Privacy Policy
Last updated: October 2026
This policy explains what data Draw This collects, why, and your choices. We keep it minimal. The data controller is Novologia Ltd, a company registered in Israel, which operates Draw This.
1. What we collect
- Your game — the display name and avatar you choose, the drawings you make, their scores and the AI’s comments, the prompts, and your device’s language. Players are identified by a random identifier kept in a cookie on their device, not by name or email.
- Your email — only if you buy a pass (the email you give at checkout, for which an account is created) or sign in; used to sign you in and attach your pass.
- Your purchases — which pass, when, when it ends, the price paid, and a transaction identifier. Card details go to our payment provider (section 5) and never reach our servers.
- Usage and advertising data — how the game is played and whether an ad brought you here, including identifiers such as your IP address, device and browser information, and cookie identifiers. Section 6 sets out what is shared and with whom.
2. How we use it
To run the game (show each drawing to the players of that game and score it), to run your account and pass, to keep the Service secure, to improve the game and the AI judge, and to measure whether our advertising works.
3. Drawings and the AI judge
To score a drawing, we send the drawing (an image) and the prompt to our AI providers — Anthropic (Claude) and, as a backup, OpenAI. We don’t send your name, email or any identifier with it. These providers process the drawing only to return a score and comment to us, under their API terms for business customers.
How long we keep games: games — including their drawings, names, avatars and scores — are deleted automatically 30 days after they were created.
4. Where your data lives
We use trusted providers to run the Service: our database and authentication are hosted on Supabase, our website on Vercel, emails are sent through Amazon Web Services, and drawings are scored by the AI providers in section 3. Your data may be processed by these providers solely to deliver the Service. Novologia Ltd is based in Israel — a jurisdiction the European Commission recognises as providing an adequate level of data protection.
5. Payments
Purchases are processed by Paddle (Paddle.com Market Ltd), our merchant of record. Your payment details — such as card numbers — are collected and processed by Paddle and never touch our servers. We receive a record of the purchase (product, price, currency, transaction identifier) so we can unlock it on your account and handle refunds. Paddle’s own privacy policy applies to the data it collects at checkout.
6. Analytics and advertising
To understand how the game is played and whether our advertising works, we share data with:
- Google (Google Analytics) — the pages you visit and in-game events, together with your IP address, device and browser information, and a cookie identifier.
- Meta (Facebook and Instagram) — the same kind of event data, together with your IP address, browser information and Meta’s advertising cookies. If you are signed in, we may send your email address in hashed form — scrambled so it cannot be read back — so that Meta can tell whether one of its ads led to a purchase. We never send your email address in readable form.
We do not sell your data, and we do not share it with anyone beyond the providers named in this policy.
If you are in the EU/EEA, the UK or Switzerland, none of this happens unless you accept: nothing in this section is loaded or sent until you press Accept on the cookie notice, and you can change your mind at any time — see section 8.
7. Your rights
You can access, correct or delete your data at any time. To delete your account and associated records, email support@justdrawthis.com and we’ll remove them.
8. Local storage & cookies
We use a cookie and your browser’s local storage to recognise your device in a game, remember your name, avatar and language, keep you signed in, and remember whether this device has used its free trial. That is needed for the Service to work and is not optional. We also use the analytics and advertising cookies described in section 6; if you are in the EU/EEA, the UK or Switzerland, we ask before any of them is set.
9. Children
Draw This is a party game that families play together. Players don’t need an account and are identified only by a nickname of their choice; we ask that children under 13 play with a parent or guardian. Accounts and purchases are for adults. We don’t knowingly collect personal information such as an email address from children under 13.
10. Changes & contact
We may update this policy; material changes will be posted here. Questions? Email support@justdrawthis.com.