Privacy Policy

Your photographs

Tonalith processes photographs and reference images locally on your device. They are not uploaded to Tonalith servers. Exported files are created on your device and downloaded through your browser.

Information we collect

The public beta does not require an account. When diagnostics are enabled for a release, Tonalith sends limited technical information to Sentry and PostHog to investigate errors, failed photo loading, GPU context loss, and freezes, and to understand whether loading operations complete.

This information can include event timestamps, operation names, completion or failure status, operation duration, error types, application stack locations, the application environment and release, available device memory and processor-count information, and a temporary random session identifier. Session identifiers are not linked to an account or used to identify you by name.

We do not send photo or reference-image content, filenames, camera metadata, edit settings, or exported images in diagnostic events. Error messages are removed or replaced with generic descriptions. Automatic click capture, session recording, heatmaps, and person profiles are disabled.

Requests to these services necessarily expose network information, such as an IP address, and may expose browser request headers to the receiving provider. Removing these fields from our event payloads does not prevent providers from receiving ordinary network information.

Local browser storage

Tonalith may store settings, edit recovery data, and application state in your browser so work can survive a refresh or interruption. Tonalith also stores a small diagnostic checkpoint containing an operation name and random identifier, so a later launch can recognize an unfinished loading operation. These locally stored records remain on your device and can be removed by clearing site data in your browser. Clearing local storage does not delete diagnostic events already sent to a provider.

Hosting and fonts

The website and editor are delivered through Cloudflare, which may process ordinary request information such as IP address, browser details, requested pages, and timestamps for security and delivery. The site currently loads fonts from Google Fonts, which may receive similar request information under its own privacy terms.

Diagnostics providers and storage locations

We use Sentry for error monitoring, configured to store project event data in Germany, and PostHog for limited product and performance events, using its US Cloud region. Information sent to PostHog is therefore transferred to and processed in the United States. Providers may use subprocessors and process account, support, or infrastructure information in other locations described in their terms.

Learn more about Sentry's privacy practices, PostHog's privacy practices, and Cloudflare's privacy practices.

Cookies

Tonalith does not set advertising or analytics cookies. PostHog identifiers are held in page memory rather than persisted in an analytics cookie. The separate local diagnostic checkpoint is used to recognize interrupted operations. Infrastructure providers may use essential security or delivery mechanisms when necessary to operate their services.

Changes

This policy may change as Tonalith develops. The effective date will be updated when material changes are published.