Privacy Policy

Controller and contact

Sami Sytelä (Drawing Arena), Finland, is responsible for the app processing described here. Contact the operator below for privacy questions. Paddle separately determines processing for its own payment, tax and fraud obligations.

What this app stores and why

Account identifiers and verified email addresses provide account access; session hashes and sign-in flow records secure sessions. Drawings, model guesses, timings, results, race allowance usage and account activity provide gameplay and history. Payment-enabled environments record orders, prices, payment identifiers, credit-ledger entries and adjustment or hold records for delivery and reconciliation. Hosting and identity services also process connection and security metadata, such as IP addresses. The app does not store your social-provider password or payment-card number.

Legal bases

Requested account access, gameplay, history and purchased entitlements are processed to perform the service contract. Security, abuse prevention, bounded operational logs and aggregate model comparisons rely on legitimate interests in operating a safe and reliable service. Records required by law are retained for legal obligations. Optional non-essential processing requires its own lawful basis and any required consent; acceptance of game terms is not consent to advertising or unrelated tracking.

Where your canvas goes

The models available in the app identify the AI services used for guessing. Contact support for the current processing-provider list before submitting personal data in a drawing.

Service providers and international processing

Railway hosts the application. Supabase provides account authentication, and Resend delivers verification email. Your selected sign-in provider also processes sign-in under its own notice. When Paddle checkout is used, Paddle handles the transaction. Providers may process data outside Finland and the EEA, including in the United States. Their notices are linked below. Contact support for applicable processing locations and transfer safeguards; this notice does not promise EU-only hosting.

Sharing is your choice

Drawings are private from other players by default. An unlisted replay link gives access to anyone with the link; it is not a private invitation. You can revoke it. The public provisional leaderboard uses aggregate eligible race statistics, not account identifiers, raw drawings or replay links. Revoking a link cannot recall a copy already saved by someone else.

Retention and deletion

Account and race history are retained to provide the account, results and replay links while they remain in use. Request deletion or export through support. Sign-in flows expire after ten minutes and local sessions after one hour by default, or up to 30 days when the player opts to stay signed in; expired authentication rows are cleaned during relevant sign-in operations, not by a continuous erasure timer. Necessary payment, dispute and security records may require restricted retention for an applicable obligation or unresolved claim. Active-record deletion is distinct from backup expiry; backups and provider records have separate lifecycles. The service does not claim automatic time-based deletion of all drawings or immediate physical erasure of backups.

Your choices and rights

Contact support to request access, correction, export, deletion, restriction or to object to processing, where applicable. The operator may verify account ownership before disclosing or changing private records. Requests are handled within applicable statutory time limits. You may complain to Finland's Data Protection Ombudsman or another competent authority. An email address is necessary for email sign-in. Do not include unnecessary personal information in drawings.

Payments and account credits

Sandbox activity is test-only and does not create a real purchase. Production payment processing is enabled separately, not by publishing this notice. Payment providers have their own privacy notices.

Permanent accounts

Registered accounts keep their account-bound history and credits. A verified upgrade of a temporary guest account preserves its identifier; accounts are not merged merely because email addresses match.

Cookies and analytics

Essential session and sign-in-flow cookies provide authentication and request protection. The app does not add a third-party analytics script. Optional first-party product analytics require an affirmative choice and can be withdrawn in Privacy and data. An explicit anonymous analytics choice stores a random privacy-control scope in the browser so delayed requests cannot overwrite newer choices across reloads. It is sent only to privacy-control routes, is separate from the analytics visitor cookie, and remains in browser storage until site data is cleared. Hosting, identity and checkout services maintain their own security records. Optional advertising requires separate enablement and required consent arrangements. Game and billing controls are not decisions about employment, creditworthiness or similar legal eligibility.

Related policies and contacts

• Railway privacy notice
• Supabase privacy notice
• Resend privacy notice
• Cloudflare privacy notice
• Paddle privacy notice
• Data Protection Ombudsman, Finland

Contact the operator

Operator: Sami Sytelä

Contact: hello@drawingarena.app