Privacy Policy
This policy explains what data You Draw (“we”, “us”), operated by You Draw, collects when you use youdraw.io and the You Draw game, why, and what choices you have. Contact: hello@youdraw.io .
1. What we collect
When you play as a guest
- The name and avatar you choose, shown to other players in your room.
- A random guest identifier stored in your browser, so moderation (for example a kick from a room) applies to you consistently.
- Gameplay data such as your guesses, drawings, chat messages and scores. These are processed in real time to run the game and are not linked to an account.
When you create an account
- Your email address, display name and a securely hashed password (we never see or store your password in plain text).
- Session information: a session cookie, plus the IP address and browser type of the device you signed in from, used to keep you signed in and protect your account.
- Game history and statistics: games played, placements, points, best score and similar stats.
Reports and safety
When someone reports a drawing we store a snapshot of the drawing, the word, the room code, the round and the names (and account, if any) of the reporter and the artist, so we can review it. Our servers also process IP addresses to prevent abuse (for example rate limiting) and keep short-lived technical logs.
2. How we use data
- To run the game, match you with other players and show your name, avatar, drawings and messages to them (performance of a contract).
- To keep your account and stats (performance of a contract).
- To keep the community safe: filtering chat, handling reports, preventing spam and cheating (legitimate interests).
- To show ads that fund the free game, as described below (consent where required by law, otherwise legitimate interests).
- To fix bugs and improve the game using aggregated, non-identifying statistics (legitimate interests).
We do not sell your personal data.
3. AI players and service providers
Public rooms may include AI players. To let them reply in chat or recognise drawings, recent public chat lines from the room and the current drawing may be sent to our AI provider, Anthropic, which processes them on our behalf to generate a response. We do not send your email address or account details. Other providers that process data for us: our hosting and database provider (to run the servers).
4. Cookies and local storage
- Strictly necessary: a session cookie when you are signed in, and browser storage for your guest identifier, name, avatar and sound setting. These are needed for the site to work and don't require consent.
- Advertising: our advertising partners, including Google, may use cookies and similar technologies to show ads and measure them, as described below. In the European Economic Area, the UK and Switzerland we ask for your consent first through a consent banner, and you can change your choice at any time through the “Privacy and cookie settings” link that appears on the site.
5. Advertising
You Draw is free because it shows ads. We use Google AdSense and may use other ad partners.
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet. Learn more in How Google uses information from sites or apps that use its services.
- You can opt out of personalised advertising in Google's Ads Settings, or opt out of some third-party vendors' use of cookies for personalised advertising at aboutads.info or youronlinechoices.eu.
6. How long we keep data
- Accounts and stats: until you delete your account.
- Game records: kept for game history. When an account is deleted, its game records are unlinked from it and only the display name used in that game remains.
- Reports: as long as needed to review them and handle repeated abuse.
- Live game data (chat, drawings, guesses): only in memory while the room exists, except when it is part of a report.
7. Your rights
Depending on where you live (for example under the GDPR in the EU/UK or the CCPA in California), you can ask to access, correct, export or delete your personal data, object to or restrict processing, and withdraw consent at any time. You can delete your account yourself from the account menu (tap your name, then Delete account). For anything else, email hello@youdraw.io . You also have the right to complain to your local data protection authority.
8. Children
You Draw is intended for people aged 13 and older. We do not knowingly collect personal data from children under 13 (or the minimum age in your country). If you believe a child has created an account, contact us and we will delete it.
9. Security and transfers
Data is sent over encrypted connections (HTTPS), passwords are hashed, and access to our systems is restricted. Our providers may process data outside your country; where required, they do so under appropriate safeguards such as the EU Standard Contractual Clauses.
10. Changes
We may update this policy. We will change the date at the top and, for important changes, tell you on the site.
11. Contact
You Draw, Greece · hello@youdraw.io