Privacy policy

Effective 11 October 2026 · applies to the iPhone app Toco Candy and this website.

In short

Toco Candy has no account, no ads, no analytics and no tracking. Your progress stays on your device. Data is sent to our server only if you voluntarily join the leaderboard.

Progress on your device

Levels, coins, characters and clothing are stored locally on your iPhone. They are deleted together with the app and are not transmitted.

Leaderboard

Taking part is optional and starts only when you choose a public player name. The app then sends to our server api.tocacandy.startwind.io:

• a randomly generated installation ID and an access key (stored on the server only as a hash),
• the player name you chose,
• the number of levels you completed,
• your active character and your characters' outfits.

Player name, level count and outfits are visible to other players in the leaderboard, so please don't use your real name. The purpose is the leaderboard itself; the legal basis is Art. 6(1)(b) GDPR. The data is kept until you ask us to delete it. To prevent abuse, your IP address is briefly processed only as a keyed hash for rate limiting (Art. 6(1)(f) GDPR).

Servers and logs

Server and website are operated for us by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen in Germany. Requests create technically necessary server logs (IP address, time, request, browser or app identifier) to deliver the service and keep it secure (Art. 6(1)(f) GDPR). They are deleted after a short time. This website sets no cookies and embeds no third-party services.

No sharing

We do not share data with third parties, do not sell data and do not use it for advertising.

App Store

The app is distributed through Apple's App Store; Apple's privacy policy applies to that.

Your rights

You have the rights under Art. 15 to 21 GDPR: access, rectification, erasure, restriction, data portability and objection, and the right to lodge a complaint with a supervisory authority. To delete your leaderboard entry, an email with your player name is enough.

Controller

Nils Langner
Steckelhörn 11
20457 Hamburg
nils.langner@startwind.io