Privacy Policy

Effective and last updated: November 1, 2026

This Privacy Policy explains how the developer of Doodle Go (“we”, “us”, “our”) handles information when you play Doodle Go on iOS, Android, the web or other platforms, and when you visit doodlego.app (together, the “Service”). Doodle Go is made by an independent developer based in the Republic of Korea.

1. Who we are

The developer of Doodle Go is the controller (the party responsible) for the personal information described in this policy. For any privacy question, request or complaint, contact our privacy contact at support@orcalabs.net.

2. Information that stays on your device

The game stores the following on your device only. We do not receive it unless it is listed in section 3.

• Game data: your progress, stars and stamps, the drawings you made on each page, your records, your language and sound settings, and (in the mobile apps) your pencil count, refill timers, how many ads you watched for pencils today and random receipt numbers that stop the same ad from paying twice. The mobile apps also remember whether your region lets you change your ad consent later, so that the Ad privacy choices button can show.
• Sign-in key: a random secret that lets the game reconnect to your guest profile. In the iOS and Android apps it is kept in the system’s secure storage (Keychain or Keystore). In a web browser it is kept in a secure, HttpOnly cookie (see section 14).
• Hidden players: the player IDs of players you hide on the leaderboards. We do not receive this list.
• Share videos: when you tap Share after clearing a page, the game records a short video of your creature’s run on your device and hands it to your device’s share sheet. We do not upload it. Where it goes next is up to you and the app you choose. On iOS the game asks for permission only to add the video to your Photos when you choose “Save Video”; it cannot read your photo library.

Your device’s own backup (for example iCloud or Google backup) may include this game data, according to your device settings. Those backups are handled by Apple or Google under their privacy policies.

3. Information we process online

The game connects to our server only after you agree to the online rules and choose to join the online rankings (from the leaderboard or your name tag). It then creates a guest profile; you do not need to sign up. Records you made before joining stay on your device and are uploaded when you join. If your device is offline, nothing is sent and the leaderboards are simply unavailable.

Giving us this information is not required by law. If you play offline, you can still play the whole game; you just won’t appear on the online leaderboards.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our server does automatically check whether a submitted record is valid; a record that fails the check is simply not ranked.

4. What other players can see

On the online leaderboards, anyone using the game can see your display name, your player tag (your name followed by “#” and the first 10 characters of your player ID), your country or region if you chose one, the platform you last played on, and the stars, time and ink of your ranked records. The leaderboard data sent to other players’ devices includes your full random player ID.

Please choose a display name that does not reveal who you are. Don’t use your real name, your email, phone number, address, social media handle or anything that could identify or contact you. We may change or remove names that break our Terms of Use.

We do not publish your drawings.

5. Ads in the mobile apps, and what we don’t do

From version 1.0.1, the iOS and Android apps offer rewarded ads: when you have fewer pencils than the refill limit, you can choose to watch an ad to get more (a few times a day). An ad is never shown unless you tap that button. The app does not contact Google’s ad service until you tap an ad button or Ad privacy choices. After the first ad tap (each time the app is started), it asks for consent where needed, loads and shows the ad, and then keeps the next ad loaded in advance while the app stays open, so later ads start at once. The website and the web game have no ads.

These ads are provided by Google AdMob (Google LLC, or Google Ireland Limited for users in the European Economic Area, the United Kingdom and Switzerland). Google’s software in the app receives, directly from your device, information such as your device’s advertising identifier (on iOS only if you allow tracking), your IP address, the device model, operating system and language, the app and its version, and which ads were requested, shown and tapped. Google uses it to choose and show ads, to measure them and to prevent fraud, as described in How Google uses information from sites or apps that use its services and in Google’s Privacy Policy. We do not receive your advertising identifier or IP address from Google; we see only totals, such as how many ads were shown.

