Privacy Policy

Last updated: May 12, 2026

DoodleMania ("we," "us," or "our") is committed to protecting your privacy. This policy describes what data we collect, how we use it, and your rights.

1. Data We Collect

Account & Profile

• Display name and avatar selection
• Age group (under 13 / 13 and over) — used to enforce content gates
• Authentication token (device-bound, managed by Supabase Auth)

Gameplay

• Room membership, role, and phase events
• Drawing stroke data (transmitted during live rounds; not stored permanently)
• Guesses submitted (text; retained per moderation policy)
• Scores and round results
• Replay metadata (duration, word list, approval status)

Purchases

• Entitlement data from RevenueCat (Plus, Family, Boost, Seasonal Packs)
• We do not store payment card or billing details — these stay with Apple / Google / RevenueCat

Safety & Moderation

• Reports you submit and reports submitted about you
• Custom word-pack submissions (scanned by our moderation Edge Function)
• Replay video files submitted for export approval

Technical

• Device push-notification token (if you grant permission)
• App version, platform (iOS / Android), and crash reports for diagnostics
• Anonymous usage events (session start, room creation, purchase initiation) for product analytics

2. How We Use Your Data

• Operate and deliver the game features described above
• Enforce community standards and respond to reports
• Process and restore in-app purchases via RevenueCat
• Send push notifications you have opted into
• Diagnose and fix bugs and performance issues
• Comply with legal obligations

We do not sell your personal data. We do not use your data for advertising.

3. Third-Party Service Providers

We share data only as necessary to operate the app:

• Supabase — database, realtime, auth, and Edge Functions (EU / US data centres; DPA available at supabase.com/privacy)
• RevenueCat — purchase entitlement management (revenuecat.com/privacy)
• PostHog — anonymous product analytics (session start, room creation, purchase initiation, replay exports). No personal identifiers are sent. See posthog.com/privacy.
• Sentry — crash reporting and error monitoring. May include device type, OS version, app version, and a Sentry-assigned session ID. See sentry.io/privacy.
• Apple / Google — App Store distribution, in-app purchases, and push notification delivery

4. Children's Privacy (COPPA)

DoodleMania is rated for users aged 4 and up. We support play by children under 13 ("Children") under the following protections:

• Children are limited to canned reactions — they cannot enter free-text chat or custom words.
• Children cannot access the Spicy word pack or other 17+ content.
• Children cannot share public replay links.
• We do not display behavioural advertising to any users, including Children.
• We do not knowingly collect more data from Children than is necessary to operate these restricted game features.
• Parents or guardians may request access to, correction of, or deletion of their child's data by contacting privacy@doodlemania.app.

If you believe we have inadvertently collected personal data from a Child without appropriate consent, contact us immediately and we will delete the data promptly.

5. Data Retention

• Active accounts: data retained for the duration of account activity
• Deleted accounts: data removed within 30 days of deletion request
• Purchase records: retained up to 7 years for tax compliance
• Moderation reports: retained up to 12 months
• Expired room data: purged automatically after room expiry

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability (where technically feasible)

To exercise any of these rights, contact privacy@doodlemania.app or use the account deletion page.

7. Security

We use industry-standard measures including TLS in transit, row-level security on our Supabase database, and least-privilege service roles. No security measure is perfect; please report suspected vulnerabilities to security@doodlemania.app.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by updating the "last updated" date above and, where required by law, by in-app notification.

9. Contact

privacy@doodlemania.app
DoodleMania — Support page