Policy

Chromaflow: Color Sort for iOS and Android · Effective 23 October 2026

In short

There is no account and no sign-up. Chromaflow never asks for your name, email address, contacts, photos, microphone or precise location.
Your progress and settings are stored on your device, and in your device backup if you use one.
The game is free and shows ads from Google AdMob. Players under 13 never get personalised ads. In the EEA, the UK and Switzerland, ads are personalised only if you agree; elsewhere you can turn personalisation off in your device settings.
Optional purchases are handled by Apple or Google. We never see your payment details.
We do not run servers for the app and we do not sell personal data.

1. Who is responsible
2. Information kept on your device
3. The age screen
4. Advertising
5. Game Center and Google Play Games
6. Purchases
7. Statistics and crash reports
8. When you email us
9. This website
10. Legal bases
11. Sharing and international transfers
12. How long information is kept
13. Your rights and choices
14. Children
15. Changes to this policy
16. Contact

1. Who is responsible

Chromaflow: Color Sort ("Chromaflow", "the app") is published by Elvoren OÜ, a company registered in Estonia (registry code 17601867, Sepapaja tn 6, 15551 Tallinn, Estonia). Elvoren OÜ is the controller for the processing described in this policy. You can reach us at hello@elvoren.ee.

Apple, Google and the other providers named below process some information as independent controllers under their own privacy policies. Where that is the case, we say so.

2. Information kept on your device

Chromaflow stores the following on your device: your level progress, scores, lives and statistics; your settings (sound effects and haptic feedback); whether you own Remove Ads; your answer on the advertising consent form; the age bracket described in section 3; and, on iPhone and iPad, a count of app launches used to time the tracking request.

This information is not sent to us. It is removed from your device when you delete the app (on Android, also when you clear the app's storage). If device backup is turned on, Apple's or Google's backup service may keep a copy and, especially on Android, restore it when you reinstall the app or set up a new device. You can delete backups in your Apple or Google account settings.

3. The age screen

Before any ads or game services start, Chromaflow asks for your age once (on iPhone and iPad, your year of birth; if that year allows two ages, the app uses the younger one). The app keeps only an age bracket on your device: under 13, 13 to 15, or 16 and over. The age or year you enter is not stored or sent anywhere. Ad and consent requests tell Google which treatment applies to your bracket: directed to children, under the age of consent, or neither, and the maximum ad content rating. The bracket decides how ads and game services behave, as described in sections 4, 5 and 14.

4. Advertising

Chromaflow is free because it shows ads. Ads are provided by Google AdMob (Google Mobile Ads SDK), and consent is collected with Google's User Messaging Platform. If you buy Remove Ads, the app stops requesting ads.

What Google may process

Your IP address, which Google may use to estimate your approximate location (country or city level);
device and app information such as device model, operating system, language and app version;
ad interactions, such as ads shown and tapped;
diagnostic information about ad performance;
advertising identifiers: the Android Advertising ID, or Apple's Identifier for Advertisers (IDFA) only if you allow tracking (see below);
on Android, the App Set ID and app-usage events (such as app opens and session length) that the Google Mobile Ads SDK measures once ads start; and
on iPhone and iPad, Apple's SKAdNetwork may tell an ad network, without identifying you, that an ad led to an install.

Google uses this information to show and measure ads, limit how often you see the same ad, prevent fraud and keep its services working. Google acts as an independent controller for this processing; see how Google uses information from apps that use its services and the Google Privacy Policy.

Consent and privacy choices

In the European Economic Area, the United Kingdom and Switzerland, Chromaflow shows Google's consent form to players aged 16 and over before any ad is requested. Information is stored on or read from your device for ads, and ads are personalised, only if you agree. Younger players in these regions do not see the form and get only non-personalised ads.
Elsewhere, on Android, ads for players aged 13 and over may be personalised using your Advertising ID unless you opt out in your device settings. You can reset or delete the Advertising ID there (Settings → Privacy → Ads, or Settings → Google → Ads).
On iPhone and iPad, Chromaflow asks for permission to track (App Tracking Transparency) only for players aged 16 and over who have not bought Remove Ads, and not when you first open the app. If you do not allow tracking, the IDFA is not used. You can change this in Settings → Privacy & Security → Tracking.
Where Google requires it for your region, players aged 16 and over who see ads find a Privacy Choices option in the app's Settings to review or change their choice at any time.

Younger players

Under 13: ad requests are marked as directed to children (COPPA). Ads are not personalised, no advertising identifier is used for them, and ad content is limited to Google's G rating.
13 to 15: ad requests are marked as coming from someone under the age of consent, and the consent form is not shown. In the EEA, the UK and Switzerland this means ads are not personalised; elsewhere, on Android, they may be personalised as described above unless you opt out. Ad content is limited to Google's PG rating. On iPhone and iPad the tracking permission is never requested for this group.

Earlier versions

Android versions before 1.3.5 applied the under-13 settings to every player under 18. iOS versions before 1.1.1 had no age screen: every player was offered Game Center sign-in and asked for tracking permission shortly after launch, and ad requests were not marked by age.

