Privacy Policy

1. Who looks after your information?

MyToneMatch is responsible for the information described here. If you have a question or want to make a privacy request, the MyToneMatch Privacy team is here to help at mytonematch@gmail.com.

2. What information do we handle?

For ordinary browsing, we do not ask for your name, email address, payment details, or government ID. We also do not intentionally send information that directly identifies you to Google Analytics.

3. What stays in your browser?

Saved candidates retain the shopping market, public product, shade and configuration identifiers, names and save date in this browser until you remove them or clear browser data. Comparison selection lasts for this tab session. Saved lists and comparison send the displayed candidates’ public identifiers to retrieve current photos and information; this does not save candidates to an account or database.

With analytics permission, MyToneMatch records a random per-tab session identifier and public market, product, shade, offer and event identifiers. Search text, feedback notes, account IDs, IP addresses and device information are not included in these first-party event records. Records are available for 30 days; expired rows are removed when new records are stored.

Voluntary feedback stores the selected product, shade and offer, or the current market and page path (without search text or tracking parameters), reason and optional explanation. Reports and processing status are available for 90 days; expired reports are removed when a new report is stored. Do not submit personal information. A receipt is kept in this browser to retrieve status; report text is not stored in browser storage or sent to analytics. Authorized reviewers handle reports.

To protect feedback and event endpoints from repeated requests, the server briefly uses the network address to create a keyed hash that changes each minute. The private request counter contains only this hash, endpoint group, count and expiry. Counters are valid for at most two minutes and expired rows are removed on the next request. Raw addresses and report text are not stored in these counters. Application error reference records contain only a generated reference, operation and error category; they do not contain report text or receipt tokens.

• mytonematch_market remembers your shopping region for up to one year. Related browser storage may retain the same choice until you clear it.
• mytonematch:analytics-consent:v1 remembers whether you allowed or declined analytics until you change the choice or clear site storage.
• The consent cookie mytonematch_analytics_consent stores only allowed/denied for up to one year. The per-tab journey session in session storage ends when the tab closes; feedback receipts in local storage remain until you clear them.
• Earlier versions saved a delivery country in the cookiemytonematch_shipping_country and browser storagemytonematch.shipping-country. The public experience no longer reads or updates this setting, or detects a country for it. Previously saved values may remain until they expire or you clear site data in your browser.
• Optional profile and interface preferences are stored locally in your browser and are not uploaded as part of the current public experience.
• If you allow analytics, Google may set _ga and _ga_* first-party cookies. Google documents a default expiration of two years, subject to browser limits.

Analytics stays off until you choose “Allow analytics.” You can change your mind at any time from the bar-chart button at the bottom of a public page. Blocking or clearing browser storage may reset your saved choices, but you can still use the main parts of the site.

4. Who helps us run MyToneMatch?

We use the contractual and technical safeguards these providers make available, including appropriate international-transfer protections where required. You can decline Google Analytics and keep using the site. Hosting requests are necessary for the site to work.

5. Do we sell your information?

No. We do not sell personal information or give it to other companies for their own direct marketing. The providers above handle information only to run their services for us or as described in their terms. Google Ads is not linked to this analytics property, and Google account data-sharing options are turned off.

Product links may be affiliate links. A retailer receives information according to its own privacy policy only if you choose to follow a link to that retailer; MyToneMatch does not control the retailer’s subsequent processing.

6. How long do we keep information?

We keep information only for the periods above, or for as long as we need it for security, disputes, or legal obligations. When we no longer need it, we delete or anonymize it. You can remove data stored in your browser through its settings. Turning analytics off stops future collection in that browser, but it does not automatically erase information already processed.

7. What choices and rights do you have?

Privacy rights vary by location. Depending on where you live—including certain U.S. states—you may ask to access, correct, delete, restrict, object to, or receive a copy of your information. You can also withdraw consent without affecting processing that already took place. Email mytonematch@gmail.com with the subject “Privacy request.” We may ask for the minimum information needed to verify your request and will respond as required by applicable law. If you are unhappy with our response, you may contact your local privacy or data-protection authority.

8. A note for parents and guardians

MyToneMatch is a general-audience beauty information service, not a service designed for children under 14. We do not knowingly ask children for personal information on the current public site. If you believe a child has shared personal information with us, contact us and we will help with a deletion request.

9. How do we protect information?

We use reasonable safeguards, including encrypted connections and access controls. No online service can promise perfect security, but we work to keep the limited information we handle protected. If this policy changes in an important way, we will update the date above and provide additional notice when the law requires it.

Want to learn more?

• How Google uses information from sites that use its services
• Google Analytics data safeguards and controls
• Vercel Privacy Notice