Privacy Policy

How Drawpunkt processes and protects information.

DRAWPUNKT PRIVACY POLICY

Effective Date: July 26, 2026
Last Updated: July 26, 2026

This Privacy Policy explains how Drawpunkt (“Drawpunkt”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal information when you access or use the Drawpunkt website, drawing tools, artwork replay system, artist profiles, artist channels, comments, ratings, subscriptions, notifications, live chat rooms and related services collectively referred to as the “Service”.

This Privacy Policy applies to visitors, registered members, artists, channel owners and other individuals who interact with Drawpunkt.

By using Drawpunkt, you acknowledge that your information will be processed as described in this Privacy Policy.

1. WHO CONTROLS YOUR INFORMATION

The controller responsible for personal information processed through Drawpunkt is the person or legal entity identified as the Drawpunkt operator on the Contact page.

Before commercial launch, the Contact page should contain:

• The operator’s full legal name;
• Registered business or correspondence address;
• Country of establishment;
• Support email address;
• Privacy contact email address;
• Company registration number, where applicable;
• Data protection representative details, where legally required.

Privacy enquiries and requests may be submitted through the Contact page or the privacy email address published there.

2. INFORMATION WE COLLECT

The information we collect depends on how you interact with Drawpunkt and which features you use.

We may collect the following categories of information.

2.1 Account Information

When you create or manage an account, we may collect:

• Username;
• Display name;
• Email address;
• Password hash;
• Preferred language;
• Account role;
• Account status;
• Registration date;
• Last login date;
• Profile settings;
• Account verification information;
• Communication preferences.

Passwords are not intended to be stored in plain text. They should be processed using an appropriate cryptographic password-hashing method.

2.2 Profile Information

When you create or customize your profile, we may collect:

• Profile photograph or avatar;
• Display name;
• Public username;
• Biography or profile description;
• Artist identity information;
• Profile preferences;
• Publicly displayed statistics;
• Links or information you choose to publish.

Profile information may be visible publicly unless the Service clearly indicates otherwise.

2.3 Artwork Information

When you create, save or publish artwork, we may process:

• Artwork title;
• Artwork description;
• Artwork image;
• Draft or publication status;
• Creation and update timestamps;
• Publication date;
• Artwork dimensions;
• Canvas background;
• Layer information;
• Text added to the artwork;
• Artwork thumbnail;
• Associated artist account;
• Likes, ratings and comments;
• Reports or moderation actions connected to the artwork.

Published artwork may be accessible to visitors who do not have a Drawpunkt account.

Draft artwork is intended to be accessible only through the account that created it, authorized administrators and technical systems necessary to operate and secure the Service.

2.4 Drawing and Replay Data

Drawpunkt may record drawing actions so that an artwork can be replayed from its first recorded stroke to its final state.

Replay data may include:

• Brush, pencil, marker, eraser and text actions;
• Stroke positions and coordinates;
• Stroke sequence;
• Stroke timing;
• Pen pressure information where supported;
• Brush size;
• Color;
• Opacity;
• Selected tool;
• Layer identifiers;
• Layer visibility;
• Text content and placement;
• Font family and text style;
• Canvas size;
• Canvas background color;
• Replay configuration;
• Other technical drawing events.

Pen pressure data is used to reproduce or support the drawing experience. It is not intended to identify medical conditions or create biometric identity profiles.

When artwork is published with replay data, the replay may be publicly accessible together with the artwork.

2.5 Engagement Information

When you interact with content, we may collect:

• Artwork likes;
• Artwork ratings;
• Rating values;
• Comments submitted for approval;
• Approved or rejected comment status;
• Artist replies;
• Comment reports;
• Artwork reports;
• Channel subscriptions;
• Unsubscription activity;
• Notification activity;
• Replay views;
• Artwork views;
• Channel visits;
• Competition participation;
• Other community interactions.

This information may be used to operate community features, calculate statistics, identify popular content and prevent manipulation.

