PRIVACY POLICY
The short version. Doodle Stick contains no advertising, no analytics and no tracking of any kind. We do not sell or share your data with advertisers, and we never build a profile of you. We ask for as little as possible: you can play the whole game without ever giving us your name or email. What you type as a display name, and what you draw in an online room, is visible to the other players in that room.
1. Who is responsible for your data
The data controller for Doodle Stick is:
- DNA TECHBASE S.R.L.
- Registered office: Aleea Romanilor Nr. 23, Bl. 12, Scara 2, Ap. 107, Deva, Hunedoara County, Romania
- Trade Register number: J2025048383009 · Unique registration code (CUI): 52084942
- Contact for any privacy question or request: contact@dnatechbase.com
We are established in Romania, so this policy is written to meet the EU General Data Protection Regulation (GDPR). We have not appointed a Data Protection Officer, as we are not required to; privacy requests go to the address above.
2. What we collect, and why
We do not ask for your real name, your address, your phone number or your precise location. We never access your device's location, camera, photos or contacts.
| What | Why we need it | Legal basis |
|---|---|---|
| An account identifier. When you first open the app we create an anonymous account automatically. It is a random identifier with no personal details attached. | So the game can keep your progress and tell players apart inside a room. Without it the online game cannot work. | Performance of our contract with you (Art. 6(1)(b)) |
| Your display name and chosen country flag, if you play online. You type these yourself and they can be anything; they do not have to be your real name or your real country. | So other players can tell who is who in a room. | Performance of our contract (Art. 6(1)(b)) |
| What you do in a game room: the lines you draw, your character's position and score, and any chat message you send. | To run the shared game. Other players have to see your lines and your character for multiplayer to exist. | Performance of our contract (Art. 6(1)(b)) |
| Your email address, only if you choose to create an account or sign in with Google, Apple or email. This is optional; the game works fully without it. | So your progress survives reinstalling the app, and so we can help you recover access. | Performance of our contract (Art. 6(1)(b)) |
| Reports you send us about another player, and records of moderation action. | To keep the game safe, and because the app stores require us to act on reports. | Our legitimate interest in a safe service, and our legal obligations (Art. 6(1)(f) and (c)) |
If you sign in with Apple and choose Hide My Email, we only ever receive Apple's relay address, never your real one.
3. What we do not collect
- No advertising and no ad identifiers. The app contains no ad network.
- No analytics or tracking. There is no Google Analytics, no Firebase Analytics, no crash-reporting SDK, no third-party tracker of any kind in the app.
- No location. The country flag is one you pick from a list. We never look up where you actually are, and the app requests no location permission.
- No audio recording. The app never records, stores or uploads audio. On phones and tablets the voice feature is inactive and no microphone permission is requested. In a desktop Chrome or Edge browser you can optionally use voice commands; there the browser itself handles the speech and only the resulting text reaches the game. You control this with a button and it is off until you turn it on.
- No selling of data, ever, to anyone.
4. What other players can see
This matters, so we want to be plain about it. When you join an online room, these are visible to the other people there: your display name, your chosen country flag, your character's position and score, the lines you draw, and any chat message you send. Chat messages may also be read aloud by other players' devices using their own device's speech function.
Please do not put personal information in your display name, in what you draw, or in a chat message. Treat it as public.
5. Who else handles your data
We keep the list of third parties as short as we can. We use:
- Google Firebase (Google Ireland Limited and Google LLC) for sign-in and for the database that carries the shared game. Firebase acts as our processor under a data processing agreement.
- Google Sign-In and Sign in with Apple, only if you choose to use them to sign in. Those companies handle that sign-in under their own privacy policies.
We do not use any other processor. We do not share your data with advertisers, data brokers or analytics companies, because we do not work with any.
6. Where your data is stored, and international transfers
The game database and the sign-in service run on Google's infrastructure in the United States. This means your data is transferred outside the European Economic Area.
Those transfers are covered by the European Commission's Standard Contractual Clauses, which Google incorporates into its Firebase data processing terms, together with the additional safeguards Google applies. You can ask us for more detail at contact@dnatechbase.com.
7. How long we keep it
- While you are playing: your position, score and presence exist only while you are in a room, and are removed automatically when you leave, close the app or lose connection.
- Chat messages are cleared a few seconds after they are sent.
- Lines you draw stay in the room while it exists. You can erase your own lines at any time with the eraser, and deleting your account removes them.
- Rooms and match results are kept while the game runs, so that a room you shared a code for still works. They are not deleted on a timer. If you want them gone sooner, delete your account, which removes the rooms you created and your results, or ask us and we will remove them.
- Your account is kept until you delete it, which you can do at any time in the app.
- Reports about abuse are kept for up to 12 months so that repeat behaviour can be recognised, then deleted.
We would rather tell you plainly how this works than promise a schedule we do not run: apart from reports, we do not currently delete game data on a fixed timetable. What we do guarantee is that you can delete it yourself whenever you want, and that we will act on any request within 30 days.
8. Deleting your account and your data
You can delete your account from inside the app: open account from the main menu and choose Delete account. This removes your account and the game data attached to it, including your display name where it appears in rooms you created and the lines you drew. It cannot be undone.
You can also ask us to do it. Email contact@dnatechbase.com from the address linked to your account, or tell us your display name and room code, and we will delete it within 30 days. See how to delete your account and data.
9. Your rights
Under the GDPR you have the right to: get a copy of the data we hold about you; have it corrected; have it erased; restrict or object to how we use it; receive it in a portable form; and withdraw consent where we relied on it. You will never be treated differently for exercising these rights.
To make a request, email contact@dnatechbase.com. We answer within one month. Because most accounts are anonymous, we may need you to give us details only you would know, such as your account identifier or the rooms you played in, so we do not disclose someone else's data to you.
If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to a supervisory authority, in Romania the National Supervisory Authority for Personal Data Processing (ANSPDCP, www.dataprotection.ro), or to the authority where you live.
10. Children
Doodle Stick is not directed at children under 13, and we do not knowingly collect data from them. If your country in the EEA sets a higher age for consenting to online services, that age applies instead.
If you are a parent or guardian and believe your child has provided us with personal data, contact contact@dnatechbase.com and we will delete the account and its data promptly.
11. Security
Connections between the app and our servers are encrypted with HTTPS. Access to the game database is controlled by server-side rules, and sign-in is handled by Firebase Authentication so that we never see or store your password. No service can promise perfect security, but we keep the amount of data we hold deliberately small, which is the strongest protection we can offer you.
12. Changes to this policy
If we change this policy we will update the date at the top, and if the change is significant we will tell you in the app before it takes effect.
13. Contact
For anything in this policy, including access and deletion requests: contact@dnatechbase.com
DNA TECHBASE S.R.L., Aleea Romanilor Nr. 23, Bl. 12, Scara 2, Ap. 107, Deva, Hunedoara County, Romania