• Your choices: in the European Economic Area, the United Kingdom and Switzerland, the app shows Google’s consent message before ads are personalized, and you can change your choice at any time with Ad privacy choices in the game’s sound settings. On iOS, ads are personalized only if you allow tracking when asked; you can change this in Settings › Privacy & Security › Tracking. On Android, you can delete or reset your advertising ID in your device’s settings. If you refuse, you can still watch ads, but they will not be personalized; you can also simply never tap an ad button, and then nothing is sent to Google. When you change your choice, an ad loaded, or still loading, under your earlier choice is discarded and a new one is requested under your new choice.
• Ad content: we ask Google to show only ads suitable for general audiences.

What we don’t do:

• We do not include analytics, attribution or crash-reporting SDKs, and no SDK other than Google’s ad software receives data from the game.
• We ourselves do not track you across other companies’ apps or websites, and our server never receives your device’s advertising ID.
• We do not collect your precise location, contacts, photos, microphone or camera.
• We do not sell your personal information. Where you allow personalized ads, Google’s use of your advertising identifier may count as “sharing” for cross-context behavioral advertising under some US state laws; you can opt out with the choices above.
• The current version has no in-app purchases. If we add purchases in a later version, we will update this policy first.

6. Legal bases

Where laws such as the EU or UK General Data Protection Regulation (GDPR) apply, we rely on these legal bases:

• Performance of a contract (providing the Service you asked for): creating your guest profile, keeping your name, country and records, and showing the leaderboards.
• Legitimate interests: verifying records and preventing cheating, filtering display names and reviewing reports, rate limiting and protecting the Service from abuse and attacks, and keeping it working. We have weighed these interests against your rights; you can object (see section 11).
• Legal obligation: when we must keep or disclose information by law.
• Consent: only where we ask for it, such as iOS permission to save a video to Photos, Apple’s tracking permission, and Google’s consent message for ads where the law requires it. You can withdraw it at any time in your device settings or with Ad privacy choices.
• For a rewarded ad you choose to watch, Google’s processing that is not personalized relies on the legal bases Google describes for its own services.

7. Service providers and disclosures

We use one service provider to run the online part of Doodle Go:

• Cloudflare, Inc. (United States; global network) hosts our server, database and website and processes the information in section 3 on our behalf, under its Data Processing Addendum. Cloudflare’s own handling of data is described in its privacy policy.

In the iOS and Android apps, Google provides the rewarded ads and receives the information in section 5 directly from your device. Google acts as an independent controller of that information under its own policies.

Apple, Google and other stores where you get the game, and the apps you choose to share videos with, handle information under their own privacy policies. We do not receive your store account details.

We do not sell, rent or give your personal information to anyone else, except when required by law (for example a valid court order), to protect the rights, safety or property of players, us or others, or as part of a transfer of the game to a new operator, who would have to keep this policy’s protections.

8. International transfers

Our database runs in Cloudflare’s Asia-Pacific region. Cloudflare may process requests and request logs in any country where it has data centers, including the United States, so your information may be processed outside your country.

• What is transferred: the information listed in section 3.
• To whom: Cloudflare, Inc. (privacy contact: privacyquestions@cloudflare.com).
• When and how: each time the game connects to our server, over encrypted connections (HTTPS).
• Why and for how long: to host and run the Service, for the periods in section 9.
• Safeguards: Cloudflare’s Data Processing Addendum, which includes the European Commission’s Standard Contractual Clauses and the UK Addendum; Cloudflare also participates in the EU-U.S. Data Privacy Framework and holds Global CBPR certification.
• How to refuse: don’t join the online rankings, or play offline. The game works fully offline; only the online leaderboards and name changes become unavailable. To remove data already sent, see section 10.

Google, which provides the ads in the mobile apps, may process the information in section 5 in the United States and other countries, under the safeguards in its own privacy policy (including the EU-U.S. Data Privacy Framework and the European Commission’s Standard Contractual Clauses). It is transferred over encrypted connections from the moment you first tap an ad button or Ad privacy choices after starting the app, while the app requests, loads in advance and shows ads. To refuse, don’t tap ad buttons (the rest of the game works the same), and use the choices in section 5.