2.6 Comments and Replies

When you submit a comment or reply, we may process:

• Comment text;
• Username and account identifier;
• Artwork identifier;
• Parent comment identifier;
• Submission date;
• Approval status;
• Artist moderation decision;
• Administrative moderation actions;
• Reports associated with the comment;
• Relevant security information.

Comments submitted to artwork may remain pending until approved by the artist.

Approved comments and replies may be visible publicly.

Drawpunkt administrators may review, hide or remove comments even after artist approval.

2.7 Live Chat Information

When you enter or participate in a live chat room, we may collect:

• Chat room identifier;
• Message content;
• Sending account;
• Message timestamp;
• Message status;
• Moderation actions;
• Reports;
• Session or entry cursor;
• Rate-limit information;
• Relevant security information.

Drawpunkt may be designed so that a participant sees only messages sent after joining a live session. However, messages may still be stored temporarily or permanently for delivery, security, moderation, abuse prevention and legal compliance.

Chat content must not be treated as private or confidential unless Drawpunkt explicitly states that a particular feature is private.

2.8 Artist Channel Information

If you create or manage an artist channel, we may collect:

• Channel name;
• Channel slug or identifier;
• Channel description;
• Hero title and subtitle;
• Channel status;
• Cover image;
• Hero image or logo;
• Background image;
• Background color;
• Accent color;
• Text colors;
• Font selection;
• Subscriber count;
• Artwork count;
• Engagement statistics;
• Channel eligibility data;
• Channel moderation history;
• Live-room information.

Most artist channel information is intended to be publicly visible.

The exact subscriber count may be restricted to the channel owner and authorized administrators, depending on the design of the Service.

2.9 Subscription and Notification Information

When you subscribe to an artist channel, we may process:

• Subscriber account identifier;
• Artist channel identifier;
• Subscription date;
• Subscription status;
• Notification records;
• Notification read status;
• Notification destination;
• Unsubscription date or activity.

Artists may see aggregate subscriber totals but should not automatically receive private subscriber information unless the Service clearly provides that feature and has an appropriate legal basis.

2.10 Reports and Moderation Records

When content or an account is reported, we may collect:

• Reporting account;
• Reported account or content;
• Selected report reason;
• Explanation supplied by the reporter;
• Supporting evidence;
• Review status;
• Moderator notes;
• Action taken;
• Suspension or ban duration;
• Appeal information;
• Related timestamps.

Moderation records may be retained after content removal or account closure where reasonably necessary to prevent repeated abuse, investigate disputes or comply with law.

2.11 Communications

When you contact Drawpunkt, we may collect:

• Your name;
• Username;
• Email address;
• Message content;
• Attachments;
• Relevant artwork, channel or account URLs;
• Support history;
• Responses sent by Drawpunkt;
• Any additional information you choose to provide.

You should not send passwords, authentication tokens or unnecessary sensitive personal information.

2.12 Technical and Security Information

When you access Drawpunkt, we or our technical service providers may automatically process:

• Internet Protocol address;
• Browser type and version;
• Device type;
• Operating system;
• Screen size;
• Referring page;
• Requested page;
• Access date and time;
• Session identifier;
• Cookie identifiers;
• Login attempts;
• Error logs;
• Security events;
• Request headers;
• Approximate location derived from an IP address;
• Performance information;
• Other information reasonably required to operate and protect the Service.

We do not claim to collect precise GPS location unless a feature expressly requests it.

3. HOW WE COLLECT INFORMATION

We collect information:

• Directly from you when you register, create artwork, edit your profile, submit a comment, send a message or contact us;
• Automatically when your browser or device communicates with the Service;
• From your interactions with artwork, channels, notifications and advertisements;
• From other users who report content or interact with your public content;
• From service providers that help us operate, secure, host or advertise the Service;
• From public sources where reasonably necessary to investigate infringement, impersonation or abuse;
• Where required, from competent authorities or legal representatives.

