Paint Passport by Agonplay
Paint Passport Privacy Policy
Paint Passport is a colour-sorting and picture-colouring game for iPhone.
Last updated 5 September 2026
Paint Passport has no accounts, no advertising, no third-party analytics and no tracking. It does send us a small, anonymous record of how levels are going, and that record contains nothing that identifies you or your device.
What stays on your phone
- Your progress. Which level you are on, your lives, undos, tubes and gold.
- Your pictures. Which pieces of each region's picture you have painted, and which pictures you have finished.
- Your settings. Language, sound, music, haptics.
All of it is written inside the app on your iPhone. It is included in your own iPhone backup, because that is how iOS backs up any app's files, and that backup is between you and Apple.
What the app sends us, exactly
The game is a thousand levels long, and we cannot tell from the outside which of them are unfairly hard. So the app records a short list of gameplay events and sends it to our own server. This is the complete list of what a record can contain, with no exceptions:
| Field | What it is | Example |
|---|---|---|
| event | one of ten: level started, level won, level restarted, move undone, extra tube used, colouring opened, picture finished, gold pack bought, saving failed, unexpected error | level won |
| level | the level number it happened on | 312 |
| time | when it happened | 26 Aug 2026, 14:07 |
| moves | how many moves that level took | 47 |
| perfect | whether it was finished without undos or extra tubes | yes / no |
| picture | which region's picture was finished | afrika |
| reason | on an unexpected error only: a short technical summary, cut to 40 characters. File paths are stripped out before it is sent, so it names the kind of fault and nothing about you or your device | StateError: Bad state: No element |
That is the whole payload. Our server is written to copy only these fields and discard anything else, so nothing beyond this list can be stored even by accident. The technical summary is the only free-form text we ever receive; the app removes file paths from it and shortens it before sending, and the server shortens it again.
Why it is not linked to you
- There is no identifier. The app does not create, read or send a user ID, an install ID, a device ID or Apple's advertising identifier. It has no code that can produce one.
- We do not keep your IP address. Neither the game's server nor the web server in front of it writes an access log, so ordinary requests from the game leave no record of the address your phone connects from. The web server can note an address in its own fault log if a connection breaks; those entries are not linked to any game data and are not used for anything.
- Records are not grouped into people. The app simply sends the events it has not sent before. Nothing ties one record to another, so what reaches us is a pile of individual events, not a history of a player.
- No third parties. There is no analytics SDK, no advertising network and no data broker. The events go to a server we run and nowhere else.
What this means when you ask us to delete your data
Being anonymous cuts both ways, and we would rather say so plainly than promise something we cannot do. Because no record carries an identifier, we have no way to find which events came from your phone, and therefore no way to hand them back or delete them individually. Deleting the app removes everything it stored on your phone. The anonymous events already sent stay in an undifferentiated pile that cannot be traced to you or anyone else.
Purchases
Paint Passport sells gold, which buys lives, undos and extra tubes inside the game. Gold never unlocks levels, regions or pictures, and every level is playable without paying.
The purchase itself is handled entirely by Apple through the App Store. Paint Passport never sees your payment details, your Apple Account or your name; it only asks iOS whether a purchase completed. The app does record that a purchase happened, as one of the ten events listed above, so that we can tell whether the shop is working. That record carries no product, no price, no receipt and no identifier, only the event and the level you were on.
Advertising
There is none, and there is no tracking for advertising purposes.
Children
Paint Passport is not directed at children, and it collects no personal information from anybody, of any age.
Changes
If this policy ever changes, the updated version will be posted on this page with a new date at the top.
Questions
Write to support@agonplay.com.