Privacy Policy — Kolofon

Last updated: November 3, 2026

This policy explains what personal information we collect when you visit kolofon.app, join the Kolofon waitlist or use Kolofon Icons, our Chrome extension, why we collect it, and what you can do about it.

Kolofon is based in Ontario, Canada ("we", "us").

The short version

• We collect your email address and your email choices when you join the waitlist. Nothing else is required.
• We use your email to send you an invitation when a place opens. If you also tick the box for updates, we may send occasional Kolofon news.
• We do not sell your information, and we do not use it for advertising.
• You can ask us to delete your email at any time: support@kolofon.app.
• Kolofon Icons, our Chrome extension, sends nothing about you to us. See its section below.

What we collect

When you join the waitlist:

• Your email address: to send your invitation, and updates only if you asked for them.
• Which email choices you selected, and the date and time: to keep a record of what you agreed to.
• The date you joined and the page you joined from: to invite people in the order they joined.

When you visit the site:

• Our hosting and security provider, Cloudflare, processes technical information such as your IP address, browser type and device signals. This keeps the site running and blocks automated abuse (Cloudflare Turnstile checks that a real person is filling in the form). We do not store your IP address with your waitlist entry.
• We use Cloudflare Web Analytics to count visits and see which pages are read and how fast they load. It does not use cookies, does not track you across websites, and does not build a profile of you. We do not use advertising cookies or advertising trackers.

What we do not collect: the waitlist does not ask for, and we do not want, any information about children. Please don't include it in messages to us.

How we use it

• To send you an invitation email when a place opens.
• If you opted in: to send occasional news and product updates about Kolofon. Every such email has an unsubscribe link.
• To protect the waitlist from spam and abuse.
• To meet legal obligations (for example, keeping a record of your email choices).

We do not sell, rent or trade your personal information. We do not use it to build advertising profiles.

Who processes it for us

We use these service providers. They process your information only to provide their service to us:

• Cloudflare, Inc.: website hosting, security, bot protection (Turnstile) and privacy-first visit statistics (Web Analytics). Global network; company based in the United States.
• Supabase, Inc.: the database that stores the waitlist. United States.
• Google LLC (Google Workspace): our company email, if you write to us. United States and other countries.
• Resend, Inc.: sending invitation and update emails. United States.

Information stored outside Canada

Our providers store and process information in the United States and possibly other countries. While it is there, it may be accessible to courts, law enforcement and national security authorities of those countries under their laws.

How long we keep it

• If you stay on the waitlist without being invited or joining, we delete your email after 18 months without activity.
• If you ask us to delete it, we delete it within 30 days.
• Backups are overwritten on a regular schedule and follow the same rules.

Your choices and rights

You can:

• Unsubscribe from updates using the link in any update email, or by writing to us.
• Ask what we hold about you, and get a copy.
• Correct your email address.
• Withdraw your consent and ask us to delete your information.

Write to support@kolofon.app. We answer within 30 days. We may ask you to confirm the request from the email address on the waitlist.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca). If you live elsewhere, you may also have the right to complain to your local privacy authority.

Security

We limit who and what can access the waitlist and protect the form against automated abuse. No system is perfectly secure; if a breach creates a real risk of significant harm, we will tell you and the Privacy Commissioner as the law requires.

Children

Kolofon is a tool for parents and caregivers. This site and waitlist are for adults, and we do not knowingly collect information from children.

Kolofon and Yoto

Kolofon is an independent product. It is not made, sponsored or endorsed by Yoto. Joining our waitlist does not share anything with Yoto. Kolofon Icons, our Chrome extension, uploads to your Yoto account only the icons you add, from your browser.

Kolofon Icons (Chrome extension)

Kolofon Icons is a free Chrome extension that suggests pixel icons for the tracks of a Yoto Make Your Own card and adds the ones you choose to your Yoto account. It is an independent tool, not made, sponsored or endorsed by Yoto.

The short version:

• The extension reads your card's track titles inside your browser to suggest icons. Titles never reach Kolofon. They leave your browser only inside an icon you add that shows a word from them (see below).
• To add icons, you connect your Yoto account on Yoto's own sign-in page. Kolofon never sees your password.
• Icons you add are uploaded from your browser to your Yoto account. Nothing goes through Kolofon's servers.
• The extension has no analytics, no tracking and no ads. You don't need a Kolofon account.

What the extension reads, and where it goes:

• Track titles and current icons of the card open in the Make Your Own editor: to suggest matching icons. They stay in your browser.
• What you type in the icon search: to find icons. It stays in your browser.
• A word, number or sum drawn into an icon, from a short track title (for example a name) or typed by you in Make: to make that icon. It stays in your browser, unless you add the icon: then the picture, showing the word, goes to your Yoto account.

What the extension stores in your browser, in Chrome's storage for the extension, on your computer only:

• Your Yoto sign-in: so you don't have to sign in each time.
• Which icons are already in your Yoto account: so the same icon isn't uploaded twice.
• The icon you last added for a track title: to suggest it first when that title comes up again.
• Simple settings and counts, such as notes you've closed: to show the extension's notes at the right time.
• A copy of the extension's notes: so the panel opens quickly.

Sign out in the extension's panel to delete your Yoto sign-in. Removing the extension deletes everything it stored. Icons you added stay in your Yoto account; you can remove them in Yoto's app.

What the extension sends, and to whom:

• To Yoto: when you sign in, you do so on Yoto's page, under Yoto's privacy policy. The extension asks only for access to your custom icons and to stay signed in; it doesn't read your account details, such as your email. When you add icons, it uploads the icon images and places them on your tracks. An icon made from a word shows that word in its picture; its file name doesn't contain it. Nothing else about you is sent.
• To Kolofon: nothing about you. From time to time, the extension downloads a short file of notes from us (for example, news about new icons). The request is the same for everyone, with no cookies and no identifier. Our hosting provider, Cloudflare, sees your IP address to deliver it, as with any website; we don't keep it.
• Links to kolofon.app: they show which part of the extension they came from, so we know which ones help. They carry nothing about you. If you open one, the rest of this policy applies to your visit.

We don't sell or transfer information from the extension, and don't use it for advertising, credit decisions or anything other than suggesting and adding icons.

Track titles can include a child's name. Kolofon never receives them. A name leaves your browser only if you add an icon that shows it: the extension can suggest one for a short title but never picks it for you, and it goes only to your Yoto account. The extension is for the parent or caregiver who manages the Yoto account.

Questions about the extension: support@kolofon.app.

Changes

If we change this policy, we will update the date at the top. If a change affects how we use the email you already gave us, we will tell you before it applies.

Contact

Privacy questions: support@kolofon.app