Pawty Draw

1. What stays on your phone

These are kept on your own phone and are not sent to us:

• the nickname you type and the avatar you pick;
• your sound, music and vibration settings;
• a random identifier the game makes up the first time it runs, so your phone can be told apart from the others in a game. It is not an account, it is not your Apple or Google ID, and it does not follow you to other apps;
• any word packs you make yourself — these are a file on your phone only. They are never uploaded and never synced;
• what you have bought, remembered by the purchase service's software on your phone so the game knows what to unlock;
• a few small counters — how many times the game has been opened, and how many times it has reminded you to set a nickname;
• a technical log, described in section 5.

Deleting the app deletes all of it.

2. What we collect, and why

2.1 Anonymous usage events (analytics)

The game sends a small, fixed list of events to PostHog, an analytics service, so we can see how the game is used and make it better. There are ten of them and no others:

• the game was opened for the very first time after you installed it;
• a game was created, started or ended — together with how many people were in the room, which game mode, whether it was an online game, how long the game was set to be, and how long it actually lasted;
• a word pack was made;
• the Store was opened;
• Share was tapped;
• a game could not be created or joined, and the short reason why.

What is never in them: your nickname, your avatar, your drawings, your guesses, the words in the game, your scores, your room code, or anything you typed. The events say what happened, never what anybody wrote.

Each event carries the random identifier from section 1 so we can tell one phone's games apart from another's. PostHog also adds technical details such as your phone model, your operating system version and the app version. This is processed on PostHog's servers in the United States.

Analytics is sent for local games too, not only online ones. If your phone has no internet at the party, the game is completely unaffected — the events are simply lost, and the game never waits for them.

2.2 Online games and our relay

Playing in the same room does not need us at all — the phones talk to each other directly. Online games are different: they pass through a relay server we run, because two phones on mobile data have no way to reach each other otherwise.

• The relay passes your game data along without opening it. It forwards the parcels as they arrive and has no idea which part is a nickname and which is a brush stroke.
• Rooms live in the relay's memory only — never on a disk, never in a database. A room exists while its host is connected. If the host's phone loses signal, the room is held for a few minutes so the host can come back and the game is not lost. When the host leaves, the room is gone immediately. A room nobody is using is cleared away automatically after about half an hour. Nothing about it survives afterwards: not the drawings, not the guesses, not the scores, not the room code.
• The relay keeps a small operational log so we can fix connection problems. A line contains the time, the room code, a short player number such as m1, and a reason word such as left or timed out. It never contains a nickname, a drawing, a guess, or your internet address. We keep these logs no longer than 30 days.
• Our relay runs on cloud infrastructure outside Canada. If you never play an online game, none of your game data ever touches it — though analytics (section 2.1) is still sent, because it does not go through the relay.

2.3 Purchases

Unlocks are sold through Apple's App Store and Google Play, and managed for us by RevenueCat.

• We never see your payment details. Your card, your billing address and your account belong to Apple or Google. They are never sent to us and we could not read them if they were.
• RevenueCat gives your phone its own anonymous identifier, not tied to your name, and tells the game what you own.
• If Apple or Google refund a purchase, the unlock is removed and that content goes back to being locked.

2.4 Internet addresses

Like every website and every app, the servers we send data to can see the internet address your phone is connecting from.

Our relay uses it only to keep your connection alive and never writes it down. Our analytics provider may use it to work out a rough area — a country, sometimes a city. It is never used to find where you are, and it is never joined to your nickname.

3. What we never collect

• Your real name, your email address, or any way to contact you. The game never asks. You do type a nickname for other players to see; section 1 says what happens to it.
• Precise location. The game never asks for GPS, never reads your location, and never works out where you are from the phones near you.
• Your contacts, photos, files, calendar, microphone or camera.
• Your drawings. They travel between the phones playing the game and are never written to storage, never uploaded, and never kept by us. When the game ends they are gone.
• Advertising identifiers. There are no ads in Pawty Draw, no ad networks, and nothing about you is shared with advertisers or data brokers. We do not track you across other companies' apps or websites.

4. Permissions the game asks for

On Android 12 and newer, the game's Bluetooth scanning is explicitly marked as never used for location.

5. The technical log on your phone

So we can help when something goes wrong, the game writes a small technical log on your phone: times, which screen you were on, when someone joined or left, and numbers. It never contains your nickname, the words in the game, or your drawings. It stays on your phone, it is kept small automatically, and it is only sent to us if you choose to send it yourself when reporting a problem.

6. Security

Connections to our relay and to the services in section 2 are encrypted in transit.

When the phones in the room talk to each other directly over Bluetooth or your Wi-Fi, the game does not add its own encryption on top of what your phones and your network already do. This is play between people in the same room, and nothing in it reaches us.

One thing worth knowing: while a room is open, anyone who has the room code can join it. Share the code with the people you want in the game. The room code also appears in our relay's operational log described in section 2.2.

7. Children

Pawty Draw is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has provided information to us, write to us at the address below and we will delete it.

8. Your choices

• Analytics. There is no setting to turn analytics off. The events carry no nickname and nothing that points at you — they say what happened in a game, never who you are. If you would rather send nothing at all, uninstalling the app stops it completely.
• Your nickname and avatar can be changed at any time, in the app.
• Deleting your data. Almost everything is on your phone, so uninstalling removes it. For anything else — the analytics events or the relay's operational log — write to us and we will delete what we hold.
• Purchases are managed by Apple or Google. Restoring or refunding is done through them.

9. Changes to this page

If we change what the game does with information about you, we will update this page and change the date at the top. If a change is significant, we will say so in the app.

10. Contact

Questions, or a request to delete something we hold:

Honeymilk Studio
Email: support@honeymilkstudio.ca