Privacy Policy

Overview

Country Draw is an anonymous browser game. You can play without creating an account, making a payment, or installing software.

Information We Process

• Drawings and results — Your strokes, score, and round state are processed in your browser so the game can show an immediate local result. When the optional trusted-result service is available, a bounded copy of your completed strokes (up to 128 strokes, 5,000 points, and a 256 KB request) is also sent to our server so it can independently recalculate the result. If that service is unavailable, the round remains local_only and the core game still works.
• Anonymous game credential — The trusted-result service uses an anonymous first-party guest cookie to prove ownership of runs and private results. In production it is an __Host- cookie with Secure, HttpOnly, SameSite=Lax, and Path=/ attributes and no Domain attribute. The database stores an internal guest record, a token selector, and a one-way HMAC rather than the reusable cookie secret. This cookie normally expires after 180 days and is not an account or device fingerprint.
• Trusted-result records — Cloudflare D1 stores the server run, its versioned verified result payload, and a separate private publication record. Unsubmitted runs are normally retained for up to 24 hours. Bounded raw submissions are normally retained for no more than 30 days or until deletion. A verified payload and its publication record are retained while the result remains active, plus any limited deletion or security audit window required to apply the request.
• Unlisted result links and share instances — A verified result remains private until its owner explicitly chooses Copy Link or Web Share. That action changes the publication to unlisted and creates an opaque share instance for the selected channel. The share URL does not encode the guest owner. Share-instance attribution normally expires after 30 days; an expired, disabled, or mismatched share instance cannot grant access to a private or deleted result.
• Generated result images — Country Draw can generate an Open Graph preview and downloadable square or story PNG from the bounded verified result snapshot. The renderer uses the country, score, verdict, simplified public drawing path, sampled error lines, fixed brand text, and a safe anonymous name. It does not load user-provided remote images or execute user HTML/SVG. Local-only rounds can still create a PNG in the browser but cannot create a trusted public result URL.
• Usage and device data — We use Google Analytics to understand visits and general interaction patterns. This may include pages viewed, approximate location, browser and device type, referral source, and technical identifiers.
• Cookies and similar technologies — Google Analytics may use cookies or similar browser storage to measure usage and distinguish visits.

We do not ask for account credentials or payment details as part of the Country Draw game.

How We Use Information

We use analytics information to understand how the game is used, improve reliability and usability, and diagnose technical problems. We do not sell personal information.

The trusted-result records are used to verify a completed round, prevent unauthorized access or duplicate finalization, and provide an unlisted result link only after an explicit share action. Results are private by default. Unlisted result pages are marked noindex, and refreshing a result page or fetching its preview does not create another share instance. Country Draw does not currently use Cloudflare R2 to store drawings or generated images.

Third-Party Processing

Google processes analytics data on our behalf under its own terms and privacy practices. Browser settings, privacy extensions, or consent controls available in your region may let you limit analytics storage or collection.

Data Security and Retention

We use encrypted HTTPS connections and reasonable technical safeguards. Guest and submit bearer secrets are not stored in reusable form, and private result access requires the matching anonymous owner credential. Analytics retention is governed by our Google Analytics configuration and Google's processing systems. No internet service can guarantee absolute security.

Your Choices

You can block or delete analytics cookies through your browser, use privacy-protection tools, or stop using the service. Blocking the anonymous game cookie or trusted-result API prevents server verification but does not prevent the local Start → Drawing → Result flow. Deleting the anonymous game cookie may also remove your ability to prove ownership of private server results.

To request deletion or ask a privacy question, use a contact method that is actually published on the website. We do not publish an email address here that the service has not established. A withdrawn or deleted publication must not continue to expose its drawing through a result response or generated preview.

Changes

We may update this policy when the product or our data practices change. The updated date above shows the latest revision.

Questions

If you have questions about this policy, use any contact method that we publish on the website.