Privacy Policy

Last updated: March 29, 2026

What We Collect

DoodleRat collects very little data:

• Anonymous session IDs — generated randomly and stored in your browser's sessionStorage. These are not linked to any personal information and are discarded when you close the tab.
• IP addresses — used temporarily for rate limiting and abuse prevention. These are held in server memory only and are not written to disk or persisted.

What We Don't Collect

We do not collect personal information, email addresses, or real names. No accounts are required. We do not use tracking cookies of our own.

Third-Party Services

• Cloudflare Turnstile — used for bot protection. Turnstile may process limited data as described in Cloudflare's Privacy Policy.
• Google Ads — ad placements on the site may use cookies to serve and personalize ads. See Google's Advertising Privacy Policy for details.

Data Retention

All game data (drawings, room state, player names) is stored in server memory only. It is permanently deleted when the room closes or the server restarts. We do not archive or back up game content.

Analytics

We collect basic server-side metrics (room count, player count, uptime) for operational purposes. These metrics contain no personal data.

Children's Privacy

DoodleRat does not knowingly collect personal data from children under 13. Since the game is anonymous and collects no personal information, there is minimal risk. If you believe a child under 13 is using the service inappropriately, please contact us.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected on this page with an updated date.

Contact

Questions about privacy? Email us at contact@doodlerat.io.