Privacy Policy

This Privacy Policy explains how goScribble ("we", "us", or "our") handles information when you use our website and multiplayer draw-and-guess game (the "Service").

Our approach is simple: we do not operate a database and we do not persist personal information on our servers. Gameplay data is processed in memory only for as long as a session is active.

We want you to understand what information is involved when you play, so you can make informed choices. This policy should be read together with our Terms and Conditions.

We are the data controller for personal information processed through the Service, unless we state otherwise.

This policy applies to visitors to our website, players who create or join game rooms, and anyone who otherwise interacts with the Service.

It does not apply to third-party websites, apps, or services that may be linked from the Service. Those services have their own privacy policies.

goScribble does not use a database. We do not write personal information, drawings, guesses, scores, or chat messages to disk or other long-term storage on our systems.

When you play, room data is held in server memory so the game can run in real time. When a room ends or all players leave, that data is discarded and is not recoverable from our servers.

We do not build user profiles from gameplay, and we do not retain session history for later lookup.

Information you choose to provide: when you set up a player, you may enter a display name and choose an avatar. During a game, you may submit drawings, guesses, and chat-style messages visible to others in the room. This information is transmitted to run the session but is not stored by us after the room ends.

Information on your device only: to make play smoother, your browser may store preferences locally, such as your display name, avatar, theme (light/dark), interface language, word-language preference, and a random client identifier used to help reconnect you after a refresh or brief disconnect. This stays on your device unless you clear it.

Information processed in transit: while a session is active, our servers temporarily process technical data needed to deliver the game, such as connection data, room identifiers, and gameplay events sent over our WebSocket connection. This processing is transient and not persisted.

We do not require you to create a registered account to use the core game.

We may use third-party analytics and measurement services, such as Google Analytics and comparable tools, to understand how visitors use our website (for example, pages viewed, general usage patterns, and technical information like browser type).

These services are separate from gameplay. They help us improve the site and do not receive your drawings, guesses, or room chat as part of normal game operation.

Analytics providers may set cookies or similar technologies and may process data such as IP address, device identifiers, and usage events according to their own privacy policies. Where required by law, we will ask for your consent before non-essential analytics run.

You can learn more about how Google handles data at policies.google.com/privacy, and you may be able to opt out of Google Analytics using Google's browser add-on or your browser settings.

We use transient session data to provide and operate the Service, including hosting rooms, syncing drawings in real time, displaying scores, and keeping sessions running smoothly.

We use analytics data to understand how the website is used and to improve performance and features.

We use information stored on your device to remember your preferences so you do not have to re-enter them each visit.

We do not use your gameplay for third-party behavioural advertising, and we do not sell personal information.

If you are in the United Kingdom or European Economic Area, we process personal information only where we have a valid legal basis under UK GDPR / GDPR.

Performance of a contract or steps at your request: to provide the game when you create or join a room and to carry out the Service you ask us to deliver.

Legitimate interests: to secure, maintain, and improve the Service and prevent misuse, where those interests are not overridden by your rights.

Consent: where required for non-essential analytics, cookies, or similar technologies. You may withdraw consent at any time through your browser settings or any consent tool we provide.

With other players in your room: your display name, avatar, drawings, guesses, and messages are visible to others who have access to the same room link during an active session.

With analytics providers: we may share website usage data with services such as Google Analytics as described above. These providers process data under their own terms and privacy policies.

With infrastructure providers: we use hosting and networking services to deliver the Service. They process transient connection data on our behalf but do not receive a permanent archive of your gameplay from us because we do not store it.

For legal reasons: we may disclose information if we reasonably believe it is required by law, regulation, legal process, or to protect the rights, safety, and security of users, the public, or the Service.

We do not sell your personal information.

Your information may be processed in the United Kingdom and in other countries where our service providers operate. Those countries may have different data-protection laws than your own.

Analytics providers such as Google may process data in the United States and other countries. Where required, we use appropriate safeguards for international transfers.

We do not retain gameplay data on our servers after a session ends. There is no database or player history for us to look up later.

Information stored in your browser remains until you clear your browser storage.

Analytics providers retain data according to their own settings and policies. You can review those policies for retention periods and deletion options.

The Service is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

If you are under 13, please do not use the Service. If you are a parent or guardian and believe your child has provided information to us, please contact us so we can take appropriate steps.

Users between 13 and the age of majority in their jurisdiction should use the Service only with permission from a parent or guardian where required by law.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, and to receive a copy of information you provided in a portable format.

Because we do not store gameplay data on our servers, we may be unable to retrieve drawings, guesses, or messages from a past session after it has ended.

For analytics data held by third parties, you may need to exercise rights directly with those providers or through your browser settings.

You can clear locally stored preferences by removing site data for goScribble in your browser settings.

If you are in the UK, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk. If you are in the EEA, you may complain to your local data protection authority.

We will not discriminate against you for exercising your privacy rights.

We use reasonable technical and organisational measures designed to protect information processed through the Service. No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

You are responsible for keeping room links private if you do not want others to join. Anyone with a room link may be able to see activity in that room.

We use browser local storage to remember preferences such as your display name, avatar, theme, language, and client identifier. This data stays on your device.

We may use analytics cookies or similar technologies through services such as Google Analytics to measure website usage. These are distinct from the game itself.

Our website may load fonts from third-party providers (such as Google Fonts). Those providers may receive technical data like your IP address when your browser requests font files.

You can control cookies and local storage through your browser settings. Where required, we will ask for consent before non-essential cookies run.

The Service may contain links to third-party websites or services. We are not responsible for their privacy practices. We encourage you to read their policies before providing information to them.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes may also be highlighted on the website.

Your continued use of the Service after an update means you accept the revised policy. If you do not agree, please stop using the Service.

This Privacy Policy is governed by the laws of England and Wales, without regard to conflict-of-law rules, except where mandatory local consumer or data-protection laws apply in your country of residence.

If you have questions about this Privacy Policy or want to exercise your rights, please contact us through the contact information published on https://goscribble.io.