Legal
This policy explains what information Chroma collects and how it is used.
Effective date: July 30, 2026
Chroma maintains server-side records needed to operate the game, preserve progress, run leaderboards, deliver purchases, and protect the integrity of its virtual economy. These records are generally associated with pseudonymous account and player identifiers rather than a real-world identity. Apple processes App Store payments; Chroma does not receive or store full payment-card information.
Chroma receives cryptographically signed transaction, refund, and revocation information from Apple. Chroma does not currently send purchase-consumption information to Apple.
We use this information to operate and synchronize Chroma, preserve collections and progress, deliver and verify purchases, award challenges and prizes, run events and leaderboards, prevent duplicate grants and fraud, reconcile refunds and revocations, provide support, secure and troubleshoot the service, and understand how Chroma can be improved.
Apple processes Chroma's in-app purchases and may send Chroma cryptographically signed notifications concerning transaction status, refunds, revocations, and refund reversals. Chroma uses these notifications to reconcile purchased virtual currency and protect the integrity of its virtual economy and public competitions.
Following a final refund or revocation, Chroma may debit remaining points associated with the purchase, record an attributable point balance shortfall, temporarily restrict point-funded activity, and remove the affected account from public Weekly competition until the balance is reconciled. A refund reversal may restore the corresponding game state when appropriate. Apple—not Chroma—makes the final refund decision.
Chroma does not currently send purchase-consumption information to Apple. If that changes, we will update this policy and obtain any consent required before sending that information.
We use Apple for App Store purchases and signed transaction notifications; Google Firebase and Firebase App Hosting for authentication, databases, backend services, hosting, operations, and analytics; and Resend to deliver messages submitted through our contact form.
Chroma does not sell personal information or share it for third-party targeted advertising. We may disclose information when required by law, to protect users or the service, to investigate fraud or abuse, or as part of a business transaction subject to appropriate protections.
We retain information for as long as reasonably necessary to operate Chroma, maintain account and game continuity, provide support, and meet security and legal obligations. Purchase, refund, duplicate-grant, fraud-prevention, accounting, legal, and dispute records may be retained longer than ordinary gameplay data when needed to preserve transaction integrity.
You may request access to, correction of, or deletion of Chroma-held information by contacting us. We may need to verify your identity before completing a request. Some transaction, security, fraud-prevention, accounting, legal, or dispute records may need to be retained even after other account information is deleted.
We use reasonable administrative, technical, and organizational safeguards designed to protect Chroma-held information. No method of transmission or storage is completely secure, so absolute security cannot be guaranteed.
We may update this Privacy Policy as Chroma evolves. If this policy changes materially, we will update this page with a new effective date.
Questions about this policy can be sent to support@chromacollecting.com.