Privacy policy

Draft prepared 17 October 2026 · English version

This draft describes data handled by the current idrawq app. Controller: Frédéric Verlain, an individual based in France. Privacy contact: fredericverlain3@gmail.com. Postal address: [FILL IN]. Confirm purposes, legal bases, providers and retention against the production deployment.

1. Data the app handles

• Account: username, password hash, optional email address, optional age, account creation time, age-eligibility confirmation time, session data and password-reset token/event records.
• Content: drawings, title, drawing stroke data, profile image selection, comments, reports, and moderation decisions.
• Service activity: likes, ratings, subscriptions, drawing views/attention, marketplace listings and ownership, Quads balance/transactions, and purchase records.
• Technical data: request/security data handled by the app and hosting provider. [FILL IN: exact server logs, IP/device data, hosting and retention].

2. Why and on what basis

Data is used to create and secure accounts, provide feeds and social features, save and display drawings, process reports and moderation, manage Quads and purchases, send password-reset messages, and comply with legal duties. For each purpose, the controller must document the applicable legal basis (such as contract, legitimate interests, consent or legal obligation) and any balancing/consent records: [FILL IN: purpose-to-legal-basis table after review].

3. AI moderation, Stripe and email

If an OpenAI API key is configured, the app sends the normalized drawing image and its title to OpenAI’s moderation endpoint to check for potentially unsafe content. If AI review is unavailable, drawings can remain pending. [FILL IN: provider role/terms, applicable retention and transfer safeguards; confirm current provider documentation].

When a user purchases Quads, checkout and payment are handled by Stripe. Password recovery uses the configured SMTP email provider. The production host and database provider may also process account and technical data. [FILL IN: identify each actual provider, their privacy notices, countries, processor agreements and international transfer safeguards].

4. Public content and sharing

Approved drawings, usernames, profile information selected for display, comments and public activity may be visible to visitors. Pending and quarantined drawings are restricted by the app’s access rules. Avoid including personal or sensitive information in a public drawing, title, comment or profile. If an account that sold drawings is deleted, those drawings remain visible and the author label changes to “Deleted_User.” The app clears the account’s public name, email, age, balance and login credential, but retains a restricted internal placeholder account record to keep the sold drawings linked correctly.

5. Retention

Keep personal data only as long as needed for each purpose and legal requirements. Account deletion removes unsold drawings, drafts, comments, account transactions and payment references from the app; sold drawings remain linked to the internal placeholder described above. [FILL IN: retention period for sold drawings/backups, reports/moderation, security logs, and any payment records retained by Stripe or the production host]. The code alone does not establish the production backup or hosting retention schedule.

6. Your choices and rights

Depending on applicable law, you may have rights to access, correct, erase, restrict or object to processing, portability, and to withdraw consent where processing relies on consent. Contact fredericverlain3@gmail.com; identity checks may be needed. You can also complain to your data protection authority. In France, this is the CNIL. [FILL IN: response process and any applicable representative/DPO details].

7. Cookies and browser storage

The app uses a session cookie for login/session handling, CSRF protection and the visitor’s age-confirmation state. A logged-in account’s age-confirmation time is stored in the account record. The theme preference is saved in browser local storage; a color palette is saved for the browser session. [FILL IN: check host, Stripe, email and any analytics/embedded services for additional cookies or trackers; add consent controls if required].

8. Children and updates

The service has a minimum age of 15 and stores the time an account confirms it meets that minimum. It does not require the user’s date of birth for this check. In France, 15 is the age at which a minor may consent alone to certain personal-data processing based on consent for information society services; it is not a general rule that makes every contract by a minor binding. Privacy contact: fredericverlain3@gmail.com. Policy effective date: [FILL IN]. Material changes will be communicated by [FILL IN: notice method].