9. How long we keep information

• Guest profile (player ID, display name, country, platform) and ranked records: until you delete them in the game or ask us to, or until we shut down the online features.
• Drawings: only the drawings of your current best records are kept. When you beat a record, the old drawing is erased right away; the small receipt of an old run (scores without the drawing) becomes eligible for deletion after 30 days. Our server deletes these receipts in batches whenever players submit records or new players join, so a receipt may remain somewhat longer than 30 days; it is always deleted with your profile.
• Session key hash: each sign-in key is valid for one year and is renewed when you play; it is deleted with your profile. After you delete your online data in the game, we keep only the one-way hash of the deleted sign-in key and the time of deletion, for 30 days (a daily cleanup then erases it), so that if your device asks again (for example because the first answer was lost) we can tell it the deletion is done. It is not linked to any profile, name or record.
• Reports: 180 days after they are made (a daily cleanup then erases them), and deleted earlier if either the reporting or the reported profile is deleted.
• Request logs kept by Cloudflare for us (which may include IP addresses): a few days.
• Backups: our database provider keeps rolling backups for up to 30 days, so deleted data disappears from backups within that time.
• Emails: as long as needed to handle your request, and then up to one year in case of follow-up questions, unless the law requires longer.
• Ad information received by Google: for the periods in Google’s retention policy. On your device, today’s ad count (it starts again each day, in UTC) and the receipt numbers in section 2 (only the 20 most recent are kept) are deleted when you delete the app or its data.

When information is no longer needed, we delete it from the database so it cannot be recovered.

10. How to delete your data

You can delete your Doodle Go online profile and all data linked to it (display name, country, platform, records, drawings, reports you made or that were made about you, and sign-in data) yourself, at any time and free of charge, right in the game:

1. On the title screen, tap your name in the bottom corner (on a leaderboard, tap the pencil next to your name).
2. Tap Delete online data, read what will happen, and tap Delete.

Your profile and everything linked to it are deleted from our database right away, and you disappear from the leaderboards. Your device also forgets its sign-in key. Copies in our database provider’s rolling backups are gone within 30 days (see section 9). Deleting your online data does not delete the progress, drawings and settings stored on your device. Deleting needs an internet connection. Online rankings are turned off on your device before the game asks our server, so even if the answer is lost nothing is uploaded again; if the game can’t confirm the deletion, it tells you, and you can simply try again.

After you delete your online data, online rankings stay off on that device: the game does not create a new profile or send anything to our server until you tap Turn online rankings back on. If you do, a new profile is created and the records still on your device are uploaded again.

If your device’s sign-in key has expired (it lasts a year and is renewed whenever you play online), our server can no longer tell that the profile is yours, so the game can’t delete it for you. The game then shows your player tag and asks you to email us, as below; online rankings are turned off on your device in the meantime.

If you can’t use the game any more (for example you deleted the app or lost your device), email support@orcalabs.net with the subject “Delete my Doodle Go data” and your display name or player tag (for example Doodler #1A2B3C4D5E) and any details you remember. We may ask a question to confirm the profile is yours; we delete it within 30 days and reply to confirm.

11. Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you and get a copy of it in a portable format;
• correct it (you can change your display name and country yourself in the game);
• delete it (see section 10);
• restrict or object to how we use it, including uses based on legitimate interests;
• withdraw consent you gave, without affecting earlier processing;
• not be treated differently for using these rights.

To use any of these rights, email support@orcalabs.net with your player tag. A parent or legal guardian, or someone you authorize, may also make a request for you. We will answer within 30 days (or sooner if your local law requires). If you are not happy with our answer, you can complain to the data protection authority where you live, work, or where you think the problem happened.

12. Security

All connections to our server use HTTPS encryption. Our database stores only a one-way hash of your sign-in key, never the key itself, and the apps keep the key in your device’s secure storage. Access to the database is limited to the developer. Our server checks every request and limits how often requests can be made. No system is perfectly secure; if a breach affecting your information happens, we will notify you and the authorities as the law requires.

13. Children

Doodle Go is a game for all ages. The whole game can be played without sending us anything. The online rankings are optional: nothing is sent to our server until the player agrees to the online rules in the game, and the game asks players under 18 to read them with a parent or guardian.