4. HOW WE USE INFORMATION

We may use personal information to:

• Create and manage accounts;
• Authenticate users;
• Protect account security;
• Save draft artwork;
• Publish artwork;
• Generate and display artwork thumbnails;
• Record and replay drawing processes;
• Display artist profiles and channels;
• Process likes and ratings;
• Receive, approve and display comments;
• Provide artist replies;
• Operate live chat rooms;
• Manage artist channel eligibility;
• Process channel subscriptions;
• Deliver notifications;
• Display content and advertisements;
• Respond to support requests;
• Investigate reports;
• Enforce the Terms of Use;
• Detect spam, fraud and manipulation;
• Prevent unauthorized access;
• Diagnose technical problems;
• Maintain backups;
• Measure Service performance;
• Understand how features are used;
• Improve accessibility and user experience;
• Develop and test new features;
• Establish, exercise or defend legal claims;
• Comply with legal obligations;
• Protect users, Drawpunkt and the public.

5. LEGAL BASES FOR PROCESSING

Where the General Data Protection Regulation, UK GDPR or similar law applies, Drawpunkt may rely on one or more of the following legal bases.

5.1 Performance of a Contract

We may process information where necessary to provide the Service you request, including:

• Creating and managing your account;
• Authenticating your login;
• Saving and publishing artwork;
• Operating replay features;
• Displaying your profile and channel;
• Processing subscriptions;
• Delivering account notifications;
• Providing comments, replies and chat services.

5.2 Legitimate Interests

We may process information where necessary for legitimate interests, provided those interests are not overridden by your rights.

These interests may include:

• Securing the Service;
• Preventing fraud and abuse;
• Moderating content;
• Protecting intellectual property;
• Improving performance;
• Measuring feature usage;
• Maintaining community integrity;
• Responding to support requests;
• Defending legal claims.

5.3 Consent

We may rely on consent for activities such as:

• Non-essential cookies;
• Personalized advertising;
• Certain analytics technologies;
• Optional marketing communications;
• Other processing where consent is required by law.

You may withdraw consent at any time. Withdrawal does not affect processing that occurred lawfully before withdrawal.

5.4 Legal Obligations

We may process or retain information to comply with:

• Court orders;
• Valid government requests;
• Tax or accounting rules;
• Data protection requirements;
• Consumer protection requirements;
• Copyright procedures;
• Safety obligations;
• Other applicable laws.

5.5 Vital Interests and Safety

In exceptional situations, we may process information where reasonably necessary to protect the life, physical safety or vital interests of a person.

6. PUBLIC INFORMATION

Drawpunkt is built around public artistic sharing.

Information that may be visible publicly includes:

• Username;
• Display name;
• Profile photograph;
• Biography;
• Published artwork;
• Artwork title and description;
• Published replay data;
• Likes and rating totals;
• Approved comments;
• Artist replies;
• Artist channel name and design;
• Public channel description;
• Public channel artwork;
• Public live-chat messages;
• Public engagement statistics.

Public information may be:

• Viewed by people without an account;
• Indexed by search engines;
• Linked from other websites;
• Captured in screenshots;
• Copied or shared by other users;
• Retained temporarily in caches;
• Accessible outside your country.

You should not publish information that you wish to keep private.

Removing content from Drawpunkt does not guarantee that copies previously created by third parties will also be removed.

7. ARTWORK AND INTELLECTUAL PROPERTY

Artists retain ownership of their original artwork.

Drawpunkt processes artwork and replay information to host, display, secure and provide the features described in the Terms of Use.

We may create resized, compressed or cached versions of artwork for performance and compatibility.

We may preserve copies where necessary to:

• Resolve copyright disputes;
• Investigate abuse;
• Comply with legal obligations;
• Maintain backup integrity;
• Establish or defend legal claims.

8. AUTOMATED FILTERING AND MODERATION

Drawpunkt may use automated tools to:

• Detect prohibited words;
• Identify spam;
• Limit repeated messages;
• Restrict excessive links;
• Detect suspicious account activity;
• Identify engagement manipulation;
• Prioritize reports for review;
• Protect against malicious code or uploads.

Automated systems may make mistakes.

Where appropriate and required by law, users may contact Drawpunkt to request human review of a decision.

