Privacy notice

This notice explains what FrostTally does with personal information. FrostTally is an independent editorial desk based in Melbourne, Victoria, and it publishes a single running file of reviews of sweet-themed puzzle games available on Google Play. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) made under it.

Questions about anything below can be sent to news@frosttally.com. We answer from the same address that sends our editorial notes.

1. What we collect

Information you give us

The list form on the top page asks for an e-mail address and, optionally, a name. It also records the consent you tick, together with the date and time you ticked it, because the Spam Act 2003 (Cth) requires us to be able to show that consent existed. There is no telephone field on this site and we do not want your number.

Information created by your browser

Our hosting provider writes ordinary server logs: the IP address the request came from, the user agent string, the page requested and the time of the request. These logs exist to keep the site running and to see whether something is broken.

Notification identifiers

If you allow browser notifications, OneSignal generates a subscription identifier for the browser you allowed it in, and stores that identifier together with a browser and platform description. That identifier is not your name and cannot be read as one, but it is personal information while it is linked to your subscription.

Your consent choice

Your answer on the consent bar is stored in this browser's local storage under the key ftConsentChoice. It never leaves your device and it is what stops the bar reappearing on every page.

2. Why we hold it and on what basis

The e-mail address and name are used for one purpose: to send you a short note when an entry joins the file or when a rating we published has moved far enough to change what we wrote. The basis is your consent, given on the form and recorded with it. Server logs are held for the security and stability of the site, which is a normal function of operating an online service under APP 3. Notification identifiers exist only to deliver the same notes as a push message, again on consent.

We do not build profiles, we do not score readers, and we do not make automated decisions that affect anyone.

3. Who else handles it

Push notifications and the list itself are operated through OneSignal, Inc., which acts as our processor. Data supplied to OneSignal may be stored on servers outside Australia, including in the United States. Before disclosing personal information to an overseas recipient we take the steps APP 8 requires of us, and by giving consent on the form you also accept that this cross-border handling takes place.

Our hosting provider and its content delivery network necessarily process the server logs described above. Beyond those two, no one receives your personal information. We do not sell it, we do not rent it, and we do not pass it to advertisers, because this site carries no advertising and sells no placements.

We may disclose information where an Australian law, court or regulator requires it, and only to the extent required.

4. How long we keep it

List entries are kept until you unsubscribe or ask us to delete them, and are removed within thirty days of that request. Consent records are kept for as long as we hold the entry and for two years afterwards, so that we can answer a question about how a subscription started. Server logs are cycled out within twelve months. Notification identifiers disappear when you revoke the permission in your browser or choose Decline on the consent bar.

5. Your rights

Under APP 12 and APP 13 you may ask what personal information we hold about you and ask us to correct it if it is wrong. You may also revoke consent at any time: use the unsubscribe link in any message, switch notifications off for this site in your browser settings, or write to news@frosttally.com and we will remove the record. Revoking consent does not affect anything sent before it.

Requests are answered within thirty days and we do not charge for them. If our answer does not satisfy you, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, which is the supervisory body for the Privacy Act 1988 (Cth). We would rather hear from you first so that we can fix it.

6. Security

The site is served over an encrypted connection. Access to the list is limited to the people who write the editorial notes, protected by individual accounts and two-factor authentication. If something goes wrong with personal information in a way that is likely to cause serious harm, we will follow the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act 1988 (Cth) and notify both the affected people and the Commissioner.

7. Age

FrostTally is not intended for people under 15 years of age and we do not knowingly hold personal information about them. If you believe a child under 15 has joined the list, write to us and the entry will be deleted.

8. Cookies and similar storage

What is stored in your browser, why, and how to clear it is set out separately in our cookie notice.

9. Changes

If this notice changes, the date at the top changes with it and the previous wording is replaced. A change that materially affects how we use existing list entries will be announced in a message to the list before it takes effect. This version applies from 18 August 2026.