Privacy Policy
Last updated: 20 August 2026
Draft. Written to describe what the software actually does
today. Have it reviewed by a lawyer before you take payment, and update it whenever you add a
new data flow or third-party service.
What we collect
| Data | Why | When |
|---|---|---|
| Display name and avatar choice | To show you in the game | Every game, including as a guest |
| A random browser ID | To restore your score if the server restarts, and to keep your history | Stored in your browser; sent when you join |
| Chat messages and drawings | To run the game | Held in memory during a game, not stored afterwards |
| Email address and password hash | Only if you create an account | Stored until you delete your account |
| Game results (score, rank, room code) | To show your history and stats | Stored when a game finishes |
| IP address | Rate limiting and abuse prevention | Held briefly in memory, not stored in the database |
What we do not do
We do not sell your data. We do not run advertising or third-party tracking. We do not store your drawings or chat once a game ends.
Passwords
Passwords are hashed with scrypt and a unique per-account salt. We cannot read your password.
Payments
If you subscribe, payment is processed by Stripe. We store only a customer reference and your plan status; we never receive your full card number.
Your rights
While signed in you can, from the account menu:
- Export your data - download everything we hold about you as JSON.
- Delete your account - removes your profile, sessions, word packs and browser links. Past game rows are kept but anonymised, so other players' scoreboards do not develop holes; nothing identifying you remains.
For anything else, email [email protected].
Children
Drawblins is not directed at children under 13, and accounts should not be created by them.
Where data is stored
Data is stored on servers in Europe. If you are outside that region, your data is transferred there to provide the service.