We do not ask for anyone’s age, real name, email, phone number, contacts or location. The game is designed so that a player never has to give personal information: the default name is “Guest_…”, the country is shown only if chosen, names with offensive words are refused, and there is no chat or messaging between players. In the mobile apps an ad appears only when a player chooses to watch one for pencils, and we ask Google to show only ads suitable for general audiences; Google’s information use for ads is described in section 5. A player who joins the online rankings shares only the information in section 3.

If your child is younger than the age at which your country lets children agree to online services on their own (for example 14 in the Republic of Korea or 13 in the United States), please decide together whether they join the online rankings. They can play the whole game without joining.

If you are a parent or guardian and believe your child has put personal information in their display name, or you want your child’s online profile deleted, you can delete it in the game as described in section 10, or email support@orcalabs.net and we will delete it.

14. The website and cookies

doodlego.app has no ads, no analytics and no tracking cookies, and it loads nothing from other companies. Its playable demo does not connect to our server. The demo remembers whether you turned the sound off in your browser’s local storage; it never leaves your device. When you visit, Cloudflare processes your IP address and request data to deliver the pages and protect the site.

If you play the full game in a web browser, it sets one strictly necessary cookie, __Host-doodlego, that holds your sign-in key so the game can reconnect to your guest profile. It lasts up to one year, is readable only by our server, and is not used for tracking. Because it is strictly necessary, it does not need consent; if you block it, the online leaderboards will not work.

Some browsers send a “Do Not Track” signal. Because we do not track you across sites or services, we treat every visitor the same way whether or not the signal is sent.

15. Additional information for certain regions

European Economic Area, United Kingdom and Switzerland

Your rights under the GDPR, UK GDPR and Swiss law are described in section 11, and the legal bases in section 6. You can complain to your local data protection authority; a list of EU authorities is available from the European Data Protection Board, and in the UK you can contact the Information Commissioner’s Office.

United States, including California

In the past 12 months we have collected the categories of information in section 3: identifiers (a random player ID and IP address), the content you provide (display name and drawings), and gameplay information (records). We use them only for the purposes in section 3. We do not sell personal information, and we do not use or disclose sensitive personal information. In the mobile apps, Google receives identifiers and internet activity about ads (section 5); if you allow personalized ads, this may be “sharing” for cross-context behavioral advertising, and you can opt out with the choices in section 5. You can make the requests described in section 11 regardless of where in the United States you live.

Republic of Korea

The information we process, purposes, retention periods and deletion methods are described in sections 3, 9 and 10, our service provider and overseas transfer in sections 7 and 8, and your rights and how to use them in section 11. Our privacy contact (개인정보 보호책임자) can be reached at support@orcalabs.net. We do not provide your personal information to third parties. In the mobile apps, Google collects behavioral information for ads (행태정보: the advertising identifier, and which ads were requested, shown and tapped) directly through its software once you tap an ad button or Ad privacy choices, when ads are requested, loaded in advance and shown, to show and measure ads; it keeps it under its retention policy, and you can refuse as described in section 5. If you need help with a privacy concern, you can also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118), the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972), the Supreme Prosecutors’ Office (www.spo.go.kr, 1301) or the Korean National Police Agency (ecrm.police.go.kr, 182).

Brazil

You have the rights in Article 18 of the LGPD, including confirmation of processing, access, correction, anonymization or deletion, portability, information about sharing, and revocation of consent. You may contact us as described in section 11, and you may petition the National Data Protection Authority (ANPD).

Japan

We take the security measures in section 12. Our service provider, Cloudflare, Inc., is based in the United States and holds Global CBPR certification. You can ask us to disclose, correct, stop using or delete your information as described in section 11.

16. Changes to this policy

We may update this policy, for example when we add features. We will post the new version on this page with a new date. If a change significantly affects how we use your information, we will tell you in the game or in the store’s release notes before it takes effect and, where the law requires, ask for your consent.

17. Contact

Questions, requests or complaints about privacy: support@orcalabs.net.

See also our Terms of Use.