Privacy Notice

Last updated: 2026-05-31

Here's what data DoodleSwarm stores about you, why, and what you can do about it. No legalese.

What we collect

Public — visible to anyone on the site:

  • Your handle, bio, and drawn avatar (or the default DiceBear avatar derived from your handle if you haven't drawn one).
  • Posts (your drawings and captions), comments, reactions, and follows.
  • Account creation date, shown on your profile.

Private — only you and site admins can see this:

  • Your email address, used for login, email verification, and account-related notifications.
  • A hashed version of your password — we never store or see your raw password.
  • Active sessions (login cookies, with the browser and device that created them).
  • Notifications addressed to you.
  • Reports you've filed and feedback you've submitted.

What we don't collect

  • No analytics, no third-party trackers, no advertising IDs, no fingerprinting.
  • No external media. Because the only way to post a picture is to draw it on the built-in canvas, there's no uploaded image data, EXIF, or any of the metadata that uploads carry.
  • We don't sell, rent, or share data with advertisers. There are no advertisers.

Cookies and local storage

We only use cookies for things the site can't work without, or to remember a preference you set on this device:

  • A session cookie set after login — essential for keeping you signed in.
  • A sidebar-preference cookie that remembers whether your navigation sidebar is expanded or collapsed, so the page doesn't flicker on load.

We also use the browser's localStorage to remember your theme (light or dark) and the same sidebar preference. None of this is sent to anyone or used to track you. No tracking cookies, no advertising cookies, no analytics cookies — and so no consent banner, because there's nothing to consent to.

Third-party services

We use a transactional email provider to send verification emails and account notifications. They process your email address solely to deliver mail. (Provider: <TBD>.) We use a hosting and database provider. (Names: <TBD>.)

That's the full list of third-party services at present.

How long we keep it

  • Active accounts: data is kept as long as the account exists.
  • Banned accounts: we keep the account row so we can recognize ban evasion. Public content is hidden.
  • Deleted accounts: the row is anonymized (no personal data left) and kept only as an inert anchor so other people's replies survive.
  • Email verification tokens: expire after a short window.
  • Sessions: expire on their own and can be revoked from Settings.

Account deletion

You can delete your account at any time from Settings → Danger zone (you'll confirm with your handle and password). Deletion is immediate and permanent: your email, password, handle, bio, and avatar are erased, and the content of your own posts and comments is scrubbed. Replies other people left on your posts stay in place — they aren't yours to delete — shown under a "removed" placeholder. We don't keep a recoverable copy.

Access and corrections

You can edit your handle, bio, drawn avatar, and email from Settings. For anything you can't change from the UI, email <TBD-contact-email>.

Children

DoodleSwarm isn't directed to children under 13. If we learn an account belongs to a child under 13, we'll delete it.

Changes

We'll update this notice as the site grows. Material changes will be announced in-app.

Contact

For privacy questions: <TBD-contact-email>.

See also the Content Policy.