5. Game Center and Google Play Games

Achievements and leaderboards are not available to players under 13. For players aged 13 and over, the app asks Game Center (iOS) or Google Play Games (Android) to sign you in when it starts; depending on your settings, this can happen automatically. Once you are signed in, your total score and achievements are sent automatically, and your gamer name and score appear on a public, global leaderboard. You can decline or sign out and still play.

iOS: if you use Game Center, Apple processes your Game Center profile, scores and achievements under the Apple Privacy Policy. You can sign out or change your profile in Settings → Game Center.
Android: if you sign in to Google Play Games, Google processes your gamer profile, player ID, scores, achievements and related gameplay activity under the Google Privacy Policy. You can manage visibility or delete Play Games data in the Google Play Games settings.

We can see leaderboard entries (gamer name and score) and how many players unlocked each achievement. We do not receive your email address or contacts.

6. Purchases

Remove Ads is an optional one-time purchase made through the App Store (Apple) or Google Play Billing (Google). Apple or Google take the payment. The app receives only what it needs to unlock and restore the purchase: the product, a transaction or purchase identifier, and its status. We never receive your card number, bank details or other payment credentials. Apple and Google keep their own purchase records under their terms and the law.

7. Statistics and crash reports

App Store Connect, Google Play Console and AdMob give us aggregated reports, such as the number of downloads, sessions by country and device type, and ad performance. If you have chosen to share diagnostics with Apple or Google, they may also give us crash reports, which contain technical details like the device model, operating-system version and where in the app the error happened. We use these reports only to understand how the app is used and to fix problems. They do not identify you to us.

8. When you email us

If you write to hello@elvoren.ee, we receive your email address, your message and anything you attach. We use them only to answer you and keep them only as long as described in section 12. Our email is hosted by Zone Media OÜ in the European Union.

9. This website

This website is hosted by Cloudflare, which processes technical data such as IP addresses and request details to deliver the pages and protect them from abuse. The website sets no cookies, uses no analytics or advertising and loads no external fonts or scripts.

10. Legal bases

Where the GDPR or the UK GDPR applies, we rely on:

Consent for storing or reading information on your device for advertising, for personalised ads and ad measurement that needs consent, and for tracking on iPhone and iPad. You can withdraw consent at any time as described in section 4; this does not affect processing that happened before.
Legitimate interests for limited ads that use no device storage or identifiers, for preventing fraud and abuse, for understanding crashes and usage through aggregated reports, and for answering your messages.
Legal obligations and legitimate interests for the age screen and the age-appropriate ad and game-service settings it controls.
Performance of a contract for providing and restoring purchases.
Legal obligations for keeping accounting and tax records.

You do not have to give us any information. The age screen must be answered to play, because it decides which ad and game-service settings apply. If you do not consent to personalised ads, you still get the full game with non-personalised or limited ads.

We share information only with the providers named in this policy (Google, Apple, Cloudflare and Zone Media), and only for the purposes described. We do not sell personal data. Google, Apple and Cloudflare may process information outside the European Economic Area, including in the United States. Such transfers rely on the EU–US Data Privacy Framework where the recipient is certified, or on the European Commission's Standard Contractual Clauses.

12. How long information is kept

Information	How long
Progress, settings and age bracket on your device	Until you delete the app or clear its storage; copies in a device backup until you delete the backup
Advertising data processed by Google	According to Google's retention policies
Game Center and Google Play Games data	Until you delete it in Apple's or Google's settings
Purchase records	Kept by Apple or Google as their terms and the law require; we keep sales reports for accounting for 7 years
Your emails to us	Until your request is resolved, then for up to 24 months unless the law requires longer
Aggregated statistics and crash reports	As provided by App Store Connect, Google Play Console and AdMob

13. Your rights and choices

Depending on where you live, you may have the right to access, correct or delete personal data about you, to restrict or object to processing (including processing based on legitimate interests), to data portability, and to withdraw consent. Because Chromaflow has no accounts and we do not run servers for it, most information is on your device or held by Apple or Google. You can:

delete everything the app stores on your device by deleting the app (or, on Android, by clearing its storage), and delete any device backup in your Apple or Google account settings;
change ad choices in your device settings and, where shown, in the app's Privacy Choices option (section 4);
manage or delete Game Center or Google Play Games data in Apple's or Google's settings;
ask us anything, or exercise your rights for information we hold, at hello@elvoren.ee. We reply within one month; for complex requests the GDPR allows us two more months, and we will tell you if we need them.

You also have the right to complain to a data-protection authority. Our lead authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee); you can also contact the authority where you live.

If you live in a US state with a consumer privacy law: we do not sell personal information. Ads may be personalised only as described in section 4, and you can limit this at any time through your device's advertising settings or, where shown, the app's Privacy Choices.

14. Children

Chromaflow is a general-audience game that children may play. The age screen in section 3 makes sure that players under 13 get only non-personalised, G-rated ads with no advertising identifier, never see the tracking request, and cannot use Game Center or Google Play Games. We do not knowingly collect personal information from children beyond what Google's child-directed ad serving needs to show a contextual ad. A parent or guardian can remove everything the app keeps by deleting it, and can contact us at hello@elvoren.ee with any question or request.

15. Changes to this policy

We will update this policy when the app or the law changes, for example when we add new features or services. The date at the top shows the latest version. If a change is significant, we will also mention it in the app or in the store release notes.

16. Contact

Elvoren OÜ
Sepapaja tn 6, 15551 Tallinn, Estonia
Registry code 17601867
hello@elvoren.ee