Privacy Policy

Last updated:

This policy covers the toon.gg website, the Toontown in Unity game, the Workshop, and messages you send to our team.

Accounts are for people aged 13 and older. We ask you to confirm this at signup. We do not ask for or store your birthdate.

Who runs the service and how to contact us

This service is run by the Toontown in Unity team. Send privacy questions and requests to privacy@toontownunity.com. This is the contact for questions about our own records and the providers we use.

We are an independent fan project. The Walt Disney Company and Disney Interactive Media Group do not operate this service.

What we collect and why

Account information
When you sign up, we receive your username, email address, password, and confirmation that you are 13 or older. We store a protected password hash, not a readable copy of your password. We also keep account identifiers, creation and update dates, email-verification status, account permissions, and login activity. We use these to sign you in, manage access, send verification and password-reset emails, and protect accounts. The age checkbox does not create an age or birthdate record. When you agree to the Terms of Use, we record the version, time, and whether agreement happened during signup, account use, or a guest submission. This record is linked to your account or guest identifier.
Game information
Playing creates records such as your Toon names and appearance, progress, inventory, friends, game activity, purchases made with jellybeans, and Workshop earnings. These records are linked to your account so we can save your game and run multiplayer features.
Chat and moderation
We store game chat messages with the Toon identifier, in-game location, and time. Staff can use these records to investigate reports and enforce game rules. Other players can see messages sent to them or to a shared chat. Do not put your real name, address, phone number, school, password, or other private information in chat or Toon names.
Workshop submissions
We receive the item name, selected shape or clothing type, uploaded textures, and submission details when you submit an item for review. We associate it with your account or a guest identifier and keep its review status. Staff review submissions; approved item names and textures can be made available on the website and in the game. Signing in also lets us connect eligible sales and earnings to the creator. Guest submissions do not earn rewards. Trying a texture in the local preview does not by itself submit it for review.
Connection and diagnostic information
Visiting the website or connecting to the game sends technical information such as your IP address, browser or client details, requested resources, and connection times. Our hosting and security providers process this information to deliver the service and prevent abuse. Server logs and error reports can include account or Toon identifiers, actions, errors, and diagnostic details. We use these to investigate failures and keep the service running.
Messages and applications
If you contact us, we receive your email address, message, and anything you attach. If you apply to join the team through our linked Google Form, we receive the answers and files you choose to submit. We use this information to respond to your request or review your application. Only send information needed for that purpose.

Cookies, bot checks, and tracking

Cookies are small pieces of information kept by your browser. The website uses them to keep you signed in, remember a login when you choose that option, protect forms against forged requests, and carry short messages between pages.

Guest Workshop access uses a protected guest-identifier cookie that lasts up to 30 days and a verification cookie that lasts up to 30 minutes. The identifier connects that browser to its submissions; “guest” does not mean that no information is collected. Clearing these cookies can remove your ability to manage guest submissions.

Where enabled, Cloudflare Turnstile checks whether a visitor is likely to be a bot. Cloudflare receives information such as your IP address, browser details, connection fingerprint, and the site where the check runs. It uses these signals for security and to improve its bot detection. See the Turnstile Privacy Addendum and Cloudflare Cookie Policy.

We do not use advertising cookies or advertising pixels in the website code. Essential cookies and security signals still identify a browser or session. Downloading fonts, scripts, images, or other resources from a provider also sends that provider connection information, even without a tracking cookie.

You can block or delete cookies in your browser. Doing so may prevent login, verification, or guest Workshop features from working. This does not delete account, game, or submission records already stored on our servers.

Who receives information

Our team uses information to operate the service, support players, and review content. Service providers also process information when they host our systems, deliver files or email, or protect the site.

Other players receive the information needed for shared gameplay, such as Toon names, appearance, and chat. Approved Workshop artwork is public and may be downloaded or copied by others. Do not include personal information in artwork or item names.

Discord is a separate service. Following our Discord link and using that service is covered by Discord’s privacy policy. Following that link does not share your game account records with Discord.

We do not sell personal information. We may disclose relevant records when required by law or when reasonably necessary to respond to a serious safety threat. We limit the information to what is relevant to the request or incident. Privacy requests can include questions about which providers received your information.

Parents and accounts belonging to children under 13

We do not offer registration for children under 13 or a parental-consent signup process. The age confirmation is a statement by the person signing up, not proof of age. Guest access is not an exception to our 13+ policy.

If you believe your child under 13 has used the service, email privacy@toontownunity.com. You can ask us to:

Include the username, Toon name, or submission link if you know it, your relationship to the child, and what you want us to do. Do not send passwords, a birth certificate, or identity documents with your initial request. We may ask for limited information to check that you are the parent or guardian before sharing or changing private records.

We handle these requests manually. When an account is confirmed to belong to a child under 13, we will disable access and arrange removal of the child’s personal information, subject to any records we must retain for a specific legal obligation. Stopping collection through an account means the child cannot continue using that account. If the child returns to a public page, the browser will still send the technical information needed to load it.

You can contact us about a guest submission too. Include a submission link or item name if possible; do not ask your child to upload more personal information to identify it.

Keeping, reviewing, and deleting information

Account and game records are stored so your account and progress remain available. Submission records support review, the item catalog, and creator earnings. Chat and diagnostic records support moderation and troubleshooting. These records do not all disappear when you log out, uninstall the game, or clear browser cookies.

Email privacy@toontownunity.com to request a copy of your information, correction, account closure, or deletion. Send the request from your registered email address if possible, include your username or guest submission link, and tell us what you want done. These requests are handled manually; there is no automatic account-deletion tool.

We may need to verify account ownership or your authority to make a request before sharing or changing private records. Do not send your password or identity documents with your initial request. Applicable legal response deadlines still apply.

Disabling an account does not delete its records. Deletion can affect saved progress, items, and uncollected earnings. Some records may need to be retained for legal obligations; backup copies and provider-held logs may have separate retention periods. Copies of public artwork or messages held by other people are outside our control.

There is currently no single automatic deletion schedule covering all account, game, chat, and Workshop records. Contact us about the records you want reviewed or deleted.

Information may be processed in countries where our hosting, email, and other providers operate. We use access controls and protected connections to reduce unauthorized access, but no online service can promise perfect security.

Additional rights where you live

Depending on applicable law, you may have rights to access, correct, delete, or receive a portable copy of your information; restrict or object to certain uses; withdraw consent for processing based on consent; and complain to a data-protection regulator. Withdrawing consent does not undo processing that was lawful before withdrawal.

Contact us to exercise these rights, ask about recipients of your information, or have an authorized representative make a request. We may need to verify the representative's authority. You can also contact the relevant regulator directly. We will not penalize you for exercising applicable privacy rights, although deleting information needed for an account can prevent its continued use.

Changes to this policy

We will update this page and its date when our practices change. Material changes will also be announced on the website. Contact privacy@toontownunity.com if anything here is unclear.