We do not intend to make decisions producing legal or similarly significant effects based solely on automated processing unless permitted by law and accompanied by appropriate safeguards.

9. POPULARITY, RANKING AND RECOMMENDATIONS

Drawpunkt may use information such as:

• Recent message activity;
• Number of active chat participants;
• Artwork likes;
• Artwork ratings;
• Number of ratings;
• Approved comments;
• Replay activity;
• Channel subscriptions;
• Publication frequency;
• Moderation status;
• Recency;
• Authentic engagement signals.

These factors may be used to identify popular chat rooms, featured artists, trending artwork or channel eligibility.

Drawpunkt may remove fraudulent or manipulated engagement from these calculations.

10. ADVERTISING

Drawpunkt may display:

• Direct image advertisements uploaded by administrators;
• Google AdSense advertisements;
• Other third-party advertising permitted by Drawpunkt.

Direct image advertisements may involve loading an advertisement image and linking to an advertiser’s destination page. Drawpunkt may record limited delivery or interaction information where legally permitted.

Google and its advertising partners may use cookies, device identifiers, IP addresses and similar technologies to:

• Deliver advertisements;
• Select advertisements;
• Limit advertisement frequency;
• Measure advertisement performance;
• Prevent fraud;
• Provide personalized advertisements where permitted;
• Provide non-personalized advertisements;
• Generate advertising reports.

The precise information processed by Google is governed by Google’s own policies and advertising controls.

Where legally required, Google advertising and other non-essential advertising technologies should not be activated until the user has made an appropriate consent choice.

Users in the European Economic Area, United Kingdom and Switzerland may be presented with a consent management interface for advertising choices.

Rejecting personalized advertising does not necessarily remove all advertising. Non-personalized or contextual advertisements may still be displayed where legally permitted.

11. COOKIES AND SIMILAR TECHNOLOGIES

Drawpunkt may use cookies or similar storage for:

• Login sessions;
• Account authentication;
• CSRF security;
• Session continuity;
• Language or interface preferences;
• Consent choices;
• Rate limiting;
• Fraud prevention;
• Advertising;
• Measurement and performance.

Essential cookies are required for important Service functionality and may not be optional.

Non-essential cookies should be used only as permitted by applicable law and, where required, after consent.

More information is provided in the Cookie Policy.

12. SERVICE PROVIDERS

We may share information with service providers that perform functions on our behalf, including:

• Website hosting;
• Database hosting;
• Content delivery;
• Email delivery;
• Security monitoring;
• Backup services;
• Technical support;
• Advertising;
• Consent management;
• Analytics;
• Error monitoring;
• Legal and professional services.

Service providers should receive only the information reasonably necessary for their assigned function and should be subject to appropriate contractual or legal obligations.

The specific providers used by Drawpunkt may change over time.

13. WHEN WE MAY SHARE INFORMATION

We may disclose information:

• With your direction or consent;
• To service providers operating on our behalf;
• To investigate fraud, abuse or security incidents;
• To respond to a valid legal request;
• To protect the rights and safety of users or others;
• To enforce the Terms of Use;
• To investigate copyright or intellectual-property complaints;
• In connection with a merger, acquisition, financing, restructuring or transfer of the Service;
• When information has been aggregated or anonymized so it no longer reasonably identifies a person.

Drawpunkt does not sell ownership of user artwork.

Drawpunkt does not intend to sell personal information to data brokers.

Certain advertising disclosures may be treated as “sharing” or “sale” under some privacy laws even when no money is exchanged. Where applicable, Drawpunkt should provide the legally required choices.

14. LEGAL REQUESTS

We may preserve, access or disclose information where we reasonably believe it is necessary to:

• Comply with applicable law;
• Respond to a court order, subpoena or other valid legal process;
• Protect the safety of a person;
• Investigate fraud or unauthorized access;
• Enforce agreements;
• Protect Drawpunkt’s legal rights;
• Prevent serious harm.

Where legally permitted and appropriate, we may notify an affected user before responding to a request.

15. INTERNATIONAL DATA TRANSFERS

Drawpunkt may use hosting, advertising or other service providers located outside your country.

