Privacy policy

Information we use

• Player and game information: your nickname, optional drawn avatar, generated player and submission identifiers, room code, drawings, prompts, guesses, votes, scores, and game progress. Your device, the TV, and other players exchange this information to run the game and reconnect players. Some drawings are shared live; others stay on your device until submitted. Use a nickname rather than your real name.
• Technical and security information: IP addresses, browser and device information, requested URLs, request activity, connection identifiers, timestamps, security signals, and errors. We and our providers process these to connect devices, deliver the service, prevent abuse, and diagnose problems. Device logs may also contain player names, identifiers, and room codes. IP addresses may indicate an approximate location.
• Support messages: your email address, message, and any attachments you send us, used to answer your request.

The TV app uses Internet and network-state permissions. It does not access your camera, microphone, contacts, precise device location, or advertising identifier.

Sharing and service providers

Your nickname, avatar, game content, and results can be shown to other participants and anyone watching the TV, including drawings shown as references or game results. Connected devices exchange network information and may learn each other's IP address. Other players can keep screenshots or copies. We do not keep a central game-content archive.

• Cloudflare:

  We use Pages and Workers for hosting and application services, Turnstile for bot checks, Rate Limiting for abuse prevention, Redirect Rules for page routing, and connectivity and logging services. Cloudflare processes the technical and security information described above.

  Turnstile checks can begin when the join screen opens, before you join; they use browser and connection signals, including connection fingerprints, to detect bots. Cloudflare also uses Turnstile signals to improve bot detection.

  Cloudflare privacy policy and Turnstile privacy addendum.

• Google and Metered:

  These providers help connect devices and receive IP addresses and connection metadata. Metered may relay encrypted gameplay when a direct connection is unavailable. Google also provides fonts to the browser controller and TV app, receiving the request information needed to deliver them.

  Google privacy policy and Metered privacy policy.

Email providers handle support messages. We may disclose necessary information to advisers or authorities for legal obligations, security, or legal claims. Google Play, your browser, and your device provider separately handle their own installation, diagnostic, and backup data under their policies and your settings.

Storage and deletion

• Game sessions: game content and player state are held on participating devices. The TV can retain disconnected players during its hosting session. Drawing data is cleared when its game session is cleared; fully closing the TV app releases its live state.
• Room records: temporary records used to find and join rooms expire 24 hours after creation. This does not end active connections or erase logs or information on devices.
• Browser storage: player identity, room, and nickname are kept for the browser session, which your browser may restore. Drawing backups support recovery and can include unsubmitted artwork as well as undo and redo history. Recovery may be incomplete if browser storage fails. We attempt to clear them after the TV accepts completed drawing tasks; current backups last updated more than 24 hours ago are removed when cleanup next runs as a canvas opens. They can remain longer if you do not return or cleanup fails. Backups from older versions can remain until you clear site data. Preferences persist until cleared.
• Diagnostics and support: routine application logs in Cloudflare's application logging service are retained for up to seven days. Other provider connection and security records follow their own retention policies; device logs follow device settings. Support messages are kept as needed to resolve requests. Relevant records may be retained longer for legal obligations, disputes, or security investigations.

Clear browser site data or Android app storage to remove local data; this can prevent recovery or reconnection as the same player. Delete downloaded drawings and provider-managed backups separately. We cannot remotely erase copies held only by you or other players. You can request deletion of personal information we hold.

We do not set advertising or analytics cookies. Cloudflare may use necessary security cookies or similar browser signals. Blocking necessary storage or security checks may prevent the service working.

Security

We use encrypted connections for website and game data, including relayed gameplay, along with access controls and abuse prevention. Providers still receive connection metadata. Local information relies on your device's security. Keep room codes within your group and avoid sharing sensitive information in game content.

Legal grounds and international transfers

We process player and game information to provide the game you request (performance of a contract). We process technical information to keep the service working and prevent abuse, and support messages to answer your questions (our legitimate interests). We also process information when needed to meet a legal obligation, such as responding to a valid request from an authority.

Our providers process information internationally, including in the United States and Canada. For data processed on our behalf, Cloudflare's Data Processing Addendum includes EU Standard Contractual Clauses for transfers that require them. The provider policies linked above explain their other international processing.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, or a portable copy of your information, object to processing based on legitimate interests, or withdraw consent without affecting earlier lawful processing. You can stop sending game content by leaving the room, although this does not erase existing copies.

Contact us to exercise these rights. We may need limited information to verify and locate your data, such as the session date and room code. We respond within applicable deadlines, normally one month for European or UK requests, and explain any permitted extension or refusal.

You may complain to your local regulator, including the Netherlands' Autoriteit Persoonsgegevens.

Who we are and how to contact us

We develop and operate Draw on TV from the Netherlands and are responsible for how the service processes your personal information (the data controller). Our developer details are on the Draw on TV Google Play listing.

For privacy questions or requests, expand App support and use the developer email. Mention "Draw on TV privacy" in the email subject.

Policy updates

We update this page and its date when our practices change, provide additional notice for material changes where required, and obtain any required consent before new processing begins.