1. Scope
Token Sheet (“the app”) is an iOS application that helps you lay out visually distinct printable tokens for in-person sessions. This policy describes what data the app processes, where it stays, and when a network connection is used. The app does not provide user accounts or a sign-in service.
2. Information you provide locally
You enter participant labels and layout choices (such as token count, sheet size, spacing, and opaque random seeds) on your device. The app stores this working data as a JSON document in the iOS Application Support directory for the app. That roster and layout information is not described here as being uploaded to servers operated by Yair Malka.
Labels you type remain under your control. Removing the app from your device will remove its sandboxed data unless you have separately exported or backed up content outside the app.
3. Network requests to avatar providers
To draw distinct circular avatars, the app downloads images from public avatar services using opaque seeds—not the text of your participant labels—in request URLs. As implemented for this product, requests include:
- DiceBear Identicon (SVG), e.g.
https://api.dicebear.com/9.x/identicon/svg?seed=… - RoboHash (PNG), e.g.
https://robohash.org/….png?size=100x100
Those third-party operators receive the seed value and standard technical data involved in an HTTP GET (such as IP address and user agent) under their own policies. We do not control their logging or retention. The app may cache downloaded image bytes in a dated folder on your device to avoid duplicate downloads while you adjust the sheet.
If the network is unavailable, rate limits apply, or a provider returns no image, the app is designed to surface that honestly rather than inventing stand-in artwork as if it were fetched.
4. What we do not do
Based on the current product design:
- No user account, registration, or cloud sync service operated by the developer for your roster.
- No in-app purchases or subscriptions are described for this release.
- No analytics, advertising, or crash-reporting SDKs are specified in the product contract beyond what iOS may provide at the system level (which this policy does not expand upon).
5. On-device processing
Visual similarity measurement, token reassignment when pairs look too alike, print layout calculation, swapping tokens while keeping labels fixed, and adding new participants without changing already issued tokens all run on your device. Opaque seeds and labels you manage locally drive those calculations.
6. Your choices and retention
From the integrated workspace you can clear local project caches and stored avatar images, and manually refresh avatar sources (with a displayed source date). Using those controls reduces what remains on the device. Uninstalling the app removes its sandboxed Application Support data.
Questions or requests about this policy: [email protected].