Privacy Policy
DrawVersus is a private drawing game between you and people you invite. We built it to need as little personal information as possible: no phone number, no address book uploads, no ads, and no selling of personal data. This policy explains what information we collect and why.
What We Collect
| Data Category | Description & Purpose |
|---|---|
| Account identifier | A random ID created locally when you first launch the app. It is not your real name, email, or phone number. It binds your drawings, guesses, and scores together. |
| Display name | The handle you choose for gameplay. Visible only to rivals you play with. |
| Game content | Your drawings (recorded as stroke paths for replay), guesses, points, streaks, and volley records. Shared only with your rival in that specific game. |
| Sign-in details | If you link an Apple or Google account (when enabled), we receive the provider identifier and email (if allowed) solely to preserve and recover your game records. |
| Push notification token | A device token used exclusively to notify you when it is your turn to draw or guess. Never used for marketing. |
| Usage analytics | Anonymous application events (such as "drawing sent"), device model, operating system version, and aggregate region via Google Analytics. Drawings themselves are never sent to analytics. |
| Moderation reports | If you report content, we retain the report log and a snapshot of the reported drawing for safety review. |
We do not collect address books, precise GPS locations, camera rolls, or cross-app advertising identifiers.
Challenge Links
When you share a challenge link (drawversus.com/c/…), anyone in possession of that link can view that single drawing and submit guesses in their browser before the game is claimed. Share links only with people you intend to play with. Unclaimed links expire automatically after 30 days.
Service Providers and Data Sharing
We share data only with infrastructure providers essential to operating the game:
- Supabase: Database and server infrastructure (hosted in the United States).
- Google (Firebase): Push notifications and aggregated analytics.
- Vercel: Web hosting and in-browser challenge guessing player.
We never sell personal information, and we do not provide data to advertisers or data brokers. We may disclose information if required by valid legal process or to prevent severe harm.
Data Retention
Your account data and volley history are maintained while your account remains active. Unclaimed challenge links expire after 30 days. Moderation records are retained as long as necessary for community safety.
Deleting Your Account
You can delete your account at any time directly in the app: navigate to Settings → Delete Account. Your profile is deleted immediately, active rivalries end, and drawings you sent are marked as removed for rivals.
If you no longer have access to the app, visit our Account Deletion Page or email support@drawversus.com.
Children's Privacy
DrawVersus is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us for immediate account deletion.
Your Rights (GDPR & CCPA)
Depending on your region (including the EU, UK, and California), you may have rights to access, export, rectify, or delete your personal information, or object to certain processing. Most actions can be executed directly inside the app. For additional requests, email support@drawversus.com.
Security
Data is encrypted in transit via modern TLS protocols. Access to backend systems is restricted, and clients cannot write directly to game records: every move is validated through backend server logic.
Contact Us
For privacy questions or data requests, please contact us at support@drawversus.com.