Privacy Policy

Catcha Play ("the Service") is a drawing game in which an AI model guesses what you drew. This policy explains what we collect and why.

What we collect

• Account data. If you sign in, we store your email address and a display name derived from it. Guests get an anonymous account with no personal data.
• Gameplay data. Words you were given, the number of guesses, points, and the drawing you made when a round ended. Drawings that the AI guessed correctly may be shown to other players in the "What is this?" gallery together with your display name.
• Credits and rewards. Your credit balance and the time of your last ad reward, used to prevent abuse.
• Your own API key (optional). If you choose to use your own AI provider key, it is encrypted and stored only in a cookie in your browser. We never store it on our servers or in our database.
• Technical data. Standard server logs (IP address, browser type, timestamps) kept briefly for security and debugging.

How drawings are processed

To play, your drawing is sent to a third-party AI provider (for example Google, OpenAI or Anthropic, directly or via OpenRouter) so the model can guess it and check that it contains no written text. These providers process the image under their own terms. We do not send your email or name with the image.

Cookies and local storage

We use cookies to keep you signed in and, if you add one, to hold your encrypted API key. Your browser's local storage remembers preferences such as custom palettes. If rewarded ads are enabled, the ad provider (Google AdSense) may set its own cookies; see Google's privacy policy for details.

Sharing

We do not sell personal data. Data is shared only with the service providers needed to run the game: our hosting (Cloudflare), database and authentication (Supabase), the AI providers above, and the ad provider if enabled.

Retention and deletion

Gameplay data and drawings are kept while your account exists. You can ask us to delete your account and all associated data at any time using the contact below.

Children

The Service is not directed at children under 13, and we do not knowingly collect their personal data.

Changes

We may update this policy; the date above shows the latest version.

Contact

Questions or deletion requests: reach out via github.com/deepsoilworm.