ToneSlime
Privacy Policy
Last updated October 10, 2026.
ToneSlime is an ear-training game. You can play before you sign in. Until you sign in, the progress stays in that browser. This policy says what information the app collects, how that information is used, where it is stored, who it is shared with, and how you can ask for it to be deleted. It covers play before an account, an account you create with an email address, and an account you open with Google.
Who this policy is for
This policy applies to the ToneSlime website and to the ToneSlime app name shown on Google’s sign-in screen. The developer you can contact is Isaac, at [email protected].
Information we collect
We collect only what the game needs to know who you are and where you left off.
- Email address. You type it when you create an account, or Google sends the verified email address when you choose Continue with Google.
- Password. Only if you create an account with email. We store a scrambled hash and a salt. We do not store the password you typed.
- Google account ID. A numeric ID Google calls a subject identifier. We store it so the same Google account opens the same ToneSlime save.
- Game progress you create by playing: the stage you have reached, slime growth, boss progress, scores, and related play records.
- A sign-in cookie named ts_session. It is created after a successful sign-in and keeps that browser signed in.
- Whether the account has unlocked the rest of the course. If you pay, Stripe processes the card. We store that the account is unlocked. We do not store the card number.
- Settings you choose in the browser, such as solfege and piano range. These stay on that device. They are not sent to the account database.
Google user data
When you click Continue with Google, ToneSlime uses Google Identity Services. Google shows its own consent screen. The sign-in asks for the OpenID, email, and profile information Google includes with that button. From Google’s response, ToneSlime reads your email address, whether that email is verified, and your Google account ID.
We store the verified email address and the Google account ID. We do not store your name, profile photo, contacts, calendar, files, or any other Google account content. We do not receive your Google password. If that email already has a ToneSlime account, Google sign-in opens that same save.
We use Google user data only to sign you in and to keep your ToneSlime save attached to you. We do not use it for advertising. We do not sell it. We do not use it to train models. We do not transfer it to another app, except to the company that hosts ToneSlime’s database so the account can be saved, or if the law requires it.
ToneSlime’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How we use information
- To create your account and let you sign in again.
- To save and restore your place in the ear-training course.
- To keep the sign-in cookie working in your browser.
- To answer a request you email us about your account.
- To remember that a paid account can play past stage 50.
We do not use your information to build advertising profiles, and we do not use it to generate images, video, or other media.
How we share information
We do not sell personal information. We do not share Google user data with advertisers or data brokers. The account and the save are stored in a database hosted by Railway in the United States, so Railway processes that data only to run the hosting. If you pay, Stripe processes the payment. We may disclose information if a law, court, or government request requires it. We do not share it for other reasons.
How long we keep it
We keep the account, the Google account ID, the email address, and the game save until you ask us to delete them. The sign-in cookie lasts until you sign out or it expires. Browser settings stay on your device until you clear them.
How to access or delete your information
Email [email protected] from the address on the account. Ask us to delete the account, and we will delete the email address, the password hash or Google account ID, and the saved game. You can also sign out in the app, which removes the sign-in cookie from that browser.
Security
The site is served over HTTPS. Passwords are stored only as a hash. The sign-in cookie is marked so page scripts cannot read it, and it is sent only to ToneSlime.
Children
ToneSlime is not directed at children under 13, and we do not knowingly collect their information. If you believe a child under 13 has given us an account, email us and we will delete it.
Changes
If this policy changes, the date at the top of this page will change with it. The new text replaces the old text for visits after that date.
Contact
Questions about this policy or about Google user data: [email protected]. The terms for using the game are on the Terms of Service page.