There is no Tollgate account. No email, no password, no sign in with Apple, no profile. You download the app, set up in a minute, and it works. This is by design, and permanent for the core experience.
What identifies “you,” then
On first launch, Tollgate mints one random ID, a string of random characters generated on your phone. It is not derived from your name, email, phone number, Apple ID, or device serial. It exists for exactly two jobs:
- Rate limiting. Question flags and topic requests have modest daily caps per device so the editorial queue stays usable.
- Aggregate stats. The four anonymous numbers that occasionally sync are keyed to this ID, so we can tell “one person converted 40 minutes” from “four people converted 10.”
Nobody can look at that ID and find you, and we could not attach it to your identity if asked, because nothing links it to one.
What no account means in practice
- Nothing to breach. A leak of Tollgate’s server data would expose random IDs and quiz tallies, not identities.
- Nothing to recover. No password resets, ever.
- Purchases work anyway. Pro rides on your Apple ID through the App Store, so restoring on a new phone needs no Tollgate login.
- The honest trade-off: there is no cloud backup of your stats. Your history lives on your phone alone, so deleting the app deletes it, and moving to a new phone starts the stats fresh. That is the cost of the architecture, and we think the deal is good.