Privacy Policy

Last updated: October 25, 2026

This policy explains what data is processed when you use the Drawzu mobile game ("Drawzu", "we"), why, and what your rights are. You don't need to give us an email address, phone number or real name to play Drawzu. Saving your account to an email address is completely optional.

1. Data we collect

Guest account: on first launch the app creates a random player ID and a secret session key stored on your device.

Email (optional): if you use "Save your account" or "Sign in on another device", we link your email address to your account. There is no password; we send a 6-digit code that is valid for 10 minutes. We never store the code itself, only a one-way hash of it for a short time. Accounts of players under 13 cannot add an email.

Profile: the nickname, avatar, optional short bio, country (taken automatically from your phone's region setting; you can change it in your profile) and language you choose.

Age group: on first launch we ask for your year of birth; we store only your age group (under 13, 13–17, 18+), not your year of birth.

Game data: points, level, stats, badges, coins, cosmetic items and leaderboard information.

Friends: your friend code, friend list, pending requests, players you blocked, and your last-seen time (shown only to your friends).

Moderation records: reports you make or that are made about you (including the text of a reported message), violation records and temporary restrictions.

Purchases: if you subscribe to Drawzu Premium, we store the product, the store's transaction ID and the expiry date to activate your subscription. Payment is handled entirely by Apple (App Store) or Google (Google Play); we never see your payment details.

Technical data: your connection's IP address is used briefly to prevent abuse (bot attacks, fake accounts); it is kept in report records for at most 24 hours.

Contact form and in-app feedback: when you write to us we receive your name (optional), email address, topic and message; from the app we also receive the app version, platform, language and your player ID. We use these only to answer you and fix the problem.

2. Data we don't collect or store

Drawings and chat messages are only relayed live to players in the room and are not stored on our servers. Exception: reported content (the reported message, drawing or profile text) is kept as moderation evidence.

Writing detection on drawings runs entirely on your device (Apple Vision on iOS, Google ML Kit on Android); the drawing never leaves your device.

Chat translation also runs on your device (Apple Translation on iOS, Google ML Kit on Android); messages are not sent to a translation service.

We don't request access to your location, contacts, photos, microphone or camera.

3. Why we use data

To run the game (rooms, scores, leaderboards, friends), protect your account, prevent cheating and abuse, protect players from inappropriate content, and review reports.

We use your email address only to send sign-in codes, to restore your account on another device and for necessary account notices (for example, confirmation that your account was deleted). We never send ads or newsletters.

4. Advertising

Drawzu shows at most 3 short interstitial ads per day (only between games, telling you how many are left) and up to 3 rewarded ads per day that you choose to watch (for example, +1 joker). Ads are served by Google AdMob, which may process data such as your device's advertising ID to show and measure ads. See Google's privacy policy: https://policies.google.com/privacy

Ad requests for players under 13 and aged 13–17 are flagged as age-restricted; personalized ads are not shown to them.

5. Sharing

We don't sell your personal data. Data is shared only with service providers we use to run the game (server hosting, ad provider) and with authorities when required by law.

Email delivery: sign-in codes and account notices are sent through Resend (Resend, Inc.). Resend processes only your email address and the content of the email, on our behalf, to deliver it.

Report review: the reported content only (message text, profile name and bio, or an image of a reported drawing), without your player ID or IP address, may be sent to Anthropic (Claude AI) to help assess the report. Anthropic processes it only to provide this service to us.

Your nickname, avatar, country, level and game stats are visible to other players.

The website runs on Cloudflare. To prevent abuse, the contact form uses Cloudflare Turnstile (a cookie-free robot check) and a temporary rate limit based on your IP address; the IP address is not stored.

6. Children

Players under 13 play in safe mode: they cannot see or write free chat and can only guess; they can only be added with their friend code; the bio field is disabled; and ads are flagged as child-directed. Parents can delete their child's account in the app or by writing to us.

7. Retention and account deletion

Data is kept as long as your account exists. You can permanently delete your account and all game data at any time: in the app under Settings > Delete my account, or, if you linked an email, at https://drawzu.com/en/delete-account.html with a code sent to that email. Your email address is deleted too; if an email was linked, we send a short deletion confirmation to it. Identifiers are removed from report records belonging to a deleted account.

Support conversations are kept for at most 12 months after the request is closed and then deleted. Account deletion and GDPR/KVKK requests may be kept as long as a legal obligation requires.

8. Your rights

Under GDPR, KVKK and similar laws you have the right to access, correct and delete your data, to object to processing and to lodge a complaint. Email us for any request.

9. Security

Connections to our server are encrypted (TLS). Session keys are stored on the server only as one-way hashes.

10. Changes and contact

We may update this policy and will notify you in the app about important changes. Questions: app@drawzu.com

Data controller: [Developer / company name and address]