As a result, information may be processed in countries with different data protection laws.

Where required, Drawpunkt should use appropriate safeguards for international transfers, such as:

• Adequacy decisions;
• Standard contractual clauses;
• Approved contractual safeguards;
• Legally recognized certification mechanisms;
• Other lawful transfer methods.

16. DATA RETENTION

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including legal, accounting, security and dispute-resolution requirements.

Retention periods may vary by category.

Account information may be retained while the account remains active.

Draft and published artwork may be retained until deleted, removed or the associated account is closed, subject to backup and legal retention needs.

Replay data may be retained with the associated artwork.

Chat messages may be retained for delivery, moderation, abuse prevention and security. The fact that an earlier message is not visible to a newly joined participant does not necessarily mean that it has already been deleted from the system.

Moderation records may be retained after account closure to prevent repeat abuse and document enforcement decisions.

Security logs may be retained for a period appropriate to investigate attacks, fraud and unauthorized access.

Reports, legal complaints and related evidence may be retained until the matter and relevant limitation periods have ended.

Backup copies may remain for a limited period after deletion until overwritten through the ordinary backup cycle.

Drawpunkt should periodically review retention periods and remove or anonymize information that is no longer required.

17. ACCOUNT CANCELLATION AND DELETION

Users may use available account controls to request or perform account cancellation.

Account closure may result in:

• Loss of account access;
• Removal or anonymization of profile information;
• Removal of drafts;
• Removal, anonymization or continued limited retention of published content;
• Closure of artist channels;
• Termination of subscriptions;
• Loss of access to notifications;
• Retention of necessary moderation and security records.

Some information may not be deleted immediately where retention is required for:

• Legal obligations;
• Fraud prevention;
• Security investigations;
• Copyright disputes;
• Enforcement history;
• Legal claims;
• Backup integrity.

Before closing an account, users should download any artwork they wish to retain.

18. YOUR PRIVACY RIGHTS

Depending on your location and applicable law, you may have the right to:

• Be informed about processing;
• Request access to personal information;
• Request correction of inaccurate information;
• Request deletion;
• Request restriction of processing;
• Object to certain processing;
• Withdraw consent;
• Request data portability;
• Opt out of certain advertising activities;
• Request information about certain disclosures;
• Appeal certain privacy decisions;
• Submit a complaint to a supervisory authority;
• Request human review of certain automated decisions.

These rights are not absolute. A request may be limited where information must be retained for legal, security, freedom-of-expression or other lawful reasons.

19. HOW TO EXERCISE YOUR RIGHTS

You may submit a privacy request through the Contact page or privacy email address.

Your request should include:

• Your username;
• The email address connected to the account;
• The right you wish to exercise;
• Sufficient information to understand the request;
• Relevant artwork, channel or account URLs where applicable.

We may request reasonable verification to protect your account and prevent unauthorized disclosure.

We will not request your password.

Authorized representatives may submit requests where permitted by law, but proof of authority and identity verification may be required.

Drawpunkt will respond within the period required by applicable law.

20. WITHDRAWING CONSENT

Where processing is based on consent, you may withdraw consent through:

• Cookie or privacy controls;
• Unsubscription controls;
• Account settings;
• Advertising consent controls;
• The Contact page;
• The published privacy email address.

Withdrawal does not affect processing performed lawfully before withdrawal.

Some Service features may not function correctly if essential processing is disabled.

21. ADVERTISING CHOICES

Where advertising choice controls are available, users may be able to:

• Accept or reject personalized advertising;
• Manage advertising vendors;
• Withdraw previous consent;
• Select non-personalized advertising;
• Review cookie categories;
• Change privacy choices later.

Browser controls may also be used to delete or block cookies, although blocking essential cookies may prevent account functionality.

22. CHILDREN’S PRIVACY

Drawpunkt is not intended to knowingly collect personal information from children who cannot legally consent to use the Service without parental authorization.

The legally applicable age may differ by country.

If a parent or guardian believes that a child supplied personal information without valid authorization, they should contact Drawpunkt.

