Privacy Policy

Updated October 18, 2026.

On this device

Your progress (your dabs, items, ranks and settings) is saved on this device. You don’t need an account to play.

Your username

Your username is kept on our server so no one else can take it. Other players can see it, with your paint colour and rank.

Your account

If you make an account, we keep your username, your email, your first and last name, your birth year, and when you agreed to these terms. Your email, name and birth year are private: other players never see them. We ask for your birth year because online play is for players 13 and older.

We use your email only for your account: a welcome email that confirms it, a link to reset your password when you ask for one, and a note if your password changes. No newsletters, and we never share it.

While you’re signed in, we also keep a copy of your game progress (your dabs, items, ranks, unlocks and lessons done) with your account, so you can log in on another phone and pick up where you left off. Log out leaves it with your account and starts this device fresh.

Your password is handled by our sign-in provider, Supabase. It’s stored scrambled (hashed), never in a form anyone can read, not even us.

Playing online

To run friends and online matches we keep your friend code, your friends, friend requests and blocks, invites to play, your Time trial scores for the friends board, records of your online matches, and when you were last online.

Play stats

To make the game better, it sends us anonymous stats about how it’s played: the modes and canvases you play and how matches go, how far you’ve got in the lessons, your rank and dabs, what you look at and buy in the Paint Shop, what you craft, and whether ads you chose to watch finished. They go with a random number made for this copy of the game, not your name or anything that identifies your device. While you’re signed in, they’re linked to your account. We use them only to improve the game, never for ads, and we don’t sell them. You can turn them off here.

Where’s the switch?In the game: Settings › Privacy Policy, then Turn off play stats.

Who has it

We don’t sell your information. Supabase stores it for us, Resend sends our account emails, and online matches run on our game server.

Ads

In the iPhone app you can choose to watch an ad, for example to finish crafting a stroke right away. An ad only plays when you tap to watch one. Ads come from Google AdMob, which gets some information from your device to show an ad and count it: your IP address (which gives a rough location), the kind of device, an identifier for the device that’s only shared within our apps, and how the ad was watched. The game doesn’t ask to track you across other companies’ apps. If you told us you’re under 13, you only get ads that are fit for children, and they aren’t personalised. Where the law asks for it, Google asks for your consent before your first ad.

Deleting it

Settings › Delete account removes your account and everything above from our server for good. The play stats stay, but no longer linked to you. Restart Game in Settings clears this device.