Privacy Policy

This policy covers the drawla.app website, the DrawLa drawing game playable there, and the DrawLa apps for iOS and Android. There is no user account: you simply pick a nickname and start playing.

1. Controller

B. Grabowski, Beethovenstr. 36, 76275 Ettlingen, Germany
Email: grabow.commuter@gmail.com

2. Visiting the website

The website is served via Firebase Hosting (Google Ireland Limited). Delivering the pages processes technically necessary connection data such as IP address, timestamp, requested URL and user agent. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).

3. Playing the game

To play, the app opens a WebSocket connection to our server at api.drawla.app. The following is processed:

• Nickname: the display name you choose. It is shown to the other players in your room and also appears in the server logs (see section 5).
• Drawings: your strokes are sent to the server during a round, evaluated by the image recognition model and forwarded to the other players in the same room. In public rooms those may be people you do not know.
• Game state: score, room number and round history.
• Connection data: IP address and timestamp.

Drawings and scores are held in the server's memory only. There is no database and no file storage for them; once the game ends or the room closes they are gone for good. The legal basis is Art. 6(1)(b) GDPR (performance of the service you requested).

4. Game server hosting and transfer to the USA

The game server runs on Google Cloud Run in region us-central1 (Iowa, USA). Playing therefore transfers the data listed in section 3 to the United States. Google LLC is certified under the EU-US Data Privacy Framework; the EU Commission's Standard Contractual Clauses apply in addition.

5. Server logs

For troubleshooting and abuse prevention the server logs connection events. Besides timestamp and room number these logs contain the chosen nickname. They are deleted automatically under Google Cloud Logging's retention. The legal basis is Art. 6(1)(f) GDPR.

6. Advertising

In the browser (drawla.app):

We include advertising from Adsterra. Before anything loads we ask whether personalised advertising is allowed. If you choose “non-personalised only”, no advertising script is loaded; we show our own notices instead, without cookies and without tracking. Your consent is stored locally and can be withdrawn at any time via the “Werbe-Einstellungen” link. A refusal is not stored, so the question reappears on your next visit. Where you consent, the legal basis is Art. 6(1)(a) GDPR together with § 25(1) TDDDG.

In the apps (iOS and Android):

There we use Google AdMob. Before the first ad, Google's User Messaging Platform (UMP) consent form is shown, preceded on iOS by the App Tracking Transparency (ATT) prompt. Only after your consent does AdMob process device identifiers such as the advertising ID along with ad interaction data. Without consent, non-personalised ads are served. You can change your choice at any time in the UMP form. The provider is Google Ireland Limited.

7. Local storage on your device

We store your most recently used nickname, your language choice and your advertising decision locally on your device. This data never leaves your device and can be removed via your browser settings or by deleting the app.

8. No analytics services

DrawLa does not embed any analytics, tracking or crash reporting services such as Google Analytics or Firebase Analytics.

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. You may withdraw any consent at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.

Because we keep no user account and do not store drawings permanently, once a game has ended we generally hold no data that could be linked to you. For requests, please use the address in section 1.

10. Children

DrawLa is not directed at children under 16. We do not knowingly collect data from children below that age.

11. External links

This website links to external sources such as arXiv and GitHub. When you follow external links, the privacy terms of the respective providers apply.

12. Contact

For questions about data protection, contact: grabow.commuter@gmail.com

Dataset note: DrawLa builds on the Quick, Draw! dataset by Google, Inc. The dataset is licensed under the Creative Commons Attribution 4.0 International License. Google does not endorse or sponsor DrawLa.app.

As of: July 2026