Privacy Policy
Last updated: November 10, 2026
Imposketch (“we”, “us”) runs the website imposketch.ioand the Imposketch Android app (together, the “Service”). This page explains what we store about you, why, for how long, and how to delete it.
1. What we collect
1.1 What you give us
- Nickname and avatar— the display name and preset avatar you pick for a room. No real name is needed.
- Drawings, votes and scores— what you draw and how you vote while playing. Drawings from public rooms may later be shown to other players as example or bot drawings, without your name (see section 3).
- Daily challenge entries— the drawing and name you submit, shown in the public gallery for that day, and the ratings you give other entries.
- Account (optional)— you can play without one. If you sign up we store your email address, or your Google account’s email and name if you use Google sign-in, through our authentication provider.
- Coins and cosmetics— your coin balance, how you earned or spent coins, and the stickers and other cosmetics you own. Only signed-in accounts earn coins from play.
- Chat messages— messages you send in a room chat between rounds. Swear words, links and contact details are masked before anyone sees them, and we keep the masked text in our analytics to improve the game and keep chat safe.
- Prompt ideas— word pairs you suggest for the game.
1.2 What we collect automatically
- A random player ID— created on your device the first time you play, so rooms know which seat is yours. It becomes your account ID if you sign up.
- Game activity— when you create or join a room, start a round or vote, with the room code.
- Analytics — we use PostHog (EU cloud) to count page views and game events such as rooms created and rounds played, and to record errors. It uses a random ID that is not your email address and may include recordings of how a session was used. It also receives your device type, browser, language, approximate location derived from your IP address, and the site that sent you.
- Request logs— our hosting and database providers log requests, including IP addresses, for security and debugging.
- Abuse limits— to stop people guessing room codes or flooding the game, we count requests against a salted hash of your IP address and your player ID. We never store the IP address itself.
- Daily reminders— if you turn them on, your browser’s push address and language, so we can send the reminder.
- Advertising ID (Android)— if the Android app shows ads, Google AdMob receives your device’s advertising ID to serve and measure them. You can reset or delete that ID in your Android settings.
2. How we use it
- Run the game: rooms, rounds, voting, the daily challenge, leaderboards and coins.
- Understand which features people use and fix what breaks.
- Detect and prevent abuse, cheating and prohibited content.
- Comply with legal obligations.
We do not sell your personal data. We do not share your nickname, drawings or account details with advertisers. Ad providers set their own cookies or use the advertising ID as described in section 5.
3. How long we keep it
- Live rooms(seats, rounds, drawings and votes) — deleted automatically 3 hours after the room is created. A seat you leave is cleared after 30 minutes without activity.
- Game archive(each round’s prompts, and each player’s drawing and nickname) — kept for 90 days so we can review past games, then deleted automatically.
- Anonymous sketch pool— drawings from public rooms (never private or solo rooms, and never custom prompts) are copied without any name, account or room into a pool. After review, other players can see them as bot drawings and in Daily Lineup. Sketches that are not approved within 60 days are deleted; approved ones are kept while the game runs, and reported ones are pulled.
- Daily challenge entries— kept for 90 days. After that only each day’s top three entries stay, as that day’s winners.
- Game activity log and share counts— kept for 90 days.
- Coins and cosmetics— kept until you delete your account.
- Abuse-limit counters— deleted after one day.
- Account— kept until you delete it.
- Daily reminder subscription— kept until you turn reminders off, your browser expires the subscription, or 60 days pass without a visit.
- Analytics(PostHog) — kept for up to 12 months.
- Request logs— kept by our hosting and database providers for the period their own policies set.
4. Deleting your account
You can delete your account yourself at any time: open your account in the app or on imposketch.io, tap Delete accountand confirm. This deletes your sign-in, coins, cosmetics, daily challenge entries, game archive drawings, activity log and anything left in a live room, straight away. Step-by-step instructions, and how to ask us by email if you can’t sign in, are on the delete your account page.
Analytics are not linked to your account. If you want them removed too, email us and we’ll delete them within 30 days.
5. Your rights (GDPR / CCPA)
Wherever you live, you can ask us to:
- give you a copy of the data we hold about you, in a machine-readable format;
- correct data that is wrong;
- delete your data (see section 4);
- stop or limit how we use it, including for analytics.
Email us at the address below and we’ll answer within 30 days. If you are in the EEA or the UK you can also complain to your local data protection authority.
6. Cookies, local storage and ads
The game stores your session, player ID, settings and local progress (such as streaks) in your browser’s local storage so it works between visits. PostHog uses local storage and cookies to recognise a returning device. You can clear them in your browser settings at any time, which also signs you out.
Advertising
Some content pages on imposketch.io (guides, rules and FAQ) may show ads from Google AdSense, and when enabled the game may show a short Google ad between rounds. Google and its partners use cookies to serve ads based on your visits to this and other websites. In the Android app, ads (if shown) come from Google AdMob and use your advertising ID.
- Opt out of personalised ads at Google Ads Settings, or for other vendors at aboutads.info/choices (youronlinechoices.eu in Europe).
- How Google uses data from sites that use its services: policies.google.com/technologies/partner-sites.
- Visitors in the EEA, the UK and Switzerland are asked for consent through a Google-certified consent message before personalised ads or advertising cookies are used, and can change that choice from the same message.
7. Who processes your data
- Supabase— database and sign-in (supabase.com/privacy).
- Vercel— website hosting (vercel.com/legal/privacy-policy).
- PostHog— product analytics (posthog.com/privacy).
- Google— Google sign-in, AdSense and AdMob ads when enabled, and Google Analytics traffic measurement where it is enabled (policies.google.com/privacy).
8. Children
Imposketch is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has given us personal data, email us and we will delete it.
9. Contact
For privacy questions, data requests or account deletion help:
Email: privacy@imposketch.io
Imposketch is run by Ohad Fisher, an independent developer in Herzliya, Israel.