Privacy policy
Last updated October 18, 2026. Short version: no accounts, no tracking cookies of our own, and your drawings are only public if you share or post them.
What we collect
Visits
drawy counts visits without cookies. Each visitor gets an anonymous id made from a one-way hash of their IP address and browser, mixed with a secret that changes every day, so the same person can't be followed from one day to the next and the IP address itself is never stored. Alongside that id we record the page, the site you came from, campaign tags in the link, your approximate location (country and city, worked out from the IP address by our hosting provider), device type, browser and operating system.
Games
We record game events such as rounds started and finished, the word, which model guessed it and how fast. When you finish a round, the drawing, the word, the models' guesses and the timing are saved so the round can have a share link. If you post to the daily board, your drawing and the name you typed (which can be left empty) appear on that day's public board.
On your device
Your browser keeps a few things in local storage: the name you entered, your sound setting, your streak and best time, and whether you've seen the welcome message. A random id for the current visit is kept in session storage. None of this is sent to us except as described above.
AI models
While you draw, small snapshots of the drawing are sent through Vercel AI Gateway to the AI models that guess (Mistral, NVIDIA, Google, Alibaba, inclusionAI and Xiaomi models, plus an OpenAI open-weight model that referees close calls). The snapshots contain only your drawing, never your name or other details. Each provider handles them under its own terms.
Advertising
drawy shows ads from Google AdSense to pay for the AI models. Google and its partners may use cookies or similar identifiers to show ads and to measure them, including ads based on your earlier visits to this and other sites. Visitors in the European Economic Area, the UK and Switzerland are asked for consent first through Google's consent message. You can learn how Google uses this information at policies.google.com/technologies/partner-sites and turn personalised ads off at adssettings.google.com.
Where it's stored and for how long
The site runs on Vercel and data is stored in a Neon Postgres database. Visit and game analytics are deleted after 13 months. Saved rounds are kept so their share links keep working; ask us and we'll remove one.
Children
drawy isn't directed at children under 13, and we don't knowingly collect information about them.
Your choices and contact
You can play without entering a name, block cookies in your browser, or use an ad blocker. To ask about your data or to have a drawing removed, message @skyzlim on X. If this policy changes, the date at the top changes with it.