We may remove the information and close the account after appropriate verification.

Users must never upload sexual, exploitative or otherwise harmful content involving minors.

Suspected child exploitation may be reported to appropriate authorities.

23. SECURITY

Drawpunkt uses reasonable technical and organizational measures intended to protect information.

These measures may include:

• Password hashing;
• Secure session management;
• CSRF protection;
• Access controls;
• Role-based administration;
• Input validation;
• File-type validation;
• Upload-size limits;
• Rate limiting;
• Moderation tools;
• Audit logging;
• Database access controls;
• Security monitoring;
• Backup procedures;
• HTTPS when properly configured.

No online system can guarantee absolute security.

Users are responsible for choosing a strong password, protecting their email account and reporting suspected unauthorized access.

24. DATA BREACHES

If a personal-data breach occurs, Drawpunkt will investigate and take reasonable steps to contain and address it.

Where required by applicable law, Drawpunkt will notify:

• Affected individuals;
• Competent data protection authorities;
• Service providers or other relevant parties.

Notifications may describe the nature of the incident, likely consequences and protective steps.

25. EXTERNAL LINKS

Drawpunkt may link to advertiser websites, artist links or other third-party services.

This Privacy Policy does not govern third-party websites.

Drawpunkt is not responsible for the privacy or security practices of external websites. You should review their privacy policies before providing information.

26. DO NOT TRACK AND GLOBAL PRIVACY SIGNALS

Browser-based privacy signals are not interpreted uniformly across all services and jurisdictions.

Where legally required and technically supported, Drawpunkt may recognize applicable opt-out signals such as the Global Privacy Control.

Users may also manage privacy through available cookie and account settings.

27. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect:

• Changes to the Service;
• New features;
• New service providers;
• Changes to advertising;
• Security developments;
• Legal requirements;
• Changes to data practices.

The updated policy will display a revised “Last Updated” date.

Where required by law or where changes are material, we may provide additional notice through the website, account interface or email.

28. COMPLAINTS

You may contact Drawpunkt if you believe your information has been processed incorrectly.

Depending on your location, you may also have the right to complain to a competent data protection authority.

Contacting Drawpunkt first may allow us to investigate and resolve the issue more quickly, but it does not remove your right to contact an authority.

29. CALIFORNIA AND OTHER UNITED STATES PRIVACY RIGHTS

Residents of certain United States jurisdictions may have additional rights, including rights to:

• Know what personal information is collected;
• Request access or deletion;
• Correct inaccurate information;
• Opt out of certain sales or sharing;
• Limit certain uses of sensitive personal information;
• Receive equal service after exercising privacy rights.

The availability and scope of these rights depend on applicable law and whether Drawpunkt meets the relevant legal thresholds.

Drawpunkt does not intend to discriminate against users for exercising valid privacy rights.

30. EUROPEAN ECONOMIC AREA, UNITED KINGDOM AND SWITZERLAND

Where European data protection law applies:

• The operator identified on the Contact page acts as controller unless stated otherwise;
• Processing purposes and legal bases are described in this Privacy Policy;
• Users may have access, correction, deletion, restriction, objection and portability rights;
• Users may withdraw consent at any time;
• International transfers should use recognized safeguards where required;
• Users may complain to a competent supervisory authority;
• Advertising consent must be managed in accordance with applicable requirements.

If Drawpunkt is established outside the European Economic Area or United Kingdom but is legally required to appoint a representative, the representative’s details should be published on the Contact page.

31. DATA PROTECTION CONTACT

For privacy requests or questions, use the privacy contact information published on Drawpunkt’s Contact page.

Your message should include enough information for us to understand and verify your request.

Do not include your password, authentication tokens or unnecessary identity documents.

32. CONTACT INFORMATION

Service: Drawpunkt
Website: The official Drawpunkt website
Operator: As identified on the Contact page
Support Email: As published on the Contact page
Privacy Contact: As published on the Contact page

By continuing to use Drawpunkt, you acknowledge that you have read and understood this Privacy Policy.